Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: WwxKGA8lI7XuQbOjXnk4BIXZro3jLP7xaPA/Tq2ZY8M=
Subject key identifier: A0:57:E7:AF:52:E5:17:34:61:F2:58:E8:E2:3D:68:72:06:86:E3:BE
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019EC0A45CB019698422F6BE68E6C9FE5BE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 109F
Signing time: Sat 13 Jun 2026 11:00:57 +0000
Manifest this update: Sat 13 Jun 2026 11:00:57 +0000
Manifest next update: Sun 14 Jun 2026 11:00:57 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: c5i7rRupM6BRO2MGdhFfOChV+esSvlxoQe00WS2LMLI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:5c:b0:19:69:84:22:f6:be:68:e6:c9:fe:5b:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jun 13 11:00:57 2026 GMT
Not After : Jun 14 11:00:57 2026 GMT
Subject: CN=a057e7af52e5173461f258e8e23d68720686e3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:41:8e:02:12:00:04:07:fc:cb:41:64:a9:4a:
11:fc:86:24:da:43:d4:66:12:13:98:76:e8:4a:e5:
9a:6f:9e:5e:e6:83:c8:31:9b:48:da:63:18:ee:68:
bf:6e:95:b3:21:a1:ae:bd:09:19:34:d0:39:c3:33:
59:ad:79:ac:3f:e8:2b:7c:b2:8f:23:77:ed:10:0d:
95:7e:e8:30:a7:e2:17:1d:e4:26:dc:f2:f6:ed:6e:
5b:79:ff:f4:75:7b:f9:53:88:38:82:9e:56:a9:da:
1a:75:c9:58:f3:3b:de:ca:5c:de:6e:43:97:45:ff:
6c:14:f7:47:a1:89:cc:fd:d4:e4:fc:96:b8:48:a4:
cc:19:b1:19:ec:89:9d:f8:2c:87:95:e1:4e:9c:b9:
2f:79:62:82:7d:ba:84:72:77:f2:8a:a9:73:52:1b:
23:77:6c:c3:dd:3d:e6:de:ee:fb:71:17:01:21:68:
e2:35:f0:27:cc:31:66:b6:59:ba:5a:56:79:1e:0f:
eb:42:2f:a9:75:6a:1b:ab:a9:a0:66:6b:5e:8f:61:
54:83:0c:aa:19:16:2c:7c:73:a7:02:8d:64:4d:36:
cc:bb:6f:a1:bc:90:45:ea:7d:29:cb:75:ee:39:cd:
87:70:70:ed:1c:07:41:04:70:86:6d:a8:84:46:18:
26:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:57:E7:AF:52:E5:17:34:61:F2:58:E8:E2:3D:68:72:06:86:E3:BE
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:2a:b1:4f:31:9a:b7:97:8d:95:20:fd:1b:14:bc:d7:7d:9f:
ac:09:f9:4b:c7:a0:f3:65:c4:f4:ee:fe:f3:69:bb:93:20:be:
a7:ed:35:fb:45:4a:36:6f:fe:10:b8:85:85:d1:95:f7:73:27:
75:0b:c2:3d:a9:84:5e:82:7c:fe:72:8a:a2:6a:64:5f:67:15:
e0:86:9f:29:83:96:34:39:9a:f3:bd:b2:f7:08:6e:6e:70:5a:
c9:6e:d9:a9:2e:6e:1c:b3:e5:44:65:dd:3f:00:af:7e:47:45:
bf:c6:47:ea:b1:f9:6f:c1:e6:85:a9:86:ea:d7:f9:be:21:49:
75:d1:98:37:b7:1d:31:ca:53:f6:d5:ef:b1:d1:dd:16:04:53:
82:85:f3:6d:81:b2:a0:87:03:96:07:5d:96:7f:3b:21:a0:99:
04:85:95:d7:dc:f3:c9:fc:f2:eb:98:d5:ce:4c:c4:29:a9:99:
81:75:12:25:e1:ff:cc:1c:c8:e4:fa:c6:30:5b:35:43:14:53:
f9:d0:af:b8:03:d2:88:a0:1d:21:38:7e:90:e4:7b:42:62:f4:
02:88:4b:77:38:d7:be:33:0f:60:90:f8:be:71:df:18:f0:51:
e7:1d:17:59:51:8f:fa:06:3d:f0:7a:94:67:3e:a5:5c:b5:7f:
aa:aa:a7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:48:12 2026 by rpki-client