Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
File: u-kI6KPgpa192pXAYThTfWbqo0E.mft (raw, json)
Hash identifier: qHvTw8mE4QMBcMjogboJVLAOJKZ/LR3jac/4DPvuInk=
Subject key identifier: 45:BA:74:BC:F1:17:43:C5:CF:B6:2D:42:B4:D4:FA:64:84:AC:10:88
Authority key identifier: BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
Certificate issuer: /CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Certificate serial: 019FA296BBE715BCA579C43CEB89664A1E5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
Manifest number: E2
Signing time: Mon 27 Jul 2026 08:00:14 +0000
Manifest this update: Mon 27 Jul 2026 08:00:14 +0000
Manifest next update: Tue 28 Jul 2026 08:00:14 +0000
Files and hashes: 1: VnSCYq6QQmv1dE1dnE9cYopj4go.roa (hash: FEXjLTkNb7gfw7oBQ9cLz74ByuIdmIEBC39hpvpBVm0=)
2: u-kI6KPgpa192pXAYThTfWbqo0E.crl (hash: 0qI8lAXMdytEoWm2XeJ6Yu48l1ShXNHrS18KKqrYdrU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:96:bb:e7:15:bc:a5:79:c4:3c:eb:89:66:4a:1e:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbe908e8a3e0a5ad7dda95c06138537d66eaa341
Validity
Not Before: Jul 27 08:00:14 2026 GMT
Not After : Jul 28 08:00:14 2026 GMT
Subject: CN=45ba74bcf11743c5cfb62d42b4d4fa6484ac1088
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:f2:72:50:a9:ea:e6:29:c6:25:b6:6a:ac:8b:
97:38:dc:ef:b1:37:28:3f:4b:aa:3b:f1:0a:ba:6f:
41:d1:43:e5:4f:19:64:52:a0:34:a5:5f:3d:b2:1c:
5d:b5:cc:4e:2b:09:5b:16:a1:c0:29:39:a0:8a:0d:
b6:ef:f9:c3:43:31:66:56:25:79:69:22:f0:8f:b4:
a4:6e:2f:02:65:c7:e7:c4:1c:8d:49:86:6b:80:ac:
dc:c4:b0:1b:36:d7:48:97:ed:b8:ad:b1:94:c2:8b:
12:3c:02:45:e2:28:f3:87:33:3d:d7:81:e7:c0:3e:
0c:9f:ae:d6:b5:4e:54:68:28:f0:dc:e5:29:51:d9:
41:10:5d:b5:50:75:da:c7:35:a7:a3:90:9c:2c:22:
79:54:99:21:45:75:94:9a:2e:ec:55:ed:19:2b:83:
58:af:c7:f5:f6:0a:b1:6f:b1:19:9d:36:4f:e7:c3:
90:12:29:a8:72:86:19:f1:5f:2e:ec:73:1e:0a:04:
5f:cb:29:49:9e:83:3a:54:24:52:68:8f:bb:42:02:
8e:d6:8b:10:c1:d5:de:c1:15:b7:e7:8e:51:75:92:
17:4d:53:c7:d6:12:90:13:67:37:70:2c:28:49:58:
a6:ab:60:cb:96:7d:9d:a0:91:2e:f8:b4:d0:4f:05:
ef:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:BA:74:BC:F1:17:43:C5:CF:B6:2D:42:B4:D4:FA:64:84:AC:10:88
X509v3 Authority Key Identifier:
keyid:BB:E9:08:E8:A3:E0:A5:AD:7D:DA:95:C0:61:38:53:7D:66:EA:A3:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u-kI6KPgpa192pXAYThTfWbqo0E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/f52efd-73ff-4624-9d27-9a901f5e4263/1/u-kI6KPgpa192pXAYThTfWbqo0E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f7:9c:fa:4b:3b:eb:49:54:7d:47:79:a3:4b:19:54:b8:bd:
d8:20:9f:72:0f:a1:7c:f2:46:54:c7:41:26:6a:fb:7c:45:86:
b6:f1:24:96:4d:83:cc:7f:c3:54:2f:95:e2:87:17:5e:bf:ad:
1f:ca:05:8e:ca:12:22:2e:df:3c:1c:d2:e3:bc:35:15:50:43:
5b:ca:cf:64:3f:c9:c8:27:af:ed:46:27:82:12:bc:7b:f4:2e:
1a:8e:0b:3a:68:d3:e3:59:13:e6:ec:08:52:ca:fa:a2:47:b8:
b7:32:c6:56:e3:64:3e:1e:88:3a:fa:61:9f:88:5b:e1:30:93:
47:f5:3e:05:bb:38:b3:6f:9a:45:4f:5e:48:79:1a:9b:b1:b9:
65:8f:04:be:d4:48:de:ca:ef:f6:ed:33:f6:ba:92:89:d8:8c:
79:cc:a8:dc:10:6f:94:2f:e3:21:4b:b1:a0:e7:cd:1a:4a:07:
03:6b:3a:c4:98:ad:20:42:18:61:b0:c2:7b:c1:0e:01:02:56:
b1:86:e8:44:5b:3f:3b:1e:a0:39:cb:3b:14:52:e4:77:0e:c7:
ad:29:f9:fd:6a:40:8d:e0:cc:34:21:c4:eb:bd:33:31:4a:9a:
b8:91:cb:a2:d3:86:ab:d5:4e:fa:cf:a9:19:f0:04:f5:9b:00:
f4:a9:80:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+ilrvnFbylecQ864lmSh5cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZTkwOGU4YTNlMGE1YWQ3ZGRhOTVjMDYxMzg1MzdkNjZl
YWEzNDEwHhcNMjYwNzI3MDgwMDE0WhcNMjYwNzI4MDgwMDE0WjAzMTEwLwYDVQQD
Eyg0NWJhNzRiY2YxMTc0M2M1Y2ZiNjJkNDJiNGQ0ZmE2NDg0YWMxMDg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPJyUKnq5inGJbZqrIuXONzvsTco
P0uqO/EKum9B0UPlTxlkUqA0pV89shxdtcxOKwlbFqHAKTmgig227/nDQzFmViV5
aSLwj7Skbi8CZcfnxByNSYZrgKzcxLAbNtdIl+24rbGUwosSPAJF4ijzhzM914Hn
wD4Mn67WtU5UaCjw3OUpUdlBEF21UHXaxzWno5CcLCJ5VJkhRXWUmi7sVe0ZK4NY
r8f19gqxb7EZnTZP58OQEimocoYZ8V8u7HMeCgRfyylJnoM6VCRSaI+7QgKO1osQ
wdXewRW3545RdZIXTVPH1hKQE2c3cCwoSVimq2DLln2doJEu+LTQTwXvbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEW6dLzxF0PFz7YtQrTU+mSErBCIMB8GA1UdIwQY
MBaAFLvpCOij4KWtfdqVwGE4U31m6qNBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdS1rSTZLUGdwYTE5MnBYQVlUaFRmV2JxbzBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9mNTJlZmQtNzNmZi00NjI0LTlkMjct
OWE5MDFmNWU0MjYzLzEvdS1rSTZLUGdwYTE5MnBYQVlUaFRmV2JxbzBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9mNTJlZmQtNzNmZi00NjI0LTlkMjctOWE5MDFmNWU0MjYz
LzEvdS1rSTZLUGdwYTE5MnBYQVlUaFRmV2JxbzBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOfec+ks7
60lUfUd5o0sZVLi92CCfcg+hfPJGVMdBJmr7fEWGtvEklk2DzH/DVC+V4ocXXr+t
H8oFjsoSIi7fPBzS47w1FVBDW8rPZD/JyCev7UYnghK8e/QuGo4LOmjT41kT5uwI
Usr6oke4tzLGVuNkPh6IOvphn4hb4TCTR/U+Bbs4s2+aRU9eSHkam7G5ZY8EvtRI
3srv9u0z9rqSidiMecyo3BBvlC/jIUuxoOfNGkoHA2s6xJitIEIYYbDCe8EOAQJW
sYboRFs/Ox6gOcs7FFLkdw7HrSn5/WpAjeDMNCHE670zMUqauJHLotOGq9VO+s+p
GfAE9ZsA9KmAwA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:56 2026 by rpki-client