Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: FhUQ+6LIUlZRLmQ9DQRyASUXH8F535bNjD1JNsxQQSE=
Subject key identifier: 27:11:0E:D3:CD:D6:DF:B3:26:33:B0:DB:DB:D5:7E:47:BB:DF:76:EB
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 019F9F5EF1D92CDBC1539A353E9511D846FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0D97
Signing time: Sun 26 Jul 2026 17:00:27 +0000
Manifest this update: Sun 26 Jul 2026 17:00:27 +0000
Manifest next update: Mon 27 Jul 2026 17:00:27 +0000
Files and hashes: 1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: xazvROoHIDq3FsMG/vfPgRuY5SnTU2r9lTnt5eB/wpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:5e:f1:d9:2c:db:c1:53:9a:35:3e:95:11:d8:46:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Jul 26 17:00:27 2026 GMT
Not After : Jul 27 17:00:27 2026 GMT
Subject: CN=27110ed3cdd6dfb32633b0dbdbd57e47bbdf76eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fb:e3:94:48:60:e8:ca:2f:82:55:01:20:e9:
48:bf:6a:17:e4:56:4d:b7:23:0c:4c:32:cf:2b:4b:
c2:18:08:2c:37:c6:0d:17:7a:c0:d3:df:0f:d4:a8:
57:9a:6c:2d:2c:15:5e:1b:e9:00:97:fa:6b:45:cf:
29:9e:9e:9b:05:db:31:1c:38:cf:04:a1:88:41:31:
38:e4:ab:90:01:38:99:96:3a:e2:98:56:1a:bc:15:
9f:94:44:bc:40:85:9a:6c:ea:17:25:4f:e2:45:56:
e3:a7:be:7d:a4:56:ec:9a:22:24:47:c2:f3:83:bb:
c9:2c:33:f8:0f:68:e3:76:db:a1:5c:4e:ea:fe:c1:
87:cb:39:c0:b1:2b:1f:0c:c1:83:cd:2e:af:09:87:
84:63:ac:9f:23:fe:aa:ad:49:3e:01:97:9d:87:2a:
fa:d6:6e:dd:6c:68:b3:55:39:d9:76:96:7a:67:dc:
10:59:ac:d8:bc:38:ea:26:54:77:dd:ba:6d:43:cc:
35:a0:00:59:67:00:df:87:9b:ce:bb:2b:7e:8d:e3:
5e:28:b4:66:44:dc:cd:49:7b:2a:59:4d:bc:7c:8d:
ba:12:8b:92:13:ae:2b:cc:7f:10:3a:3a:71:45:56:
43:c0:39:a9:ca:e3:d4:e9:39:b2:13:e6:c8:8e:92:
e3:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:11:0E:D3:CD:D6:DF:B3:26:33:B0:DB:DB:D5:7E:47:BB:DF:76:EB
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:22:d1:f7:64:82:c1:de:e0:fc:ae:d5:d9:f5:85:02:c6:fd:
1b:a8:b9:05:b2:df:2c:c7:33:9a:64:27:58:ef:04:05:7b:45:
22:f6:27:4a:dd:8f:ab:ff:74:b0:24:89:57:98:37:46:be:45:
65:0d:91:37:bf:00:9d:10:b8:7d:74:60:99:bd:eb:ae:d8:f5:
8a:b6:d2:c5:10:7c:b4:3c:cd:b6:1f:70:b9:82:a7:ca:88:08:
62:94:97:5c:d3:91:60:da:1d:8c:53:90:91:af:c9:3c:e6:a0:
a4:d9:ec:f3:20:1e:5b:6e:b8:f6:a7:e3:2a:38:f7:79:e1:ac:
36:41:ad:77:1b:6c:e9:fb:c1:cd:4c:52:ce:c1:24:dc:25:88:
4f:4c:21:45:d4:92:7b:7e:64:4b:e4:37:f1:d4:5c:50:44:72:
45:1b:ac:2f:32:5d:ef:25:ff:b1:0e:8d:1a:b3:e2:ba:95:45:
70:fa:df:70:29:d5:04:d4:67:c7:54:b8:4d:2b:54:ab:80:95:
d6:f8:23:23:1b:90:68:37:c8:69:20:1d:10:0c:05:6c:22:f1:
25:8a:a9:fe:71:a2:fc:e5:a8:3a:aa:b1:3c:b4:3a:fd:72:47:
3d:62:78:2c:66:9f:9e:ef:91:da:97:ae:93:2d:85:ce:11:e6:
7e:07:1d:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:56 2026 by rpki-client