Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: OIBK+eqSDmq2tHO39TpS6S4UY6LtRJd1nsCzmshN+AY=
Subject key identifier: 14:0B:BE:DC:AE:1E:09:4C:C2:CD:2B:1E:E3:70:D3:82:50:54:08:CB
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 019FAD520A18B583B027141C762F9B17CD40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 06A2
Signing time: Wed 29 Jul 2026 10:01:02 +0000
Manifest this update: Wed 29 Jul 2026 10:01:02 +0000
Manifest next update: Thu 30 Jul 2026 10:01:02 +0000
Files and hashes: 1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: 0e77plwGh73v+663mm5dyhI2wyDdsP9h6ZWMGYlLYYA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:0a:18:b5:83:b0:27:14:1c:76:2f:9b:17:cd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Jul 29 10:01:02 2026 GMT
Not After : Jul 30 10:01:02 2026 GMT
Subject: CN=140bbedcae1e094cc2cd2b1ee370d382505408cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e6:33:27:83:c5:f6:2a:54:6e:00:4f:d7:a6:
f7:d6:ca:31:64:91:cc:51:ca:ef:42:3b:de:8a:58:
71:14:fc:1f:41:10:ee:c5:a8:21:4f:5c:91:4f:b3:
1a:8d:cb:3c:e0:55:f4:0a:eb:df:ca:5d:ac:92:da:
dd:b7:0e:09:ce:a1:02:b3:df:03:1c:69:b5:c3:57:
14:ce:eb:a4:b2:5d:84:f0:85:c2:a1:70:58:3d:d8:
37:a3:e1:73:d5:b1:a4:5f:6a:60:a2:b2:37:6b:d5:
86:22:dc:32:b0:57:71:c5:a1:31:1a:76:3f:53:0f:
7a:b3:f5:df:1b:e1:6f:2c:7e:53:08:7b:24:92:cd:
d6:e8:c8:6e:fc:85:f9:f9:cd:44:e3:37:26:89:20:
33:9c:66:8f:d8:3b:48:f0:41:2b:91:9e:98:4e:a3:
4c:2f:50:3c:6b:3c:03:56:f6:92:c1:a6:39:95:1c:
eb:36:a4:04:b4:21:33:bd:d9:77:2e:aa:e1:c8:1c:
2b:8b:f6:64:2a:d7:7b:f3:77:72:b4:a4:a6:bf:c4:
cb:9a:cf:74:09:29:02:6c:6c:37:7d:f8:d3:80:00:
2c:75:21:9b:66:ba:be:75:b2:9f:21:d5:a7:20:c1:
e2:1e:09:5c:fe:62:6d:31:7a:a0:c4:4c:15:70:94:
cf:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:0B:BE:DC:AE:1E:09:4C:C2:CD:2B:1E:E3:70:D3:82:50:54:08:CB
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:7e:46:ad:88:0a:cc:2f:7d:19:ac:92:e3:98:a9:67:c6:f0:
9e:7b:c9:d5:d8:c8:be:b2:b4:52:c7:cc:13:4a:a0:9b:d2:02:
6f:ca:f4:6b:21:3b:17:18:ea:d0:eb:10:f5:67:dd:27:bf:36:
7f:5f:eb:ef:1b:33:93:cd:8d:bb:73:5e:22:86:8b:08:9c:7d:
34:96:52:47:7f:52:2d:ad:c3:a5:7f:0a:49:0e:36:95:f0:df:
7d:72:d2:ff:48:4c:56:8e:07:69:4a:ff:80:32:ef:b7:f1:88:
cd:cb:73:27:7f:19:98:4d:2c:e6:35:41:62:bb:50:ac:ed:a9:
36:f0:21:e1:e8:48:1c:4c:9f:b2:00:1a:5d:77:a5:cb:8f:f3:
2e:ab:83:de:91:d7:f9:68:8b:2f:2a:58:60:4f:01:94:12:9c:
ea:d1:9a:83:af:32:0f:2d:a3:47:a9:60:b8:5a:25:f5:da:66:
ef:de:82:3d:af:45:37:ee:ff:3e:07:06:88:1a:fc:3e:4c:94:
3b:f8:2d:bf:cf:35:45:d0:7c:b0:2f:9f:b2:93:5e:f7:25:6e:
4e:35:79:29:d5:a1:41:df:08:f1:6a:fe:0a:c3:7b:af:24:a9:
08:57:0e:c4:96:7e:ec:fe:19:10:32:b2:9c:b0:88:45:f3:b3:
76:90:97:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:45:36 2026 by rpki-client