
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json)
Hash identifier: 9he26QnXNIxEftbW9RhOsetjKHmrQfjnhk/SVHhX0O8=
Subject key identifier: 86:BD:61:E8:F9:CF:6F:86:8D:F2:95:09:46:A4:24:AB:68:EC:71:60
Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Certificate serial: 019F148B1C0975E279C2530E1A6ABD849CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
Manifest number: 052E
Signing time: Mon 29 Jun 2026 18:01:28 +0000
Manifest this update: Mon 29 Jun 2026 18:01:28 +0000
Manifest next update: Tue 30 Jun 2026 18:01:28 +0000
Files and hashes: 1: jjZi6uzHmPDA5sRPcyRihz0sVdA.roa (hash: LBEeu+9aJvCSWGFd1osnMlApP4nQxT6laZRWkBYIfjo=)
2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: gn4LeQeqtD/2yD6TiCTUJkxMQNXzQKqvjitTRJhf6e4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 14:12:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:8b:1c:09:75:e2:79:c2:53:0e:1a:6a:bd:84:9c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Validity
Not Before: Jun 29 18:01:28 2026 GMT
Not After : Jun 30 18:01:28 2026 GMT
Subject: CN=86bd61e8f9cf6f868df2950946a424ab68ec7160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:e1:b7:e6:d5:50:58:6f:56:bd:2a:a1:ce:5e:
d6:90:e9:ca:11:2e:aa:d6:1f:dc:de:57:6f:a9:8f:
f5:69:42:15:3a:38:4d:51:f3:eb:9c:91:1e:bf:ec:
0d:00:10:c0:dc:b8:2d:89:01:fa:f2:9b:52:53:34:
41:f2:7c:f9:86:5e:2b:44:47:9e:ea:b1:3c:f7:16:
1c:95:f6:4c:83:87:cc:47:67:21:9c:85:e0:10:30:
0f:ae:58:6a:e8:5e:c4:ca:d4:72:f3:2e:76:75:b4:
4c:1f:cd:1a:eb:75:1e:33:df:db:85:f6:80:83:e6:
ed:4f:ce:d1:99:cc:80:37:0e:99:1b:de:06:95:e0:
58:1b:24:08:dd:4f:f7:0f:9d:cd:3a:33:f8:68:c4:
01:9b:1c:9d:c3:e5:1d:1a:6e:3c:33:54:e6:43:c0:
7a:0d:ce:b1:b0:9f:56:7a:a2:d7:ef:8e:69:2a:e1:
e3:8a:a4:cb:ac:eb:38:c4:1c:33:6e:b5:5d:79:88:
d9:03:fb:23:77:c7:a1:2c:04:c5:bb:bf:3e:e5:95:
15:d9:0f:b9:ca:b7:0a:e6:91:81:ee:76:4d:27:eb:
34:40:82:87:9c:a5:40:ed:a0:32:f0:1d:31:06:95:
14:e5:9b:b3:17:83:49:b5:cc:be:e7:b2:35:c3:08:
51:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BD:61:E8:F9:CF:6F:86:8D:F2:95:09:46:A4:24:AB:68:EC:71:60
X509v3 Authority Key Identifier:
keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:99:70:06:52:af:40:eb:3c:e4:ad:85:c8:9e:7c:8a:4c:95:
43:8f:70:60:98:44:c0:9f:72:56:59:fc:22:d8:5c:50:9b:77:
d8:a6:cc:51:59:5d:d5:67:32:4e:ac:c5:79:c4:32:b4:d9:be:
00:06:5d:ef:45:da:53:d1:96:c0:1b:2d:21:e4:9a:2a:8b:66:
bf:f0:bd:02:56:8b:08:12:ee:28:68:09:bc:8b:fc:bd:f6:5d:
3b:34:cc:3a:ac:6f:8f:1c:2f:96:6e:17:06:6c:6d:ce:43:93:
13:43:0a:fd:7c:cd:2c:ab:63:23:d1:f8:a6:3a:d1:ef:8e:89:
6c:4d:40:38:53:36:89:e0:81:cd:57:9f:86:e7:35:d8:d0:65:
67:c7:00:e1:8f:d5:c1:1b:34:90:6c:f3:56:eb:28:08:da:2a:
67:43:71:3b:76:4d:91:1e:a5:f8:20:db:f4:a5:51:83:cf:d5:
82:52:2f:ee:b6:8b:6c:1b:ef:e4:40:1b:ac:d6:c5:13:61:b1:
67:11:2d:25:0e:4e:d6:b9:ff:cf:a9:e7:16:6a:80:09:54:52:
82:41:7e:9a:86:db:50:f8:21:2f:99:5c:c3:63:c5:75:a8:39:
af:75:1c:e3:98:42:f3:20:78:4d:df:a8:bf:d8:ff:98:d4:45:
8e:d1:99:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8UixwJdeJ5wlMOGmq9hJyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NzM1ZWIyY2QyYzRkOGNmNWJmM2Q3NTA3ZDg0ZDYwMzU0
NWRmZTMwHhcNMjYwNjI5MTgwMTI4WhcNMjYwNjMwMTgwMTI4WjAzMTEwLwYDVQQD
Eyg4NmJkNjFlOGY5Y2Y2Zjg2OGRmMjk1MDk0NmE0MjRhYjY4ZWM3MTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4OG35tVQWG9WvSqhzl7WkOnKES6q
1h/c3ldvqY/1aUIVOjhNUfPrnJEev+wNABDA3LgtiQH68ptSUzRB8nz5hl4rREee
6rE89xYclfZMg4fMR2chnIXgEDAPrlhq6F7EytRy8y52dbRMH80a63UeM9/bhfaA
g+btT87RmcyANw6ZG94GleBYGyQI3U/3D53NOjP4aMQBmxydw+UdGm48M1TmQ8B6
Dc6xsJ9WeqLX745pKuHjiqTLrOs4xBwzbrVdeYjZA/sjd8ehLATFu78+5ZUV2Q+5
yrcK5pGB7nZNJ+s0QIKHnKVA7aAy8B0xBpUU5ZuzF4NJtcy+57I1wwhRRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa9Yej5z2+GjfKVCUakJKto7HFgMB8GA1UdIwQY
MBaAFLhzXrLNLE2M9b89dQfYTWA1Rd/jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUt
YjRkY2Y4Y2VhMzVhLzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8yMmRjYzgtZTI3Mi00ODllLTg4NmUtYjRkY2Y4Y2VhMzVh
LzEvdUhOZXNzMHNUWXoxdnoxMUI5aE5ZRFZGMy1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjplwBlKv
QOs85K2FyJ58ikyVQ49wYJhEwJ9yVln8IthcUJt32KbMUVld1WcyTqzFecQytNm+
AAZd70XaU9GWwBstIeSaKotmv/C9AlaLCBLuKGgJvIv8vfZdOzTMOqxvjxwvlm4X
BmxtzkOTE0MK/XzNLKtjI9H4pjrR746JbE1AOFM2ieCBzVefhuc12NBlZ8cA4Y/V
wRs0kGzzVusoCNoqZ0NxO3ZNkR6l+CDb9KVRg8/VglIv7raLbBvv5EAbrNbFE2Gx
ZxEtJQ5O1rn/z6nnFmqACVRSgkF+mobbUPghL5lcw2PFdag5r3Uc45hC8yB4Td+o
v9j/mNRFjtGZ2Q==
-----END CERTIFICATE-----
Generated at Mon Jun 29 20:24:15 2026 by rpki-client