Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
File: rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft (raw, json)
Hash identifier: 4XLt1qbLPFiilNPZWFYlvWXhESK8E0zLHBzbNe+SHOg=
Subject key identifier: 58:8E:C0:31:39:30:B0:94:EB:85:A1:C1:EE:33:22:84:53:AC:43:42
Authority key identifier: AD:4A:14:95:48:4C:E2:BF:9E:C2:81:99:A8:29:98:AD:02:63:83:16
Certificate issuer: /CN=ad4a1495484ce2bf9ec28199a82998ad02638316
Certificate serial: 019FAAF5D0B843AD0AF769410B880C8BDD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUoUlUhM4r-ewoGZqCmYrQJjgxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
Manifest number: F0
Signing time: Tue 28 Jul 2026 23:01:03 +0000
Manifest this update: Tue 28 Jul 2026 23:01:03 +0000
Manifest next update: Wed 29 Jul 2026 23:01:03 +0000
Files and hashes: 1: 6jvFzq_4UsYldaOwxfJ_8ZSGbwo.roa (hash: t00VjLWnYJWof/FCeEdXeWSPPPWivNxDIX6Z/k5etw4=)
2: QxtGFQLDBMtwcXQIYvKECB6M8PQ.roa (hash: 8rNe9XZWHz25/AzS0lELU8ToNgCQJWZ458eNl8uH1hg=)
3: rUoUlUhM4r-ewoGZqCmYrQJjgxY.crl (hash: 6VS7+jmiTrKTAH7hPnwfRHTVE98Wk1qhpXwP3w32e5U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUoUlUhM4r-ewoGZqCmYrQJjgxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:d0:b8:43:ad:0a:f7:69:41:0b:88:0c:8b:dd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4a1495484ce2bf9ec28199a82998ad02638316
Validity
Not Before: Jul 28 23:01:03 2026 GMT
Not After : Jul 29 23:01:03 2026 GMT
Subject: CN=588ec0313930b094eb85a1c1ee33228453ac4342
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9a:42:f3:ab:4d:2a:2d:98:33:25:5e:0a:c9:
4d:f3:95:cb:73:28:54:0a:52:c9:34:23:0a:82:55:
d5:c0:47:3f:ad:52:8b:5c:d6:e7:1f:7c:ca:71:cd:
4a:d4:db:7e:9c:53:c1:28:37:8e:b6:d1:46:20:82:
bc:0c:46:f9:ac:d7:64:4a:b0:22:8d:db:c8:fb:18:
03:2b:92:f2:3f:f9:0c:46:9d:f1:bb:d7:e6:0b:3d:
fd:b5:ef:13:02:cb:9c:ce:b0:4e:52:48:b7:a1:cc:
29:3d:80:fa:e6:c4:7a:f2:96:a8:61:99:f1:45:52:
94:e9:42:b7:5b:b6:fd:4a:47:a7:72:36:e0:76:fc:
82:53:63:61:fc:c2:95:9b:42:98:d1:87:36:42:a4:
a1:eb:f0:c9:8c:55:bd:23:68:5f:62:12:d9:37:b6:
f5:96:ce:d1:2e:77:10:61:9d:d1:d4:95:4f:7a:00:
f9:a5:30:49:c6:4a:50:04:bb:0c:81:21:6a:ef:9e:
a0:a3:ad:7a:87:41:d9:05:05:87:03:bb:13:6b:4d:
2b:a3:a2:7e:d4:92:96:01:20:46:52:b9:e3:24:51:
b5:b2:b7:96:71:66:30:ef:75:eb:88:f6:15:89:24:
d1:a0:a3:4a:f9:14:79:cb:90:1b:99:4a:19:a4:ec:
6c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:8E:C0:31:39:30:B0:94:EB:85:A1:C1:EE:33:22:84:53:AC:43:42
X509v3 Authority Key Identifier:
keyid:AD:4A:14:95:48:4C:E2:BF:9E:C2:81:99:A8:29:98:AD:02:63:83:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUoUlUhM4r-ewoGZqCmYrQJjgxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/b30e30-6b81-4585-8b54-61a8ec8166fe/1/rUoUlUhM4r-ewoGZqCmYrQJjgxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2b:08:59:cb:71:4e:a4:bc:95:f6:1e:ad:76:9a:3f:6c:5f:
40:82:95:1e:f0:62:a6:53:65:6a:93:69:84:ac:38:38:e2:59:
6a:86:cf:ee:50:40:8d:c7:1b:f5:d9:36:fd:74:e6:9b:13:6b:
73:c6:46:1d:cf:bf:99:d9:7d:3e:d3:b1:84:8c:d7:96:1f:23:
78:68:f7:e4:f1:47:e8:1d:b4:61:2e:8b:62:c0:07:95:09:1f:
77:66:a1:21:d6:31:55:3d:b9:48:d8:2c:2a:34:b0:d9:49:12:
ec:f7:bf:9c:b4:d8:cf:3b:7c:fb:4a:20:8b:ac:27:bf:94:0a:
33:03:1e:92:c4:f3:0c:e2:3e:a1:36:31:bf:01:5a:a4:17:ae:
4e:bb:fb:7f:e6:f9:cc:b6:7e:a9:42:80:11:58:68:74:67:48:
ed:8d:f4:82:11:fe:42:79:95:3c:72:c0:78:cf:fa:97:ec:8a:
75:ae:cd:07:25:1b:7f:a7:bd:f1:1d:3c:d9:9d:75:c1:ff:bc:
99:32:6a:08:16:dc:63:e9:11:4d:19:1d:21:25:e2:b2:30:e9:
65:7c:19:44:df:43:07:17:78:7f:ca:46:08:37:05:ea:09:32:
27:60:0a:cf:c9:aa:d1:9d:4f:24:5e:d4:52:90:ab:14:6d:9b:
ee:60:8d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:15:30 2026 by rpki-client