Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: HZJw3rtgjFqfIZum5t8Yu+zVZzgA0jjxUkX/4JNb+uY=
Subject key identifier: C5:90:26:B1:80:8C:3E:3D:86:90:F0:AC:C3:E4:3A:77:14:99:F5:92
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 019FA29717E07A0ACDDB86DE833B4B23B6AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 16F1
Signing time: Mon 27 Jul 2026 08:00:38 +0000
Manifest this update: Mon 27 Jul 2026 08:00:38 +0000
Manifest next update: Tue 28 Jul 2026 08:00:38 +0000
Files and hashes: 1: 8MHx6pFnKDbOJZCL45Uqeu0OuEw.roa (hash: WqOpKbFAaR3JLKnMgyYQifvHuuro/dU0rsdqEF+6ZxA=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: Sjpa+kWQXWf33ZqjkOyNM6Cf/7djhoIbDWDS/5xfnzc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:17:e0:7a:0a:cd:db:86:de:83:3b:4b:23:b6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Jul 27 08:00:38 2026 GMT
Not After : Jul 28 08:00:38 2026 GMT
Subject: CN=c59026b1808c3e3d8690f0acc3e43a771499f592
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:7c:e1:67:7a:2e:58:63:8f:67:95:6d:cd:81:
c0:74:a1:24:af:82:a1:c2:c8:0d:50:fc:56:3c:a8:
be:24:d6:02:09:73:6e:28:92:e7:6a:9f:1d:26:cc:
e5:39:1c:fb:6d:68:42:c6:72:39:bf:57:dd:f8:52:
fb:cc:b4:b1:56:b2:8b:9b:c1:45:f8:28:f2:cb:61:
76:4d:18:cd:ad:68:f7:ce:ef:81:0e:3d:85:00:a3:
9e:ea:66:f2:14:2d:76:7d:36:41:6d:f0:ff:87:25:
44:5e:a9:21:b6:e6:e6:ac:2f:a3:42:b9:d1:f9:ba:
64:1b:f0:60:59:f8:46:a2:80:a8:65:9d:07:65:ef:
50:3e:03:e8:f0:55:3f:f2:60:bc:85:51:22:63:ad:
45:86:b3:ab:41:e6:2a:e3:97:47:e8:37:f1:05:7a:
2c:41:92:a5:3c:56:32:01:cb:24:c5:f5:e3:7d:32:
3b:c0:39:40:8a:80:5b:62:18:70:71:ef:88:8a:66:
3d:90:96:8b:9b:a1:e3:d7:13:90:e6:43:90:08:4f:
93:9e:d1:15:01:41:6e:ed:a8:1e:92:0f:77:4b:3e:
83:c1:35:fc:c1:d4:84:b6:b7:a3:e4:78:81:bb:c0:
62:05:ec:56:5d:85:2b:72:d6:8c:d3:b8:fa:0f:38:
36:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:90:26:B1:80:8C:3E:3D:86:90:F0:AC:C3:E4:3A:77:14:99:F5:92
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:27:7e:c5:87:c9:cb:3d:e1:06:54:8d:ed:5e:f5:1b:ff:b0:
b9:c0:9c:84:47:a3:39:7f:f3:93:ad:82:55:96:6a:65:09:f9:
4c:0f:bb:d7:5a:51:b9:16:b6:f0:d8:e7:81:e4:40:b9:d4:bd:
dc:f5:cb:52:0e:cb:e2:6b:34:0a:3d:38:db:0b:db:4c:22:40:
0b:16:3d:be:ae:75:23:bd:49:dc:25:d2:f3:fa:8f:6c:1b:01:
8d:49:9f:e4:9d:bd:23:87:66:8e:b4:a4:7f:4d:e1:5d:89:6d:
4f:2d:f1:2c:fd:7e:9b:75:55:aa:a2:12:d0:bc:57:d5:32:54:
8b:49:ed:a7:4d:10:72:80:5b:d7:f0:f6:3f:d0:49:15:35:08:
80:fd:7d:ce:56:51:de:de:4b:14:5a:e9:3a:e3:ac:69:81:3e:
7a:9f:26:52:74:e8:bf:00:17:e0:81:d6:9d:cf:df:89:6d:60:
d4:5f:98:06:90:14:81:a8:74:f8:e6:3b:13:03:49:fc:ad:18:
b2:63:85:89:84:c8:7c:1d:de:26:a2:45:ae:6d:94:c7:18:11:
b0:18:23:dd:bf:62:19:43:7b:fd:81:4b:d3:ef:f2:5a:97:c8:
a9:cc:04:1f:46:79:33:3b:f0:d6:71:aa:3e:56:6b:5a:67:59:
fe:a8:80:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:03:17 2026 by rpki-client