
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: MHnh2DjtNYNKzPFcjIgQzg6k8WCXxSZ2NGmwmb9RdOA=
Subject key identifier: 53:F7:25:B1:EB:DB:42:86:BA:24:2B:4A:51:73:03:E4:71:37:AE:1E
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 019F84FA842E30F9D776287CFA52030A256D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 19C0
Signing time: Tue 21 Jul 2026 14:00:38 +0000
Manifest this update: Tue 21 Jul 2026 14:00:38 +0000
Manifest next update: Wed 22 Jul 2026 14:00:38 +0000
Files and hashes: 1: EKN-VhfSh7NqAUTwaEDwo-mbUcg.roa (hash: RURLvfa0vZeEDe5BKC7vJtcjJKvo0nmsNWlb1Fca1bg=)
2: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: HwaxmtNJL0GpGBqn6S/xfCoq36O3ea44D8cch3LuB8Q=)
3: z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa (hash: sXhfTVz/7doOZGLXSWgTb9dJ0tx/PZHzsugITkY48mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:fa:84:2e:30:f9:d7:76:28:7c:fa:52:03:0a:25:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Jul 21 14:00:38 2026 GMT
Not After : Jul 22 14:00:38 2026 GMT
Subject: CN=53f725b1ebdb4286ba242b4a517303e47137ae1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:d6:a5:8b:e3:90:79:5c:18:3f:82:66:f7:83:
de:cf:2a:aa:da:ee:fc:42:c0:f2:a5:76:ae:4b:30:
01:d8:8d:50:a1:28:7a:42:af:e0:75:e7:93:2f:3f:
f7:93:dc:3a:2e:04:1b:90:47:d0:44:ba:b8:b1:66:
7f:c2:5e:6b:10:8a:a1:75:43:54:92:89:df:e1:3c:
77:ce:aa:d6:b9:60:30:a1:29:2f:99:cb:db:80:1a:
86:a4:3f:c6:17:9a:66:65:06:bc:8e:83:f4:e2:38:
a2:75:e1:8f:6f:7d:72:6d:15:9c:de:24:b0:5c:f1:
53:b6:37:d2:b5:08:f2:3c:82:e9:b0:9c:b3:21:bd:
d0:dd:58:4f:c6:34:3d:c7:94:2f:88:f0:62:27:83:
ee:45:9f:24:81:e4:ce:ba:6c:41:a6:e6:7d:e3:58:
a1:ba:5e:90:94:39:0a:84:fc:ec:21:d8:0c:4a:8a:
a1:af:c6:21:53:60:4f:81:d8:aa:c5:36:61:72:10:
98:80:5e:b5:35:71:3b:58:a3:27:22:f2:db:3a:6c:
5e:ee:c1:83:39:cf:b7:65:f1:53:c0:34:7b:52:ac:
a0:44:f1:7b:38:66:ad:15:0a:33:6f:0a:11:f9:9d:
5f:70:cf:ce:62:a9:24:ea:6a:58:3f:b3:73:e7:7d:
92:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F7:25:B1:EB:DB:42:86:BA:24:2B:4A:51:73:03:E4:71:37:AE:1E
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1f:9b:b8:a1:93:ad:dc:be:a6:93:47:76:00:7f:3c:9c:56:
65:38:13:8b:ce:13:0f:14:c6:5d:25:93:02:60:6f:30:a4:3c:
7d:da:7f:f4:94:96:80:91:cd:94:c2:3b:bc:a6:ee:a9:92:39:
1a:25:25:b3:5b:94:05:49:87:f5:a2:dc:6e:fc:e8:92:f0:71:
f7:18:90:9b:da:0b:82:51:85:83:74:d1:55:11:b5:93:4f:9a:
ff:60:25:1c:a4:4f:44:dc:54:f8:bb:e9:ac:55:46:1a:c4:9c:
1f:1e:89:fc:f3:9a:e1:f9:c1:bb:87:f6:9e:55:bd:5e:92:87:
18:77:34:70:25:72:48:6a:50:8b:7c:33:cd:e0:f1:8a:00:05:
49:c1:0b:32:0c:15:48:95:09:fa:08:38:23:ad:ce:42:e9:7e:
81:79:39:79:06:b0:bc:fa:2f:93:e8:ed:8f:ba:81:c6:6e:97:
a5:30:e2:df:62:6b:3c:c8:65:94:46:c6:d0:7b:c6:53:57:05:
fb:84:00:e7:39:11:d0:a0:9e:53:08:8d:f7:95:45:37:f4:cd:
84:6f:43:9e:54:5a:08:b5:32:76:4a:aa:ae:fd:60:0a:54:16:
f7:23:b3:8a:23:83:3b:0d:06:bf:89:ca:c6:18:4d:a8:a0:b6:
ea:34:5c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:05:05 2026 by rpki-client