Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: 2r08fdjqZnrdUhCl10sU/4YHgMLN8tU67SD4a68lUlE=
Subject key identifier: 09:FF:9B:FB:AF:C0:30:3A:05:71:C6:E6:ED:BF:41:6F:EC:EA:C3:E6
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 019FA29772D4F20D49ECD4B4F4802A9F080A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 08:01:02 +0000
Manifest this update: Mon 27 Jul 2026 08:01:02 +0000
Manifest next update: Tue 28 Jul 2026 08:01:02 +0000
Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: w+2AkVPQcYuZJCX5UzBhAo146LXTlBPAJ20MsAfc5qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:97:72:d4:f2:0d:49:ec:d4:b4:f4:80:2a:9f:08:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Jul 27 08:01:02 2026 GMT
Not After : Jul 28 08:01:02 2026 GMT
Subject: CN=09ff9bfbafc0303a0571c6e6edbf416feceac3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b6:28:47:5e:24:18:3e:9c:c0:76:ea:70:9a:
d5:c6:7c:f8:06:45:50:90:81:c4:e1:91:6d:24:49:
c4:28:9e:0b:2a:b4:27:8f:08:d8:f6:06:27:9b:ee:
fd:35:6c:e1:80:d7:d8:48:1e:51:9c:8b:8b:22:e9:
7d:38:47:a4:d9:7e:4c:ca:13:bb:47:c2:19:9f:68:
22:a5:80:8b:df:fd:31:93:c4:01:23:5e:39:01:20:
11:a9:c4:95:4a:a0:89:01:5b:aa:3f:09:57:0a:37:
3b:71:9e:df:79:1e:f6:a0:92:4c:0a:4c:13:2e:bd:
e9:2b:92:0b:00:fc:73:e8:99:39:d6:d1:72:e9:b6:
09:30:aa:c0:ab:fd:58:5f:11:50:11:70:48:64:63:
c6:dc:ea:94:f3:e3:7d:df:0c:f1:4c:14:1e:98:03:
ac:bf:00:0a:54:fd:14:50:aa:96:b7:7e:91:32:de:
9e:ab:84:1d:05:96:2f:08:61:3c:9a:20:5e:1a:21:
c7:a9:a2:d4:e7:43:fe:65:d2:1e:71:cf:2c:e3:2d:
00:f8:95:bb:42:f0:35:60:75:02:12:e8:ca:3c:e3:
8f:c4:8f:39:51:5b:17:a6:ea:cd:5c:e1:14:73:a2:
b3:53:e9:fa:6e:1a:ca:aa:1d:15:2d:50:72:ed:b0:
ca:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:FF:9B:FB:AF:C0:30:3A:05:71:C6:E6:ED:BF:41:6F:EC:EA:C3:E6
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:87:f3:ef:26:07:a7:e5:5d:1c:43:e3:8b:47:92:d8:3d:b5:
86:22:2a:67:6f:57:57:3b:76:d3:8f:a9:58:17:80:fe:9d:0a:
c6:20:5d:7f:5a:39:a6:95:ae:4e:00:45:01:d1:09:85:bd:5b:
e5:e2:32:50:03:8e:ce:10:88:8d:0c:95:99:79:36:f3:e1:2c:
dc:32:1e:d5:ae:38:fc:c4:ee:ea:63:ee:88:29:03:4a:04:00:
aa:fa:50:ef:0d:2b:dd:fd:de:32:b0:e0:85:9b:13:72:e1:46:
ff:46:0a:2c:39:18:5a:80:a6:eb:f5:54:b3:f3:50:a5:f3:76:
d2:0d:e0:55:73:ed:69:c0:02:7c:65:7a:34:08:d4:e0:d0:e7:
47:d2:2a:86:79:2f:9b:65:e4:be:b2:ff:61:0b:58:5e:d1:cc:
f4:f1:37:61:83:21:8c:d0:b8:aa:5d:f7:c6:25:e2:16:b3:9c:
59:82:b7:5e:43:a4:50:76:17:7a:0b:52:5c:92:0b:c8:5c:23:
26:9f:ad:03:8f:d6:3c:e4:1d:5b:80:48:82:82:ec:35:14:e6:
40:6e:2e:c1:06:5b:3f:c2:c0:39:03:96:9b:d4:d7:fb:c5:2d:
b5:85:05:45:49:ac:00:de:59:0a:16:b5:3f:4d:e4:81:e6:31:
49:d0:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:52:49 2026 by rpki-client