Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: cumJMoDcyFzl2sm6jQm5GT+62EBaDf0pEeLZ8e0ME3o=
Subject key identifier: F8:DF:1E:32:87:A3:7B:53:78:0B:C5:6C:17:63:F1:02:8A:91:9C:7F
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 019F6D60C586081D674E07C90520BB9F90E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 16D3
Signing time: Fri 17 Jul 2026 00:01:26 +0000
Manifest this update: Fri 17 Jul 2026 00:01:26 +0000
Manifest next update: Sat 18 Jul 2026 00:01:26 +0000
Files and hashes: 1: AWxzzyNyiEe96JGpfTTltwTSHS0.roa (hash: e990mLN/bBQ15JQILJpMpdVXqqpNaInRtBdXK82dx1E=)
2: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: iW/q0dvU8ouOdrFRFd6o7LWhopLHOEBXpvMumRAnDmc=)
3: yHLToeByeR5LXnQLDh6oCy31RMM.roa (hash: JH11seY61l0JGKEmVY9l0Ssg5gMsTcO0W459L08nH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Jul 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6d:60:c5:86:08:1d:67:4e:07:c9:05:20:bb:9f:90:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Jul 17 00:01:26 2026 GMT
Not After : Jul 18 00:01:26 2026 GMT
Subject: CN=f8df1e3287a37b53780bc56c1763f1028a919c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:56:00:7e:e1:75:38:95:5e:4b:a0:31:63:28:
38:61:47:de:0c:03:26:6a:90:a7:b9:72:c9:e9:fb:
3f:f1:a1:99:6e:1d:de:b9:9c:5e:94:b2:33:20:9f:
e8:3e:a7:7e:86:c8:df:18:b1:9f:65:8b:a2:7c:59:
0d:5c:63:d8:6f:f4:04:cf:96:af:b9:5f:db:1c:e6:
c6:95:83:8f:ec:9f:15:2a:09:17:9b:44:e7:7c:4a:
1b:fa:3c:9a:c8:4a:97:a3:09:fd:41:34:bf:7c:60:
12:aa:a6:a5:2c:06:93:ec:8a:c5:0a:3f:a2:b7:e5:
95:25:08:87:84:83:f1:59:e4:39:06:a1:cb:70:db:
26:49:d3:b9:9f:9f:46:03:ac:69:3a:8a:91:8e:e4:
28:64:3a:d5:05:91:8b:1e:85:72:cb:4e:e1:35:64:
b5:91:a0:92:3b:0d:f5:80:ef:19:58:f4:53:3a:f7:
24:6f:af:c5:e4:f6:19:fd:2c:0a:97:88:f1:86:d1:
eb:66:6c:47:ff:b1:25:68:17:80:d1:05:7f:70:9d:
5d:ef:81:ec:20:ed:69:02:b3:e4:56:41:bb:77:dc:
16:a4:cd:f2:15:56:2f:8d:45:2f:21:a7:0e:f6:fc:
41:ae:11:89:db:e9:f0:54:6a:6e:e2:21:0d:dd:5c:
2b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:DF:1E:32:87:A3:7B:53:78:0B:C5:6C:17:63:F1:02:8A:91:9C:7F
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5d:86:c5:30:a0:5c:ca:bb:76:b2:6d:f7:84:61:36:82:db:
58:eb:43:a6:2d:1e:7b:d6:1b:5a:98:82:45:cc:29:bc:d7:6e:
ac:3b:c6:55:a5:5e:d4:fd:f9:4d:f7:d0:10:ed:f6:ed:9c:b3:
c6:62:8f:48:fe:23:9b:b6:29:21:d5:78:c4:d5:d6:e2:40:ff:
01:30:45:c7:c0:7e:35:57:c6:15:6b:7d:a1:e3:3e:f3:36:05:
2b:6a:ce:96:24:dc:1b:13:58:f9:f9:9b:57:54:03:ab:10:bd:
b7:a8:fe:b9:5c:46:72:60:0c:c1:ed:bf:54:15:ae:ba:2d:cd:
e1:4f:19:7c:52:ff:d5:81:50:38:95:ee:3a:f4:28:8d:67:94:
a4:98:d9:22:ec:7d:ee:6c:a4:7f:aa:d9:c3:23:f2:72:ec:ad:
3d:5b:09:8f:01:42:13:dd:ea:8c:d8:17:b5:f9:ee:83:13:47:
ca:19:c6:d4:ad:96:51:ac:1a:e0:38:d5:07:54:5e:2e:01:73:
8f:da:fe:35:96:30:fc:ba:2c:24:b2:ee:b3:ad:d6:59:eb:66:
58:35:8f:e9:d2:59:23:0e:88:d7:82:41:c0:43:f7:29:9f:e6:
47:5f:1d:5e:b9:bf:34:ab:26:c6:12:ac:a7:16:18:f5:6f:52:
5a:f3:95:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 17 02:28:20 2026 by rpki-client