Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
File: fUFb7iIlhfLRqvv_unlQMaRRKcc.mft (raw, json)
Hash identifier: urysUcorRJCtMftCF+d13HQ5KOBzwi2sSKmf6FR44hU=
Subject key identifier: 2B:CA:CA:3B:0C:AE:4B:8E:DC:AD:6C:98:2C:8A:BB:34:C8:4D:86:56
Authority key identifier: 7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
Certificate issuer: /CN=7d415bee222585f2d1aafbffba795031a45129c7
Certificate serial: 019F11532DBF3022B83560EDF71E5F6AE116
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
Manifest number: 028B
Signing time: Mon 29 Jun 2026 03:01:31 +0000
Manifest this update: Mon 29 Jun 2026 03:01:31 +0000
Manifest next update: Tue 30 Jun 2026 03:01:31 +0000
Files and hashes: 1: EpAV40Ub4Qhm2LrtJvF107eivE0.roa (hash: yMZ2WZA3sacKoy7tu2K5tKAGLGICOq7tZTEgNmenhaU=)
2: az7D72m3aRzcMGuqVgsus2HYPJI.asa (hash: UYH2LQP6yhA1ucYPAXvinazn/8R7Ym8Hnb5ZSwGQQiU=)
3: fUFb7iIlhfLRqvv_unlQMaRRKcc.crl (hash: xXEISaK3MssbRYvha9l6kNGoReJjgmW8GIOYqTMcQZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:53:2d:bf:30:22:b8:35:60:ed:f7:1e:5f:6a:e1:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d415bee222585f2d1aafbffba795031a45129c7
Validity
Not Before: Jun 29 03:01:31 2026 GMT
Not After : Jun 30 03:01:31 2026 GMT
Subject: CN=2bcaca3b0cae4b8edcad6c982c8abb34c84d8656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e9:5b:7d:71:bb:7d:ec:d7:ba:f0:ae:fa:ec:
45:d7:cb:23:b5:e4:f6:3b:65:77:28:bf:94:b0:f8:
94:ea:7a:f2:ae:3d:c4:53:52:33:42:1f:36:9b:d5:
fb:78:08:4c:31:6f:c9:89:80:0d:69:76:75:55:58:
b9:df:f8:8c:4a:27:4c:39:50:a2:9e:fa:50:7e:75:
20:c7:b5:99:d2:06:e1:d8:d7:e8:14:e3:24:ce:ed:
ba:49:c7:45:fd:83:2b:df:72:25:91:8b:d3:d3:35:
b7:c4:37:75:62:2d:95:90:87:30:30:37:1a:95:46:
99:f0:cf:d7:7f:fd:99:c7:ea:08:fd:47:ec:56:0c:
ff:a9:0e:f8:da:3b:d6:3f:05:ed:65:83:b2:6a:e6:
62:35:18:95:b3:7a:b7:96:50:87:e4:29:19:5c:15:
ce:bc:e6:5b:73:7c:35:a6:dc:71:a5:c2:59:bc:40:
83:00:56:75:15:3d:e6:12:97:de:9d:7b:f9:bb:a2:
42:ea:10:10:cd:5a:ae:be:b1:a0:bd:a1:88:68:9b:
1d:43:c2:ae:fa:bb:39:01:1a:ad:34:e7:f9:e3:91:
71:ac:55:d2:3f:83:b6:01:ac:3a:96:f7:df:d2:e4:
9c:da:fe:52:e5:5c:04:1d:46:f0:e3:65:41:02:6f:
50:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CA:CA:3B:0C:AE:4B:8E:DC:AD:6C:98:2C:8A:BB:34:C8:4D:86:56
X509v3 Authority Key Identifier:
keyid:7D:41:5B:EE:22:25:85:F2:D1:AA:FB:FF:BA:79:50:31:A4:51:29:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fUFb7iIlhfLRqvv_unlQMaRRKcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2d4419-2eb6-4a73-99f4-2cd4bf27b67d/1/fUFb7iIlhfLRqvv_unlQMaRRKcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:58:ef:71:15:b6:8f:c7:35:d6:0e:66:df:6c:17:4d:78:55:
28:2a:e8:86:63:20:7e:b8:a0:c5:23:ce:15:19:aa:57:29:82:
41:ef:d8:c0:a5:90:8e:15:95:b3:16:4b:02:a4:ac:75:a0:2a:
ab:d8:4f:e7:b3:6e:9d:b3:8b:7c:dd:93:d6:e8:10:49:9c:54:
84:b9:ac:43:68:bf:53:58:08:0a:f9:b5:45:3e:ef:e6:03:31:
06:97:b0:b8:7d:12:73:37:08:68:7e:1f:37:92:e3:79:31:4e:
b1:f9:3f:01:39:5c:da:8e:db:ab:3b:c9:45:ff:2a:de:65:68:
32:1a:5c:ce:f5:c7:48:9d:b0:92:1f:8b:71:62:dc:05:2c:01:
e7:3f:94:f7:c4:b4:6c:2c:63:b0:56:59:b5:af:d4:8e:f6:18:
49:b4:b3:a0:2d:d0:ee:4c:bf:e7:2b:20:74:0f:d1:26:f1:d2:
56:fe:dd:c9:e9:b5:06:1a:36:5f:82:f2:00:52:34:a5:4f:49:
f9:4e:dd:8d:b8:e7:52:95:24:b3:40:2e:51:27:5a:6a:66:8d:
49:b3:c0:e5:29:19:33:12:65:56:62:d4:15:3e:e8:e5:b4:ae:
de:25:bd:ba:d4:97:8d:96:62:15:c5:fd:36:c3:bb:2c:7d:d1:
24:e2:a1:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:58 2026 by rpki-client