Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
File: 8Uebg8Ug14REXCSCi6tjPw1wLPM.mft (raw, json)
Hash identifier: Tf9STmBsR7Q+hKwslU5yEdSU28GMDDSYtdCi5T6VdEs=
Subject key identifier: 5C:7C:61:2A:A9:59:15:9E:94:35:28:B6:BF:0C:E9:51:11:C8:0E:64
Authority key identifier: F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
Certificate issuer: /CN=f1479b83c520d784445c24828bab633f0d702cf3
Certificate serial: 019FA8D078B93A3CF0DD6610B212A1C12BC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
Manifest number: 1A04
Signing time: Tue 28 Jul 2026 13:01:02 +0000
Manifest this update: Tue 28 Jul 2026 13:01:02 +0000
Manifest next update: Wed 29 Jul 2026 13:01:02 +0000
Files and hashes: 1: 1-oZ9nA1GvkJpmmO85td9UjPVOL8.roa (hash: WbrVzJ+KKcYmbA1ae+jXGRaz8FSjlb5bMrreVZGWW2A=)
2: 1TnMZEQ64_W5HuMznVxKJ5dlFfA.roa (hash: LYwc+mOlM01M+unCNznkUkoP96Z79ZkkIc/aLys/JZA=)
3: 8Uebg8Ug14REXCSCi6tjPw1wLPM.crl (hash: 31JFNnLuRSNSDxAUbGDB9IoHf3F1bd3FaDai029bZ/A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:d0:78:b9:3a:3c:f0:dd:66:10:b2:12:a1:c1:2b:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1479b83c520d784445c24828bab633f0d702cf3
Validity
Not Before: Jul 28 13:01:02 2026 GMT
Not After : Jul 29 13:01:02 2026 GMT
Subject: CN=5c7c612aa959159e943528b6bf0ce95111c80e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:fe:07:a2:5f:56:ff:9d:6c:d2:64:ad:02:
ef:ca:55:cf:75:12:89:0c:47:bc:ce:66:11:bb:e6:
bf:8f:b1:b1:c7:39:fe:e0:be:e7:57:4f:d7:3a:b2:
34:f0:dc:39:08:6c:e8:c2:0d:84:51:e4:80:c7:08:
c1:9c:eb:ca:44:ad:ba:df:c5:6c:df:6a:ea:2b:e1:
3d:5e:e5:c4:aa:d3:64:cb:53:c8:05:f3:96:4d:ca:
f2:23:7d:e4:b9:8c:c9:35:30:17:68:b9:bb:25:20:
73:94:81:4e:c7:56:90:02:59:22:83:fb:60:e0:27:
b9:72:9e:ec:55:51:9d:f8:e9:13:6e:4c:bf:c4:d2:
e8:30:84:ae:26:91:9b:91:21:7d:0b:41:cb:4f:9e:
db:0f:3d:42:f2:bf:fa:c6:4e:74:e8:72:c9:80:3a:
c1:1b:bf:21:fa:c7:16:7b:9a:6d:e4:28:4c:65:d1:
99:9e:ec:9b:e7:0e:d5:45:2f:9d:ff:5b:2b:d8:0b:
01:21:c0:0d:aa:8f:31:21:3b:c4:dd:b0:ce:1c:4f:
77:85:ec:88:ff:af:ad:fc:a8:2c:1b:95:3b:7e:6e:
01:3e:88:ef:3a:36:21:11:bf:64:58:47:b6:e0:13:
82:53:f1:c2:71:91:40:b2:9a:a2:ff:18:34:cb:67:
de:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:7C:61:2A:A9:59:15:9E:94:35:28:B6:BF:0C:E9:51:11:C8:0E:64
X509v3 Authority Key Identifier:
keyid:F1:47:9B:83:C5:20:D7:84:44:5C:24:82:8B:AB:63:3F:0D:70:2C:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Uebg8Ug14REXCSCi6tjPw1wLPM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a97e21-b5fe-4a56-a98a-bdd4af5f35d1/1/8Uebg8Ug14REXCSCi6tjPw1wLPM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:e0:ef:69:66:a6:10:b1:68:c9:c6:6c:db:fa:ba:19:e1:f8:
6b:06:58:70:30:e5:9e:77:29:06:e4:ff:d0:d9:7d:df:e4:8d:
80:bd:0f:ef:23:5d:7a:db:a8:95:28:9e:a4:4a:3a:ce:c2:62:
26:4f:de:f6:d0:a0:82:a9:1c:49:42:a9:a3:8b:de:f7:c5:f9:
65:00:43:78:a0:ee:19:3f:45:44:5a:30:8b:60:fe:49:04:0a:
f5:f3:2d:62:88:55:57:60:97:49:ab:90:4a:75:55:f5:4f:db:
3e:ff:c3:c3:14:e2:a2:c7:90:e1:90:30:6c:67:75:ca:5c:7a:
20:41:e5:9f:f8:f1:f7:de:c7:7d:9f:f9:70:fa:c8:7a:d8:25:
b0:df:db:d0:ad:46:c2:10:28:8b:5e:bf:e4:23:b2:c2:69:01:
74:ad:7a:5d:86:3f:7c:59:f0:48:f9:c2:20:f9:bd:3f:dd:96:
8e:94:02:cd:39:11:78:13:aa:e2:c1:f3:df:4f:a0:ae:91:6d:
08:59:5f:ac:f5:46:f6:36:f8:67:59:01:a5:31:9b:cd:be:dc:
98:cf:e0:bb:86:86:b9:4c:b0:2f:cd:fd:ce:a8:e1:8e:6e:44:
45:2f:b5:86:16:b6:5b:ec:9e:a9:92:38:fc:7f:01:6c:58:86:
25:07:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:53:08 2026 by rpki-client