Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
File: uHNess0sTYz1vz11B9hNYDVF3-M.mft (raw, json)
Hash identifier: aVWni0PHWVu7al1bKwNULeJuyCsUEyZSAPhlGHa0wE0=
Subject key identifier: 83:17:B2:D5:B3:D5:D7:8A:B5:EE:B3:11:28:56:A2:08:34:E0:30:75
Authority key identifier: B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
Certificate issuer: /CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Certificate serial: 01A00402166F82898D918B2C08B20334FCAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
Manifest number: 05AA
Signing time: Sat 15 Aug 2026 06:00:40 +0000
Manifest this update: Sat 15 Aug 2026 06:00:40 +0000
Manifest next update: Sun 16 Aug 2026 06:00:40 +0000
Files and hashes: 1: jjZi6uzHmPDA5sRPcyRihz0sVdA.roa (hash: LBEeu+9aJvCSWGFd1osnMlApP4nQxT6laZRWkBYIfjo=)
2: uHNess0sTYz1vz11B9hNYDVF3-M.crl (hash: NVEEgOtVYi/wuR5KngPtuBhu/j0SOSAY4rk5P79DvoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 06:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:16:6f:82:89:8d:91:8b:2c:08:b2:03:34:fc:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8735eb2cd2c4d8cf5bf3d7507d84d603545dfe3
Validity
Not Before: Aug 15 06:00:40 2026 GMT
Not After : Aug 16 06:00:40 2026 GMT
Subject: CN=8317b2d5b3d5d78ab5eeb3112856a20834e03075
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1f:1e:fb:06:79:42:3d:6d:0b:9e:90:07:70:
d6:b0:2e:fc:89:03:29:6d:f4:ef:4e:f8:59:a3:c6:
48:45:a0:ba:31:33:f9:91:7d:ec:9d:d4:55:13:48:
d9:62:40:26:78:61:5c:04:63:59:c9:58:dc:c1:83:
30:cf:85:f4:47:3d:e2:22:c4:8b:36:11:e2:1e:ff:
9e:45:06:1d:11:e3:a5:19:a8:35:59:1b:ae:ee:3f:
58:a5:1b:0e:ed:79:2d:48:ef:d9:86:65:78:7f:2a:
7f:26:06:22:55:5f:f1:e9:a1:4a:14:a8:bf:35:a1:
dd:ed:b8:02:e7:c7:a8:fc:14:84:84:ff:c2:56:bf:
83:c2:5c:8b:f2:17:a1:f4:25:e2:19:7d:ab:e4:32:
02:5c:ad:7d:77:8d:74:45:90:20:e5:eb:db:3c:34:
c5:8e:a7:7a:84:92:b9:66:4a:5b:21:80:06:a0:16:
33:57:31:9c:11:dd:bf:cb:39:b0:46:c7:f9:85:c9:
c0:c3:f0:cc:fe:ed:c2:1b:a0:bc:4b:05:e0:1d:31:
52:5b:dd:e0:6c:f0:29:44:a9:91:4b:0f:c2:cc:ff:
2f:86:a6:28:b4:20:c1:51:d3:05:65:ab:91:33:ca:
39:b3:07:d7:b3:ae:47:ff:ba:fc:01:55:c0:e4:55:
8a:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:17:B2:D5:B3:D5:D7:8A:B5:EE:B3:11:28:56:A2:08:34:E0:30:75
X509v3 Authority Key Identifier:
keyid:B8:73:5E:B2:CD:2C:4D:8C:F5:BF:3D:75:07:D8:4D:60:35:45:DF:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHNess0sTYz1vz11B9hNYDVF3-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/22dcc8-e272-489e-886e-b4dcf8cea35a/1/uHNess0sTYz1vz11B9hNYDVF3-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:cf:26:17:57:12:94:99:c8:12:ed:be:a8:5e:66:bb:a5:cd:
ac:e7:10:89:f5:28:ea:93:3a:39:f8:ee:83:9e:cf:bf:96:6d:
9c:b9:47:1a:17:e9:eb:c6:71:35:34:ec:94:80:ec:3f:15:49:
77:72:69:1e:36:bc:b2:00:b9:bd:21:1e:fe:56:38:3d:44:29:
8b:8a:30:d1:85:7a:ff:ba:bd:70:4a:ad:7e:42:c1:7d:7a:56:
41:e5:8e:95:5e:6c:e1:2a:56:4e:02:af:6e:f5:0b:54:3a:bd:
65:1f:db:f4:16:24:fa:91:c3:9d:f2:3a:20:3e:df:79:5d:f0:
d8:49:63:4d:bc:9d:62:17:0a:b6:b0:06:c6:0c:d1:2b:09:61:
e8:61:f3:3d:9c:f5:fb:69:c1:a6:da:59:a5:91:14:92:e7:f0:
2a:cc:35:38:33:f6:60:2d:08:d5:b8:01:84:6a:12:d9:11:63:
fc:ae:67:b6:36:ab:0a:76:0c:7a:d8:90:78:db:dd:21:ee:49:
fe:ac:b2:27:48:3c:75:eb:f4:67:f0:7a:a4:3d:e8:a9:b7:dc:
ae:09:60:3c:7d:b3:a7:bf:d2:02:e4:fc:35:aa:0e:3b:ff:6f:
9c:c2:e5:4f:fe:d4:71:b6:05:ea:ee:70:84:51:40:5f:71:9f:
f3:61:60:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 13:45:48 2026 by rpki-client