Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
File: Uo017K6KUozuxk3jvWO3P6QtX0o.mft (raw, json)
Hash identifier: SbQwYdFWB+XUr6sRhpRaaN589+ToUHA/7f10ddAhNxI=
Subject key identifier: 7F:17:06:BF:A5:7F:8C:CF:8F:30:45:D3:A1:7C:30:72:CC:F2:A0:9F
Authority key identifier: 52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
Certificate issuer: /CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Certificate serial: 019FA14E2DFADF7774913334E6850DD8CB95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
Manifest number: 0DFB
Signing time: Mon 27 Jul 2026 02:01:23 +0000
Manifest this update: Mon 27 Jul 2026 02:01:23 +0000
Manifest next update: Tue 28 Jul 2026 02:01:23 +0000
Files and hashes: 1: Uo017K6KUozuxk3jvWO3P6QtX0o.crl (hash: KK/0Jq6c8W9zPLv7Xc6f25B+GwJwsuKuym+PVtTJ8Qs=)
2: jmmeH3G-Gl7O7CxO9eM1m6xDfME.roa (hash: Wq2XWQbDU1erZ3uKJEqO1ZrsNU8Z2zdZsF7YP6SoAlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:2d:fa:df:77:74:91:33:34:e6:85:0d:d8:cb:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d35ecae8a528ceec64de3bd63b73fa42d5f4a
Validity
Not Before: Jul 27 02:01:23 2026 GMT
Not After : Jul 28 02:01:23 2026 GMT
Subject: CN=7f1706bfa57f8ccf8f3045d3a17c3072ccf2a09f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2f:fe:88:6c:06:63:dc:86:5a:e6:b8:cb:42:
cc:16:33:3c:0b:0d:5c:b7:35:43:c9:e1:ae:9e:8f:
db:0e:24:5b:17:70:09:8d:92:af:2d:d0:d8:20:2f:
c4:c9:64:5a:2e:c1:8f:af:c6:2a:07:f8:69:ce:2f:
c5:af:b3:85:af:b4:cd:8b:ca:56:96:37:f5:34:36:
3c:9b:e1:12:90:ae:6f:66:a4:2c:6c:f3:9d:03:40:
05:c6:8f:80:19:29:a7:58:a8:44:c2:42:5d:e3:14:
ed:31:a3:44:ce:06:46:e5:47:39:bb:7a:f5:80:7b:
bc:8f:2d:ed:6b:f1:0c:2d:ed:42:38:ee:1e:b6:4d:
19:02:e0:97:9b:02:eb:bc:25:e8:1c:32:ff:5d:52:
96:75:2a:5b:20:52:c3:c2:b9:77:d2:64:7e:b6:25:
1f:96:aa:4e:94:a6:e9:a0:2b:a4:45:be:43:8d:24:
91:bc:d3:81:2c:cb:32:46:f0:81:d0:28:3e:c3:b3:
51:ba:a7:70:c7:c5:1c:71:64:d4:20:bc:71:5e:43:
04:31:b2:62:80:31:36:2a:0f:87:f2:72:12:ec:e7:
b8:25:3c:82:2d:df:87:ec:87:be:5c:20:4f:09:95:
32:1e:33:7e:21:4b:0c:f6:af:80:f9:cc:ab:52:54:
a5:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:17:06:BF:A5:7F:8C:CF:8F:30:45:D3:A1:7C:30:72:CC:F2:A0:9F
X509v3 Authority Key Identifier:
keyid:52:8D:35:EC:AE:8A:52:8C:EE:C6:4D:E3:BD:63:B7:3F:A4:2D:5F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo017K6KUozuxk3jvWO3P6QtX0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/303a43-a185-4973-86ab-7a3720d3cffc/1/Uo017K6KUozuxk3jvWO3P6QtX0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f3:f7:40:77:75:65:10:dd:c9:f7:c1:b6:41:66:98:4d:e8:
d5:b1:c5:a9:48:db:14:ad:43:47:2b:88:63:b8:b3:40:c0:5b:
91:26:c5:fd:40:83:ec:e6:6a:2b:cc:35:23:23:b2:e9:3d:c0:
18:46:37:c3:7a:e7:08:7e:9c:e8:16:a0:39:17:f8:3b:2c:c3:
7d:84:8c:63:1b:11:c8:53:30:de:3a:c7:1f:5a:ad:ef:e1:df:
7a:6a:9a:ac:26:f2:8e:b1:c7:a1:23:b9:89:9c:3b:3f:68:b9:
4f:40:43:bb:3e:8b:66:2b:bc:ef:9d:92:59:df:3c:45:16:4c:
7f:10:a2:04:e8:bb:24:c1:ac:a2:14:1f:a5:65:f0:92:3e:a6:
5a:9b:d1:4c:0e:6b:03:c4:21:86:3d:46:f4:4e:33:49:d0:23:
30:62:96:a7:b1:e8:57:e3:9a:1b:ec:06:8f:59:4d:9c:18:06:
0b:f6:1a:14:bb:e0:ba:07:82:ad:33:55:f8:a2:23:6e:77:fd:
74:0c:99:8f:d7:55:ec:ac:99:fe:10:e2:0f:5f:00:38:6f:46:
c7:f8:e7:89:53:eb:9f:8b:2f:85:b7:94:66:2f:b5:ee:60:4c:
90:63:4a:5f:c7:e4:ea:88:ee:32:bf:fd:95:b1:a2:82:b7:cd:
39:3e:b4:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:37:10 2026 by rpki-client