Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
File: u0cxiEug9XP6YYtuetUDoSyWWvM.mft (raw, json)
Hash identifier: XZhfDGnMcRCTQMIuil1ZWTeiQKRAjyet1rF1oaq6U0Q=
Subject key identifier: 8C:76:50:7D:1C:27:03:F3:63:B6:DE:A9:1E:2B:37:06:21:15:31:EB
Authority key identifier: BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
Certificate issuer: /CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Certificate serial: 019FA9E2D6225623A3654B2F953E9650CB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
Manifest number: 1162
Signing time: Tue 28 Jul 2026 18:00:43 +0000
Manifest this update: Tue 28 Jul 2026 18:00:43 +0000
Manifest next update: Wed 29 Jul 2026 18:00:43 +0000
Files and hashes: 1: Ba1hxRfH-k7ceH0oHPq1VVBsp6Q.roa (hash: YEBGA5Gf6yekIAoZS5i0FB3qMgjIsEWg2cbxv2B3zMs=)
2: SwYgBW9ALm4cVPOKM-XYBIFXbys.roa (hash: 19/i8e+hgUTh6yjnRYpTxmz4YU3y1nqkTgNB/sr2lZs=)
3: u0cxiEug9XP6YYtuetUDoSyWWvM.crl (hash: pkyhR+UFs1BPRgWsRnoF8ObuHxjuEP8YpJo+cpSw42o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:d6:22:56:23:a3:65:4b:2f:95:3e:96:50:cb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4731884ba0f573fa618b6e7ad503a12c965af3
Validity
Not Before: Jul 28 18:00:43 2026 GMT
Not After : Jul 29 18:00:43 2026 GMT
Subject: CN=8c76507d1c2703f363b6dea91e2b3706211531eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:7e:93:64:06:e0:0c:18:5a:92:73:db:63:64:
76:10:2e:d2:d5:4d:87:70:a9:d6:76:89:09:fa:fb:
2d:d9:4a:bb:ac:3d:6c:ca:ea:d8:c0:e9:9b:8d:8d:
62:9a:48:36:28:62:58:52:83:ef:bd:fb:f1:3a:29:
93:55:55:81:17:c5:76:8a:fe:4f:53:2b:4a:fa:5d:
5d:5c:fb:47:4f:78:49:f5:bd:59:3c:44:e2:88:6e:
2b:04:2b:6c:89:85:e1:2b:35:e2:30:55:e0:29:41:
f3:68:31:a3:c4:30:df:84:72:2e:e4:1e:f3:10:4b:
bc:29:27:fc:23:03:e5:2c:86:cb:72:17:d9:1d:94:
8b:e4:42:1f:e3:96:3e:11:01:96:e2:47:1b:bc:3a:
8b:0d:85:8e:25:3d:84:cc:7a:38:ca:21:7c:23:51:
c6:dd:69:77:25:b6:b0:1b:d9:bd:44:3d:f1:2f:eb:
7e:77:89:0d:b5:95:97:5d:c1:30:35:a1:48:4c:2b:
44:1d:5b:3a:c1:13:7d:9e:be:63:19:24:99:62:01:
9f:05:2b:a4:61:73:3e:58:f4:bc:80:99:6f:ef:43:
83:dc:ec:24:e8:bf:9f:ed:57:5e:3f:c8:53:7d:36:
8b:59:3f:ca:b8:ad:2c:1b:45:bf:53:df:3e:8f:71:
b9:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:76:50:7D:1C:27:03:F3:63:B6:DE:A9:1E:2B:37:06:21:15:31:EB
X509v3 Authority Key Identifier:
keyid:BB:47:31:88:4B:A0:F5:73:FA:61:8B:6E:7A:D5:03:A1:2C:96:5A:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0cxiEug9XP6YYtuetUDoSyWWvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/c212a2-37e9-4ad6-bbe6-835a5842b94c/1/u0cxiEug9XP6YYtuetUDoSyWWvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:6a:8e:b1:b5:ef:30:1b:24:34:f8:3e:46:21:87:a6:5c:4f:
d1:89:9a:41:64:9a:16:78:5c:c5:88:2a:2e:0f:4a:2c:89:58:
db:fd:06:f8:12:f6:76:ab:4d:86:61:eb:cf:9b:03:0d:26:83:
37:4c:1e:21:c0:1b:a6:30:f8:85:9f:23:f4:a7:eb:8f:7a:46:
b0:a3:3a:ef:40:90:b4:1a:dd:53:07:4d:8f:eb:bf:9f:fa:0b:
e4:37:19:a9:9e:e0:7f:da:6b:83:64:c7:a0:18:bb:5e:b6:9c:
ba:77:b7:9f:60:cc:e2:d2:02:9a:eb:df:fa:e5:c7:c6:65:0e:
5b:da:14:3d:6d:32:a5:3a:f0:23:4a:92:44:8c:35:79:ba:a4:
34:01:2e:d9:d0:8b:f9:6c:b3:fd:d3:ec:8a:b6:66:42:8d:90:
ab:8b:10:53:e6:4d:aa:1f:24:c1:51:bf:a5:9e:04:53:cc:d3:
6b:f7:67:65:1e:15:51:99:e8:0c:5a:77:8f:8e:55:c0:1d:66:
42:10:b2:71:94:e4:2b:ef:2f:a5:61:04:72:56:df:ff:74:6c:
97:55:b4:df:b8:73:93:bf:98:51:a9:b5:d6:f2:9c:23:33:4a:
97:e9:08:ad:db:87:4b:46:36:83:1e:33:1a:2d:43:1a:4d:08:
19:1f:b9:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:26:14 2026 by rpki-client