Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
File: u7qOzNl-lhif9uM88RCmyaR3RZw.mft (raw, json)
Hash identifier: z54s8ww2BysHX78eRK2ZudPBQ0II7Aa8mUjgilOUQQE=
Subject key identifier: 23:05:61:1F:3A:A4:D5:5A:B1:E5:80:BB:87:CA:16:13:EE:CF:E7:C8
Authority key identifier: BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
Certificate issuer: /CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Certificate serial: 019F8644EE0F6FA23AAFB3C771C69C846654
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
Manifest number: 1542
Signing time: Tue 21 Jul 2026 20:01:32 +0000
Manifest this update: Tue 21 Jul 2026 20:01:32 +0000
Manifest next update: Wed 22 Jul 2026 20:01:32 +0000
Files and hashes: 1: ln2dN3QsZlTOM89zdF-YcCXd_DY.roa (hash: Wgrvp16Ne1fmoLkZNnTHVfSZqwERSnnUg2+iWW0Q9iY=)
2: u7qOzNl-lhif9uM88RCmyaR3RZw.crl (hash: jSgrzQ/QPpeC6RSRhf7dC7uy9XMMo1tz8xM+No6Xf/o=)
3: yzMoDxEJ3QeJWdE8R-bAoTDWCn0.roa (hash: 7ySOiEN+rsl73J6hKm0hx2DeTB7Y+zglcV1vKztJX34=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 20:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:44:ee:0f:6f:a2:3a:af:b3:c7:71:c6:9c:84:66:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbba8eccd97e96189ff6e33cf110a6c9a477459c
Validity
Not Before: Jul 21 20:01:32 2026 GMT
Not After : Jul 22 20:01:32 2026 GMT
Subject: CN=2305611f3aa4d55ab1e580bb87ca1613eecfe7c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:44:44:3a:cc:2f:dd:31:30:20:58:64:94:38:
5a:25:29:a6:40:9d:04:22:d7:22:70:9d:23:50:cb:
37:ff:65:89:34:64:9b:76:8d:a7:20:b4:6e:29:dc:
84:a8:4f:a4:f1:b3:c3:da:26:f6:6e:a9:c0:e3:23:
ec:d6:cb:bf:d7:55:2c:69:48:6f:34:1e:ec:f6:c9:
8e:c0:8a:6f:fc:b7:11:88:ff:5c:7a:e1:3f:97:e5:
63:6f:7a:4a:ec:d8:2b:75:39:71:09:c2:bd:3f:81:
0e:4c:14:82:4c:6e:b3:23:f3:86:5b:8f:44:bb:a9:
62:3d:bd:2a:e9:e6:89:ce:cf:68:e7:d2:6e:f4:50:
10:3a:98:43:c1:68:ff:7d:40:ef:2a:04:49:40:33:
ce:82:71:d7:a1:81:29:8e:69:4f:02:f4:98:d0:18:
57:7a:a9:7f:70:44:56:db:c5:1c:e0:d0:fc:6c:8b:
81:9d:2a:6e:fc:f7:8c:99:e2:6e:cf:eb:d9:25:d3:
cb:91:b7:3e:9f:70:da:a2:7b:da:b2:0a:0f:cc:3e:
ad:4e:dd:26:7f:64:24:e4:63:33:7d:59:57:a9:49:
cc:38:3a:53:76:8b:56:8e:31:10:94:c6:7f:c9:bd:
0e:5f:da:fb:d8:fc:c0:61:c1:e9:5d:b5:f7:d5:9f:
16:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:05:61:1F:3A:A4:D5:5A:B1:E5:80:BB:87:CA:16:13:EE:CF:E7:C8
X509v3 Authority Key Identifier:
keyid:BB:BA:8E:CC:D9:7E:96:18:9F:F6:E3:3C:F1:10:A6:C9:A4:77:45:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7qOzNl-lhif9uM88RCmyaR3RZw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/b9dab8-d084-4b73-99b2-ee5b5168bf2f/1/u7qOzNl-lhif9uM88RCmyaR3RZw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:05:36:c2:9f:c8:63:a2:db:f7:3c:ff:3d:98:1a:bd:d5:d6:
82:ff:4d:0f:67:72:c8:39:a4:1e:41:6d:2b:4c:a4:0a:bb:f3:
05:0e:01:bd:9e:24:89:9a:0e:05:f7:50:2e:a6:fd:6d:39:9e:
54:85:0a:c1:fe:56:d8:15:d8:d4:45:d0:d3:f0:b6:24:b9:c4:
4f:f8:26:ad:67:f5:5b:b2:23:13:ad:23:b5:7d:ab:c8:2f:d1:
0e:ff:a2:04:03:6d:fe:9e:08:f2:3b:79:8d:dc:8e:be:be:95:
a0:c3:04:2f:76:c7:dc:ef:0c:8d:3c:61:99:bd:ee:92:15:00:
f0:6f:27:21:b7:2e:6a:e8:3d:36:6f:b8:45:48:83:a6:83:38:
b4:cf:eb:86:ff:7d:56:90:0d:65:68:9d:cf:26:83:c7:44:1d:
e3:69:fd:78:cb:69:6f:b5:a7:f4:c8:72:e1:d0:50:6b:08:e0:
37:0e:08:9f:d0:1e:e5:33:03:19:aa:d1:3a:c2:a5:b0:e0:f9:
7c:83:33:f3:a3:41:bc:89:29:97:e3:9a:44:42:e3:11:6c:65:
83:aa:4b:41:16:21:87:97:44:6a:3d:ed:6d:73:05:14:b5:89:
ab:97:ca:ac:6a:d4:62:c3:68:ff:79:a4:09:b5:2c:7d:90:11:
66:6e:b0:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+GRO4Pb6I6r7PHccachGZUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiYmE4ZWNjZDk3ZTk2MTg5ZmY2ZTMzY2YxMTBhNmM5YTQ3
NzQ1OWMwHhcNMjYwNzIxMjAwMTMyWhcNMjYwNzIyMjAwMTMyWjAzMTEwLwYDVQQD
EygyMzA1NjExZjNhYTRkNTVhYjFlNTgwYmI4N2NhMTYxM2VlY2ZlN2M4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwEREOswv3TEwIFhklDhaJSmmQJ0E
ItcicJ0jUMs3/2WJNGSbdo2nILRuKdyEqE+k8bPD2ib2bqnA4yPs1su/11UsaUhv
NB7s9smOwIpv/LcRiP9ceuE/l+Vjb3pK7NgrdTlxCcK9P4EOTBSCTG6zI/OGW49E
u6liPb0q6eaJzs9o59Ju9FAQOphDwWj/fUDvKgRJQDPOgnHXoYEpjmlPAvSY0BhX
eql/cERW28Uc4ND8bIuBnSpu/PeMmeJuz+vZJdPLkbc+n3DaonvasgoPzD6tTt0m
f2Qk5GMzfVlXqUnMODpTdotWjjEQlMZ/yb0OX9r72PzAYcHpXbX31Z8WgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMFYR86pNVaseWAu4fKFhPuz+fIMB8GA1UdIwQY
MBaAFLu6jszZfpYYn/bjPPEQpsmkd0WcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjIt
ZWU1YjUxNjhiZjJmLzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9iOWRhYjgtZDA4NC00YjczLTk5YjItZWU1YjUxNjhiZjJm
LzEvdTdxT3pObC1saGlmOXVNODhSQ215YVIzUlp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgAU2wp/I
Y6Lb9zz/PZgavdXWgv9ND2dyyDmkHkFtK0ykCrvzBQ4BvZ4kiZoOBfdQLqb9bTme
VIUKwf5W2BXY1EXQ0/C2JLnET/gmrWf1W7IjE60jtX2ryC/RDv+iBANt/p4I8jt5
jdyOvr6VoMMEL3bH3O8MjTxhmb3ukhUA8G8nIbcuaug9Nm+4RUiDpoM4tM/rhv99
VpANZWidzyaDx0Qd42n9eMtpb7Wn9Mhy4dBQawjgNw4In9Ae5TMDGarROsKlsOD5
fIMz86NBvIkpl+OaRELjEWxlg6pLQRYhh5dEaj3tbXMFFLWJq5fKrGrUYsNo/3mk
CbUsfZARZm6wfQ==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:03:38 2026 by rpki-client