Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
File: uakKhVIqpjnVeIL_2X2xpN2BELg.mft (raw, json)
Hash identifier: 7/Q2dTNjuCcN1l5wWvN0264YBCpq952UF6h1td9O7Rc=
Subject key identifier: BB:64:01:25:D2:D7:B5:1A:19:5C:A0:BF:65:08:A1:14:82:DF:B7:5D
Authority key identifier: B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
Certificate issuer: /CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Certificate serial: 019EFCF2217268DCE2E5BFB9CDCDA8723F62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
Manifest number: 024A
Signing time: Thu 25 Jun 2026 04:03:07 +0000
Manifest this update: Thu 25 Jun 2026 04:03:07 +0000
Manifest next update: Fri 26 Jun 2026 04:03:07 +0000
Files and hashes: 1: CsUMxPPZn7BWvRnMzKtwzumQlaI.roa (hash: s5cU5GsIZAY3fgBBTrdExxW/NI8apbM5B4zmDqtjvSE=)
2: q-jGore8m3Vj_5C7Ap3AXDg-4xE.asa (hash: ZNqsv7+pLU9fdFw+/1KeKKfY+X5+aMAfnSdQ+ZxMr4c=)
3: uakKhVIqpjnVeIL_2X2xpN2BELg.crl (hash: glWgOI3hkfMSVmQCaObbe1Wr1L7bOnkwP/MoRgdhhE8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fc:f2:21:72:68:dc:e2:e5:bf:b9:cd:cd:a8:72:3f:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Validity
Not Before: Jun 25 04:03:07 2026 GMT
Not After : Jun 26 04:03:07 2026 GMT
Subject: CN=bb640125d2d7b51a195ca0bf6508a11482dfb75d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:a1:e0:23:87:ed:9a:7a:ed:a2:78:5f:90:db:
6c:83:9d:5f:af:e2:61:36:0c:d6:10:42:2c:7d:90:
53:bf:ad:dc:00:95:74:a5:5d:41:1b:7b:a8:a1:1b:
fa:e1:34:2f:c5:e2:42:84:39:ca:10:82:90:bf:dd:
15:e7:46:e3:e3:2f:c7:ac:18:ce:3b:0a:4c:8b:78:
64:cb:46:d4:a9:59:0b:ca:52:86:a2:0d:d8:53:07:
03:c5:f2:fd:cc:10:9b:5f:a7:bb:3d:a5:10:2b:b0:
03:76:1f:cd:31:b4:1f:c2:97:65:67:fd:74:30:f1:
ea:5a:be:3b:3b:e9:bd:a2:21:a3:ce:22:72:d1:fb:
cf:29:08:29:a8:a3:d7:51:f5:13:64:1f:6b:49:6f:
2c:22:37:49:00:0c:aa:2f:46:31:dd:8d:cf:92:a9:
56:bc:65:c4:18:1c:5e:95:17:df:13:fd:40:90:fd:
77:60:54:18:08:0f:d2:94:2e:1f:36:9a:ab:d4:5f:
13:3e:e7:04:2f:0a:33:0f:c3:81:f7:a7:28:9e:c2:
82:fc:4c:bb:ec:b8:32:71:46:c0:c1:1e:a4:b1:30:
b6:af:bb:99:75:6d:ec:13:16:ae:97:0f:db:d9:99:
44:a1:9a:0f:f0:69:af:68:9a:bd:85:b1:4c:f7:9d:
90:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:64:01:25:D2:D7:B5:1A:19:5C:A0:BF:65:08:A1:14:82:DF:B7:5D
X509v3 Authority Key Identifier:
keyid:B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:1f:00:25:43:07:b1:7a:cc:8b:e2:27:2a:2c:75:9c:f0:58:
44:8a:5d:4f:d0:6c:a7:38:61:21:76:9b:a3:93:2a:3c:b6:9e:
34:52:80:3f:d1:ff:55:bb:3e:01:a5:e5:dc:a8:9e:4d:33:63:
e2:67:4f:7a:0e:9a:c6:44:b4:07:8e:46:b5:88:27:72:fd:ef:
8e:84:a2:89:70:54:c9:55:8e:c1:64:18:70:fc:9c:a7:0d:da:
c3:ad:45:a2:88:e9:b0:30:2b:ef:cd:4f:6f:d1:6f:32:e9:71:
39:e0:69:40:a1:fb:5d:71:75:e5:33:05:c4:fa:c2:c5:a2:b9:
84:90:2d:17:3b:d5:6a:0b:4f:b0:80:e7:0d:03:a4:72:42:09:
ed:cb:5e:45:6c:b8:68:87:b1:62:ee:b3:f3:8a:7a:74:4a:4d:
00:72:cd:63:7a:46:df:a9:ed:87:5a:ce:ab:5f:81:57:82:61:
c7:68:9e:5a:b1:46:74:22:e2:95:a1:89:fa:b8:19:21:68:9d:
7e:05:e2:67:f3:49:1e:e2:5b:e2:ae:d3:82:18:d1:e6:5d:a0:
9a:99:42:65:df:a6:b7:f4:05:71:46:88:66:db:8d:e6:76:b7:
6a:37:5b:eb:2f:a1:01:01:78:93:83:ee:b1:ea:77:6a:ed:e0:
b5:e3:72:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:08 2026 by rpki-client