Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: nNNd3ogFqiVpfJQOBVlE2HGD2sHjcsFgwTCBJIjBcUk=
Subject key identifier: 4E:70:1B:51:27:D0:35:D9:57:08:8F:A6:D6:51:FD:47:51:69:E1:E3
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 01A002B8900E00163FDF9F2AF46F19A298E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 1032
Signing time: Sat 15 Aug 2026 00:00:44 +0000
Manifest this update: Sat 15 Aug 2026 00:00:44 +0000
Manifest next update: Sun 16 Aug 2026 00:00:44 +0000
Files and hashes: 1: sQXNrRfabqEAqxGuf8P5f2NecXw.roa (hash: 2PpXo8MephsPJxKEGzhYMR57A346BOGMuHA13iu9pZo=)
2: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: ucz05sy+zL8c3poG5dmiGlH+q6I6MegchM12sX9FA7Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:b8:90:0e:00:16:3f:df:9f:2a:f4:6f:19:a2:98:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Aug 15 00:00:44 2026 GMT
Not After : Aug 16 00:00:44 2026 GMT
Subject: CN=4e701b5127d035d957088fa6d651fd475169e1e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:9d:13:1b:19:be:23:79:53:f4:69:f7:60:9a:
19:6d:af:38:90:d1:8c:be:71:39:ab:bc:23:64:a7:
2b:50:64:e0:e8:8f:1a:33:63:c8:e3:25:e4:1e:ec:
1d:8a:bd:c6:7a:8c:ff:d4:30:77:e6:29:08:c0:3d:
64:ae:2a:b8:9e:70:4a:8b:96:a4:70:f2:3f:25:42:
af:3a:98:b2:c7:67:3f:a1:25:9b:a8:50:ba:02:00:
7e:10:89:d2:2b:4a:19:62:98:99:e4:c6:33:1f:66:
11:12:92:f2:34:a5:5f:a2:2b:c4:a7:1c:76:63:76:
64:f4:45:6a:f2:4a:9f:b0:59:fc:f5:1b:8e:7f:1e:
13:b5:09:4d:d1:62:9f:79:bd:09:cc:5a:df:ba:ec:
99:d7:ec:15:62:40:29:42:ea:fd:1c:9d:f0:0f:83:
86:0a:52:5d:28:92:19:f7:ce:4a:eb:b1:bc:3c:21:
c0:88:8b:d6:e6:45:67:80:a9:45:02:68:5f:37:4c:
d3:e6:0c:4a:01:c4:fb:4f:95:10:c6:5a:8f:ec:1b:
79:31:68:b1:a8:ed:7e:1b:d6:12:8c:49:a7:fe:3e:
8d:4d:19:34:1c:b4:81:0a:f4:2d:f1:34:74:aa:35:
0e:16:f8:16:c5:95:30:64:c2:af:8a:63:32:d3:da:
62:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:70:1B:51:27:D0:35:D9:57:08:8F:A6:D6:51:FD:47:51:69:E1:E3
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:75:36:2c:27:d3:b1:68:04:bd:8b:f1:26:81:67:f5:c8:87:
f8:1c:fa:57:20:c5:e5:db:4d:9e:a1:d4:a8:35:4f:9b:db:fc:
56:05:9e:12:ac:53:b7:14:6b:ff:a8:84:68:20:ff:d2:61:7c:
18:da:50:b4:65:16:d6:c6:55:82:94:40:8e:7f:f6:b9:64:cd:
9a:73:c1:49:2c:dd:69:82:12:e8:1b:da:6a:36:ca:ef:6e:61:
6b:ae:84:aa:79:ef:a3:e0:99:2f:e3:7e:37:96:98:3a:c9:0a:
52:d3:44:0a:5a:4a:29:38:16:ff:36:a8:71:c3:33:cf:b8:48:
30:e9:b0:dc:81:da:41:4f:63:ea:90:3a:6f:71:54:cb:cd:3a:
96:5a:09:da:97:e5:92:1d:96:89:15:f0:08:d0:1e:cb:39:8d:
8a:23:50:f6:ba:38:d9:62:7b:7a:73:52:d5:1b:18:7f:0b:5b:
a1:86:51:b2:0d:6a:1b:bf:4a:83:34:74:8d:9e:cc:27:6b:2d:
85:96:31:fa:43:18:26:62:4b:87:46:a5:ab:03:5c:3e:f0:73:
81:2a:6d:96:d2:31:1b:00:0d:d9:e8:77:d0:82:5e:b9:bb:8f:
50:3c:a9:f6:b6:ce:6e:68:ad:4b:ba:19:2c:73:38:56:97:98:
ba:3f:78:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:03 2026 by rpki-client