Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: D+C8DigxFbp8JY7kI7I9xNe+mbsEd4kInrCxd/jB1yI=
Subject key identifier: 94:20:F8:EF:0C:70:21:48:58:BF:D0:04:10:A6:ED:14:24:D4:6E:5D
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 019FAC75F9E7B2CBFB6EC56B403876BF6560
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 1290
Signing time: Wed 29 Jul 2026 06:00:40 +0000
Manifest this update: Wed 29 Jul 2026 06:00:40 +0000
Manifest next update: Thu 30 Jul 2026 06:00:40 +0000
Files and hashes: 1: 5pmE9mYBjRhZe38QmWwWm942O9U.roa (hash: I/XtJQhuUGNWJY5SlUg6TDyMur1mKeDTnd/4LdzUf1c=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: IfcP83dolFm9oKo+bie3BLcsYyicl4dUejpuU+Wr944=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:f9:e7:b2:cb:fb:6e:c5:6b:40:38:76:bf:65:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Jul 29 06:00:40 2026 GMT
Not After : Jul 30 06:00:40 2026 GMT
Subject: CN=9420f8ef0c70214858bfd00410a6ed1424d46e5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e0:41:be:64:60:97:4e:db:fc:af:b6:9d:0d:
be:03:07:62:f1:39:40:56:78:6f:9c:8c:3c:2d:93:
07:e9:82:da:fa:5d:dc:86:95:13:56:34:5c:b4:71:
e2:10:f4:32:e0:3e:81:1b:f1:95:9b:35:8a:b7:b5:
cb:9c:b3:69:02:e3:8a:3c:63:d0:7a:79:b4:95:23:
fa:d1:a9:13:42:8d:13:25:e9:3c:de:9d:86:47:91:
a5:c8:ec:1d:b7:27:43:6a:3b:73:89:23:86:30:a4:
87:d5:21:97:06:cc:26:81:13:1e:f3:1e:35:af:0c:
8a:cc:c3:44:65:d0:41:25:85:b0:9a:a6:38:37:7c:
4d:96:8e:e2:82:9e:49:7b:a4:5e:2a:f9:c7:c5:9f:
e1:a1:15:db:d5:cd:a3:10:f9:ac:cd:ff:c4:03:f6:
03:5d:3e:78:45:72:ac:eb:6c:d7:ad:20:14:76:fa:
08:71:2f:50:81:1a:2f:ee:b1:21:b8:0b:65:18:f3:
e5:5f:b1:e3:88:79:7d:58:9d:ad:15:d5:68:9a:6d:
d7:bb:fa:af:f3:e5:56:91:0b:cf:30:1d:f3:90:1c:
42:5e:c8:01:a7:4e:a8:7a:f9:3f:7b:e3:3e:44:64:
4b:54:88:10:e8:b3:7b:0f:37:3a:bd:57:cd:3c:b5:
75:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:F8:EF:0C:70:21:48:58:BF:D0:04:10:A6:ED:14:24:D4:6E:5D
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b5:bd:71:b9:b2:a2:c6:ff:68:de:f4:e7:92:5b:8d:d5:11:
81:e6:fd:81:f7:23:86:e8:b7:33:61:f1:f2:e5:77:a9:5b:f4:
bd:0c:34:b3:59:b2:2a:8e:fa:97:a0:9e:f7:8a:5b:5c:1c:42:
93:df:cd:4f:58:62:84:b5:65:08:c6:1d:4b:bd:a5:d3:2f:85:
78:9c:fd:0a:71:2d:1c:23:a3:e9:51:de:2d:d3:60:a1:8b:85:
75:81:f1:99:bc:27:ba:1d:9c:8a:e3:2e:23:0b:18:8d:5c:18:
5c:d0:f1:07:24:4a:d1:bc:94:97:75:78:1b:ab:24:d2:d0:8c:
89:26:f5:b2:26:6c:83:91:7e:71:fc:4c:b9:f2:3b:3c:fc:b7:
26:a8:0d:5f:ab:8c:7f:37:5c:5c:0d:b0:2f:b7:c8:ba:b7:b0:
fd:a8:af:70:b2:34:3e:db:28:cb:f8:d0:6d:ac:94:4d:a0:32:
c1:46:42:ab:cb:a6:f9:03:8a:1d:f5:c4:95:c4:d6:66:2b:55:
f4:30:a6:97:15:92:f1:2e:08:07:42:64:b8:fa:6d:2f:33:a9:
cd:d0:e8:c9:87:77:0a:e6:ed:4a:ee:9d:09:bb:b5:71:7a:7e:
da:df:85:2e:b1:b9:20:a8:87:bb:17:80:07:12:e6:4d:59:55:
3f:80:10:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:11 2026 by rpki-client