Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
File: uCMtGd2B1FwlkjrrTZqWhYea76Y.mft (raw, json)
Hash identifier: ECR5v+gvKvrqSv3THJ6Lxsxd7JI7FMnhcwjbW6pE1K8=
Subject key identifier: D7:79:3D:23:56:9F:07:7C:B4:F4:7B:51:5D:8D:E3:F5:FB:7B:AD:2E
Authority key identifier: B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
Certificate issuer: /CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Certificate serial: 019FA14DDB6DA706D9E224B2564D8C7460E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
Manifest number: 1961
Signing time: Mon 27 Jul 2026 02:01:01 +0000
Manifest this update: Mon 27 Jul 2026 02:01:01 +0000
Manifest next update: Tue 28 Jul 2026 02:01:01 +0000
Files and hashes: 1: 1_5h2ktiO2Us-d9_9EOFV58PYPA.roa (hash: sd6598E1QU/JTbPf14WQIor/gpE3yNeo7WtwXbLKg9Y=)
2: czO6xgkAci50_TFJzcGjRe13r4g.roa (hash: 4KOFcwWGmxy1wY3JZJawBiYSYLZnY9/QXxxiekf9mYM=)
3: uCMtGd2B1FwlkjrrTZqWhYea76Y.crl (hash: gD0sRcgAyBcngLIJ0uMr4gdWqSesGwJz/qwyUnYJ9ug=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:db:6d:a7:06:d9:e2:24:b2:56:4d:8c:74:60:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8232d19dd81d45c25923aeb4d9a9685879aefa6
Validity
Not Before: Jul 27 02:01:01 2026 GMT
Not After : Jul 28 02:01:01 2026 GMT
Subject: CN=d7793d23569f077cb4f47b515d8de3f5fb7bad2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:cc:88:8b:db:b2:b2:a8:c1:5e:5c:ed:b2:a4:
bc:01:2d:da:35:1a:7d:e5:c6:24:07:6b:d7:27:87:
60:8b:58:67:2a:34:85:8a:7d:6b:7e:87:4a:cb:5e:
5a:b5:ba:26:d5:b4:21:8e:05:e3:c0:11:83:8a:c4:
db:4f:a6:00:0b:5e:eb:b9:0e:31:f7:94:35:b1:b6:
ea:91:7f:de:31:5b:22:bb:90:61:9a:92:d8:93:b1:
fe:89:f7:37:66:b8:ba:26:0f:1b:9d:f2:6b:e9:c7:
ae:cc:a8:8a:45:c5:ac:26:6a:9a:a3:f1:5a:d6:06:
24:6d:d4:06:f2:2d:c0:2c:4e:98:1a:9a:24:73:90:
7d:a7:8a:f6:b0:39:6c:ba:ee:01:35:33:9d:e3:3b:
e2:e4:38:23:a7:7e:8d:b5:84:22:da:0c:0a:4e:c8:
54:e4:2a:ca:6d:9e:39:8d:c1:5b:81:1d:94:5f:76:
3d:82:25:9f:92:3b:16:d9:4a:dd:ee:2f:05:75:4f:
63:31:e8:b7:cf:fd:7b:52:e8:e6:0e:a3:d9:28:49:
41:62:ca:83:00:c4:8d:ab:f4:f1:02:83:49:54:f4:
86:e4:04:81:70:50:4a:bd:ec:84:da:b4:80:dc:e4:
4f:c5:1d:54:ec:de:2e:17:8a:e9:c3:f7:12:46:e3:
3b:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:79:3D:23:56:9F:07:7C:B4:F4:7B:51:5D:8D:E3:F5:FB:7B:AD:2E
X509v3 Authority Key Identifier:
keyid:B8:23:2D:19:DD:81:D4:5C:25:92:3A:EB:4D:9A:96:85:87:9A:EF:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCMtGd2B1FwlkjrrTZqWhYea76Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3fa718-90c5-426c-b85f-1df09e701434/1/uCMtGd2B1FwlkjrrTZqWhYea76Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:26:cb:dc:ef:be:7c:79:54:b4:96:ee:2c:b9:8e:11:4e:b6:
91:cd:e0:51:ff:72:30:db:c2:b7:ad:1d:eb:15:b2:32:40:4a:
df:f3:ee:cc:b1:6f:cc:38:5a:50:ae:7b:ea:bc:db:cb:c9:20:
a9:49:76:da:1d:28:f1:3b:30:3f:d6:1f:84:bd:ed:06:f6:0c:
3b:f6:c8:88:8a:82:a0:20:2a:db:22:19:6a:d9:a6:27:cd:b6:
88:f9:15:a1:84:9d:f9:2d:63:4b:a0:e3:21:dd:ba:64:2d:ea:
ba:c2:aa:c9:4a:06:8a:20:a6:b7:a2:cb:99:9a:a3:47:13:22:
d1:a6:2d:83:20:ac:f1:33:5b:9b:20:83:d0:fb:1f:83:28:45:
1a:3c:a4:54:c6:22:95:ad:39:7b:00:df:93:4f:65:93:be:da:
3c:c8:0a:b4:6e:ff:06:8a:4a:33:91:d6:9b:af:31:8d:1d:2a:
38:56:e5:5b:d2:75:49:dc:e6:02:6d:8c:4c:a4:04:4e:f9:65:
36:e8:bc:32:a5:28:2d:9a:49:c5:ad:f9:e8:bc:ae:c6:b5:b8:
6a:f0:02:6b:52:20:7b:0e:b9:b8:c9:ed:fb:7c:07:7c:a2:5e:
cd:cc:f6:34:58:40:bf:d9:fb:b0:90:ec:ed:97:08:3f:70:a9:
7a:8a:68:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:19:24 2026 by rpki-client