Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: J8ePTzVTBr1O9foZmajHYRKNykT4EOh9DFNhbBvtGZk=
Subject key identifier: B7:10:39:9C:FA:D0:C5:CE:DE:11:1B:58:F3:DA:25:77:7E:7A:8E:E2
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 019FABD186B185976ACF2059D2BA047515EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 1968
Signing time: Wed 29 Jul 2026 03:01:03 +0000
Manifest this update: Wed 29 Jul 2026 03:01:03 +0000
Manifest next update: Thu 30 Jul 2026 03:01:03 +0000
Files and hashes: 1: NuqvGLGVW54T2_CK4Y8l2k93wFg.roa (hash: DT5naWAM2r0ZiUJDhX9HJ7rLzQINkgWuAJdmInUQ/sA=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: tcDwWOqXG8/VIa/+U6gjeIBhq6gMXKc+da5bDg/DqRc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:86:b1:85:97:6a:cf:20:59:d2:ba:04:75:15:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Jul 29 03:01:03 2026 GMT
Not After : Jul 30 03:01:03 2026 GMT
Subject: CN=b710399cfad0c5cede111b58f3da25777e7a8ee2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:d5:d5:60:d6:d4:41:d9:f6:7e:86:57:21:
84:58:ad:a2:4e:de:9b:d6:92:e8:66:98:6a:04:0d:
a9:b3:70:69:83:19:27:2b:c1:0a:87:24:32:e9:56:
5d:ac:55:bd:1f:a8:f0:f8:52:1a:2c:31:47:48:a2:
2b:2d:5e:5c:bf:56:02:93:f5:1c:97:68:4b:17:0a:
89:00:3f:63:9d:89:54:c0:c1:a3:d0:80:38:f2:92:
46:eb:ae:3c:94:88:de:c5:25:c9:a3:e6:e6:72:07:
c0:43:7d:90:20:d0:52:d4:a8:a7:33:a7:11:b0:e5:
3a:e1:27:6d:c3:ce:4c:22:68:81:f4:d8:a3:6e:87:
71:7f:40:8f:82:97:a5:1e:ea:f8:1e:2b:4c:b7:92:
59:6d:04:c8:7f:4d:e5:70:8e:bf:2c:58:1a:8b:c5:
8b:be:bf:c1:5e:3b:96:65:51:e0:b0:30:ab:4b:e8:
aa:87:57:7b:64:cd:f8:8f:2a:e5:c7:89:91:aa:cd:
36:49:95:45:4c:2f:af:8d:aa:a7:c2:0f:ae:45:df:
cb:9e:c3:79:be:e5:a5:ae:b7:a1:f7:83:83:2e:64:
70:8d:5d:d6:2f:ae:1b:f2:dd:cc:2f:7b:f3:7a:a4:
9b:d4:16:3a:e8:35:4b:f0:72:be:b1:4a:18:fa:a6:
87:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:10:39:9C:FA:D0:C5:CE:DE:11:1B:58:F3:DA:25:77:7E:7A:8E:E2
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:7d:47:57:66:88:67:af:db:ea:b3:37:fa:fa:ff:02:2f:68:
e0:13:c1:e8:65:84:94:26:c2:23:9d:87:26:46:1a:e5:d4:34:
a2:6a:64:77:0c:47:08:c4:32:25:a4:44:f0:c9:60:69:f6:79:
e2:97:6f:59:13:52:46:d3:b8:3a:96:f0:93:35:c9:be:8d:af:
d0:26:2f:97:c9:26:81:90:b9:c5:44:c8:4c:6b:f4:a5:86:56:
75:55:43:21:4a:7b:da:c1:86:51:0b:b0:02:b5:78:2a:fd:38:
98:76:7a:7a:45:18:c2:20:2f:1c:cc:19:b4:85:38:79:45:7d:
38:5b:5c:d6:78:22:18:43:25:59:69:5e:11:b2:45:22:11:4e:
b8:89:c2:6d:eb:1b:e6:42:e0:82:f0:00:f2:1e:1a:24:1d:c3:
28:85:53:ac:38:69:ce:e0:c5:37:ac:e3:f0:bd:f8:86:20:3e:
d0:79:65:7a:87:69:1a:23:a5:cb:54:10:7b:a3:98:4f:32:8e:
50:bf:5a:02:23:5a:e7:3a:5e:58:c8:2e:e4:05:7d:9a:be:d8:
ec:ed:e0:06:49:47:1f:3c:34:9c:ab:1c:e4:e0:15:a0:4e:0e:
de:be:04:38:23:c5:4c:04:0a:af:6d:c2:2b:d7:fc:5c:1d:ac:
0f:77:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:24 2026 by rpki-client