Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: a1p1LGsflCDfg+7KdfnDxqA262KPHeA6VKXNETIjQ5I=
Subject key identifier: D3:A6:17:7F:9A:66:B0:50:96:86:75:8E:9B:C8:24:D0:C6:35:91:E9
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019F14C1BBFCA7B10625B095769BA42D24B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 19:01:08 +0000
Manifest this update: Mon 29 Jun 2026 19:01:08 +0000
Manifest next update: Tue 30 Jun 2026 19:01:08 +0000
Files and hashes: 1: KlidTRE0Ld2vhd7LchTBrjDXtCM.roa (hash: oYu7FrAcgyOmxnR9Y/a2v7qA05r9PwyCGoG1X5C3eMU=)
2: OpXaDaqMLnQD8_pmVps5LotevYs.roa (hash: OtMNohCL4mtMzZIbyNI3YgTQ7sw7Te2CDE8+86NkE1M=)
3: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: w7VgkngnFcNYO8KVmu+luJ9dPyUJOQghHEj9U9h3nnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:c1:bb:fc:a7:b1:06:25:b0:95:76:9b:a4:2d:24:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jun 29 19:01:08 2026 GMT
Not After : Jun 30 19:01:08 2026 GMT
Subject: CN=d3a6177f9a66b0509686758e9bc824d0c63591e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f5:fa:df:e2:92:11:d0:34:ea:ea:43:99:b1:
a2:90:8b:a9:fd:97:57:fd:19:75:23:bf:2f:ed:9c:
fd:cc:7d:f4:85:03:ea:b6:0d:46:d7:1a:7d:f3:92:
36:d1:05:99:ab:4a:13:e5:76:51:ae:77:4b:c0:61:
1f:49:20:55:24:39:b8:d4:5a:bb:0c:38:e2:cc:61:
18:3c:e7:2a:8e:ad:f7:f8:94:41:12:58:4d:02:de:
38:22:c4:f7:7d:9e:51:f3:e9:3d:ac:2c:33:56:e9:
5e:41:00:80:e5:35:25:97:6f:24:09:c5:86:64:31:
9e:4a:6a:c7:21:bd:97:71:75:d7:0d:2b:da:8b:c7:
3a:be:83:11:7c:30:8f:54:f5:c1:a9:af:b0:6f:a5:
75:09:75:b9:63:4a:31:d6:c7:e9:fc:64:ae:3c:5e:
e8:fd:b6:cc:26:86:cf:8e:87:33:8e:b5:9b:5c:f7:
a9:cb:61:06:bb:dc:fe:1b:ac:ea:95:88:3c:60:1c:
55:6f:a6:05:05:7e:64:dc:7c:11:d3:18:44:97:29:
e0:32:61:f9:b5:0a:bc:37:81:dc:c5:6d:98:68:ae:
21:93:58:d6:e4:17:f1:93:7c:ea:f4:12:36:35:2e:
e5:e1:85:95:ea:8e:ce:47:bd:95:f9:3f:7e:23:66:
cb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:A6:17:7F:9A:66:B0:50:96:86:75:8E:9B:C8:24:D0:C6:35:91:E9
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:64:15:75:5a:84:ae:9a:d3:b2:96:3d:c9:95:20:60:27:5d:
a0:a0:5f:29:33:15:11:07:18:05:69:25:2c:22:d0:d1:d6:a4:
d6:f8:18:b4:03:a8:91:39:64:69:64:36:a3:35:44:68:81:3a:
22:90:5f:33:9c:2e:3c:34:ee:a1:da:79:7c:e3:06:df:55:6e:
ba:68:5d:f1:d1:22:d4:71:ec:72:e5:7e:88:fb:6a:2e:fb:ec:
ac:0e:b9:f8:d5:9b:bc:99:f5:8d:34:8e:a9:51:13:88:6b:9f:
aa:f4:52:60:99:cd:7b:f8:a7:8e:d7:cc:80:40:0e:4c:b2:7a:
34:69:36:fd:2a:9b:85:5c:df:02:0c:3d:ed:51:3e:18:af:42:
a7:82:1e:2a:82:18:00:fb:57:9c:ba:95:c1:31:c0:e2:82:ed:
52:90:31:11:21:29:c0:24:67:72:89:42:a1:46:7a:9a:8a:01:
34:2e:14:75:99:ee:ad:c4:ab:02:8f:4d:a8:c3:71:eb:32:13:
f4:8b:a2:24:24:6c:90:ed:b4:b2:9d:b5:f6:bf:7c:28:da:b8:
f0:ee:dd:0f:fa:c1:98:06:09:3b:e2:2b:72:62:c2:4f:63:e5:
0c:53:8e:5a:1f:11:6a:83:c3:7f:30:de:36:91:9c:ce:51:81:
90:d3:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 00:31:42 2026 by rpki-client