Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: LLFWAmzzGdhzazxi5T+DlOM8ms5aYjZoyXsTPy1GxFI=
Subject key identifier: 39:28:34:7C:8D:0E:09:FE:43:64:46:E1:12:73:E4:A4:6B:33:23:B9
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 01A03CDF86330852BB693A4EB2CCC4014967
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 19E5
Signing time: Wed 26 Aug 2026 07:01:16 +0000
Manifest this update: Wed 26 Aug 2026 07:01:16 +0000
Manifest next update: Thu 27 Aug 2026 07:01:16 +0000
Files and hashes: 1: 4vljd6eS7xs98V4vbQdU27KIRbo.roa (hash: p9Wr9nNkj4z/XeaCt1WGEIqENx+18d7M1y0DLvifYF0=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: Z+UZz3SWvI+nsqZvvl2llqJJ1DSlNRNxpRVbFILj3Iw=)
3: uUX1xSwp1T9nuxxoEoS7mJ4ylKQ.asa (hash: ARnmi9JFKrZP1rcaarKtNChdLdy0XQtmO2iQxRYVYjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:df:86:33:08:52:bb:69:3a:4e:b2:cc:c4:01:49:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Aug 26 07:01:16 2026 GMT
Not After : Aug 27 07:01:16 2026 GMT
Subject: CN=3928347c8d0e09fe436446e11273e4a46b3323b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ce:f3:4c:22:0b:1f:60:ca:31:2c:0a:34:8f:
a9:8a:88:02:ab:4d:66:6d:e2:bd:74:be:d7:c3:cb:
54:d4:26:4f:74:cb:18:bc:12:f0:4f:97:cb:ff:df:
d4:48:86:b1:6d:3f:0b:9c:21:29:bf:9f:81:7b:af:
02:53:60:14:74:d8:e3:20:e2:d9:92:8e:e0:fc:eb:
0c:59:08:8a:6c:6b:f9:32:30:c1:63:b6:68:24:fe:
92:e4:92:2b:88:fa:84:d6:75:02:97:c5:57:63:9b:
10:c0:00:e5:87:e1:ef:7d:9a:21:ce:bc:2c:1b:89:
81:e9:3c:b8:90:16:9c:e1:45:bb:3b:64:bc:89:0f:
c2:a3:33:6f:0e:48:a3:19:11:6a:44:c4:f0:65:e7:
40:d6:d7:43:b7:c4:42:d1:1c:c5:04:d3:6d:49:3b:
3e:5f:47:9e:78:28:e6:eb:30:a4:3c:3c:d2:d8:47:
36:3e:e8:9d:57:8b:43:99:12:84:10:45:0a:dc:1b:
bc:99:04:c1:fa:1f:29:f3:a9:84:18:c6:57:25:48:
52:cd:83:2b:df:73:8a:bb:6d:93:7f:2d:2a:60:a0:
57:e0:be:2e:6b:61:af:ac:3d:03:df:34:c4:f2:4f:
af:1a:af:b5:f7:03:23:2a:81:5a:fe:ff:3e:1e:1a:
32:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:28:34:7C:8D:0E:09:FE:43:64:46:E1:12:73:E4:A4:6B:33:23:B9
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:41:61:43:de:b5:b2:8d:b5:49:1e:20:67:58:90:ef:b3:a4:
38:e4:37:e2:d1:a5:32:39:c5:42:76:dc:f4:c7:50:e4:d3:48:
79:1f:75:19:31:90:0a:15:54:83:22:05:20:1c:05:60:29:1a:
f0:85:0c:32:b7:c2:aa:cc:4b:58:1b:f3:42:9b:f8:2c:56:2e:
61:67:dd:ce:ce:54:cc:26:9b:37:12:a3:62:fc:5f:37:62:02:
aa:a2:6c:a7:f5:42:65:a0:c1:35:27:95:e4:7d:c2:2b:29:e2:
f0:56:b7:5b:75:2d:ad:b5:00:02:75:f1:55:f4:ac:e2:22:d3:
81:82:f3:f2:e2:d1:ca:94:5c:d9:6d:46:eb:09:75:e4:22:fe:
36:a7:50:09:69:46:67:79:19:5d:a6:47:92:d6:3a:d4:a1:4b:
90:67:ab:0c:4a:78:93:10:5b:7b:8c:25:e9:e9:12:b8:ef:dd:
ae:1c:16:b7:50:d8:2a:02:aa:b9:a4:1d:63:dc:2c:a4:04:66:
7f:98:24:f2:76:21:45:f1:72:60:60:ba:05:78:2f:65:6b:74:
6b:ab:c5:9a:86:70:83:47:e8:50:ec:6b:e8:f5:c9:3b:ba:0a:
b1:f8:51:85:3d:29:ca:3c:e8:28:c3:ef:94:af:2d:9c:8e:61:
d1:77:75:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 10:39:01 2026 by rpki-client