Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File: uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier: Qhez9JWaPYMVfvFvwfrsnHzvw2GBohpA7TvfhE76g+A=
Subject key identifier: 9B:B1:EC:0E:DD:F9:96:93:59:51:6E:1F:D8:00:20:22:0C:FA:7D:E4
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer: /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial: 019F86E960ED4224326CB564435A99B2BD4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number: 01FA
Signing time: Tue 21 Jul 2026 23:01:09 +0000
Manifest this update: Tue 21 Jul 2026 23:01:09 +0000
Manifest next update: Wed 22 Jul 2026 23:01:09 +0000
Files and hashes: 1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: 6hibqDqfOCihhn6BEoS+H7ps5r/DqXUbJ8Q9OTqBiKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:e9:60:ed:42:24:32:6c:b5:64:43:5a:99:b2:bd:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Validity
Not Before: Jul 21 23:01:09 2026 GMT
Not After : Jul 22 23:01:09 2026 GMT
Subject: CN=9bb1ec0eddf9969359516e1fd80020220cfa7de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:01:53:29:f3:2d:db:89:3d:62:aa:04:06:44:
71:6c:9e:27:fb:dc:b5:67:01:6e:95:2e:43:ab:c2:
23:7c:9d:68:dd:d5:12:d4:9f:66:f9:86:15:fb:86:
cb:dd:c2:e6:0a:79:ca:de:48:06:4a:86:82:12:3a:
36:fd:d7:4d:3a:a2:e2:aa:34:01:88:70:c0:1c:81:
f2:2a:d4:52:19:ee:cb:49:3b:8d:12:d6:30:9f:7e:
d0:03:3c:dd:da:0d:26:dd:8f:95:b5:cd:a3:30:63:
90:d1:c8:d7:ff:23:5f:1b:45:ed:95:2a:f0:e0:3f:
8f:94:b0:e9:54:73:a3:4b:de:dc:a5:f8:22:04:db:
86:1b:48:8e:e4:77:4d:30:c7:3f:73:1a:49:cc:b3:
6f:c3:75:cd:85:2a:f6:c0:b1:c2:4a:cf:e7:7f:72:
0f:9d:01:ee:c0:c0:7a:47:e3:36:1b:7b:d6:7c:ec:
c9:4c:dc:39:97:45:0f:8f:78:48:ad:66:d0:15:e4:
92:24:f3:dd:9c:a0:de:74:a9:82:7b:76:2a:16:a8:
43:39:3f:c0:de:1e:e0:9b:46:fa:2c:0a:d6:cb:7e:
33:e6:9c:96:44:46:f7:fd:fa:79:49:b6:92:7e:b6:
37:43:93:3c:1c:e3:b1:2d:a8:82:3b:85:b2:df:5a:
61:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B1:EC:0E:DD:F9:96:93:59:51:6E:1F:D8:00:20:22:0C:FA:7D:E4
X509v3 Authority Key Identifier:
keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:f1:1a:d5:cd:1f:e2:9c:46:e4:c7:57:96:2b:53:cd:1f:fe:
74:4a:a0:83:22:a6:bc:f1:75:f3:cd:b4:20:b2:c6:29:88:0b:
ef:66:93:1b:8c:03:e8:a3:d9:45:33:23:1b:2e:62:b5:0f:5f:
f7:e0:2f:44:46:f1:db:46:61:a5:70:09:1e:7b:8f:3e:b6:ed:
0f:54:19:ec:a1:92:7a:7a:88:ad:d4:9d:3f:6f:51:fa:12:41:
ef:1a:d2:2a:bb:a2:81:87:2c:46:6a:a3:54:93:89:55:20:4a:
a6:61:17:28:d2:60:5e:12:9b:f6:8f:4b:9b:f5:ee:57:c4:16:
80:6d:c9:77:65:82:ed:78:06:29:65:9e:d1:b1:8c:cc:85:c5:
83:3e:18:d5:7e:12:ea:f9:c0:37:bf:4f:1a:7f:75:43:b4:3d:
30:1f:0d:a5:10:7d:fe:03:c0:58:7d:f3:90:97:bc:82:9f:22:
74:32:40:c9:04:dd:54:a8:e6:39:86:79:2f:92:49:a3:24:d6:
b1:4d:f6:11:8e:5f:b4:5b:55:fd:9b:4a:2b:5b:79:ad:c0:e6:
87:b8:bb:ab:f7:46:73:c0:74:29:5c:78:e1:e6:af:e5:48:a1:
1f:fc:b1:2e:98:75:ef:21:97:a3:7b:86:58:a6:18:24:e5:ec:
db:32:96:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+G6WDtQiQybLVkQ1qZsr1PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhMTdlYjdkNWYwNGQyNzE1NWYyMDE3ODZmMzkwZmI0MDhh
NmFhZTQwHhcNMjYwNzIxMjMwMTA5WhcNMjYwNzIyMjMwMTA5WjAzMTEwLwYDVQQD
Eyg5YmIxZWMwZWRkZjk5NjkzNTk1MTZlMWZkODAwMjAyMjBjZmE3ZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AFTKfMt24k9YqoEBkRxbJ4n+9y1
ZwFulS5Dq8IjfJ1o3dUS1J9m+YYV+4bL3cLmCnnK3kgGSoaCEjo2/ddNOqLiqjQB
iHDAHIHyKtRSGe7LSTuNEtYwn37QAzzd2g0m3Y+Vtc2jMGOQ0cjX/yNfG0XtlSrw
4D+PlLDpVHOjS97cpfgiBNuGG0iO5HdNMMc/cxpJzLNvw3XNhSr2wLHCSs/nf3IP
nQHuwMB6R+M2G3vWfOzJTNw5l0UPj3hIrWbQFeSSJPPdnKDedKmCe3YqFqhDOT/A
3h7gm0b6LArWy34z5pyWREb3/fp5SbaSfrY3Q5M8HOOxLaiCO4Wy31phcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJux7A7d+ZaTWVFuH9gAICIM+n3kMB8GA1UdIwQY
MBaAFLoX631fBNJxVfIBeG85D7QIpqrkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS8xM2QxNzUtZjY3NS00YjJlLWE0YjAt
MzBhZTEyNjQ2NGY3LzEvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS8xM2QxNzUtZjY3NS00YjJlLWE0YjAtMzBhZTEyNjQ2NGY3
LzEvdWhmcmZWOEUwbkZWOGdGNGJ6a1B0QWltcXVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcfEa1c0f
4pxG5MdXlitTzR/+dEqggyKmvPF18820ILLGKYgL72aTG4wD6KPZRTMjGy5itQ9f
9+AvREbx20ZhpXAJHnuPPrbtD1QZ7KGSenqIrdSdP29R+hJB7xrSKruigYcsRmqj
VJOJVSBKpmEXKNJgXhKb9o9Lm/XuV8QWgG3Jd2WC7XgGKWWe0bGMzIXFgz4Y1X4S
6vnAN79PGn91Q7Q9MB8NpRB9/gPAWH3zkJe8gp8idDJAyQTdVKjmOYZ5L5JJoyTW
sU32EY5ftFtV/ZtKK1t5rcDmh7i7q/dGc8B0KVx44eav5UihH/yxLph17yGXo3uG
WKYYJOXs2zKW5w==
-----END CERTIFICATE-----
Generated at Wed Jul 22 02:08:48 2026 by rpki-client