Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: GgMkwKMqQ0gNIDxtg59Pk0NBE7TZF5sSvO90482tTsI=
Subject key identifier: 88:3A:BC:D1:BD:5D:8D:A5:B0:00:F5:9C:75:ED:B4:E1:A3:8D:AC:90
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 019EC0DAD501FBAFA32F25260CF9713FCD23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 1961
Signing time: Sat 13 Jun 2026 12:00:27 +0000
Manifest this update: Sat 13 Jun 2026 12:00:27 +0000
Manifest next update: Sun 14 Jun 2026 12:00:27 +0000
Files and hashes: 1: UybLyc41wyq1EFImSu8EZ8F9ePY.roa (hash: uoRuUCd9kxaIGLIP2zdwMd/9Cx50ab0dt0v8YUxq+5M=)
2: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: mDtRubESxoKUI+8nu1FFko4Vu/khKBvgM8jo9ysl7V8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:da:d5:01:fb:af:a3:2f:25:26:0c:f9:71:3f:cd:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Jun 13 12:00:27 2026 GMT
Not After : Jun 14 12:00:27 2026 GMT
Subject: CN=883abcd1bd5d8da5b000f59c75edb4e1a38dac90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:5f:11:1c:00:20:f4:41:73:6c:14:55:24:ac:
5d:1b:41:ae:ca:d8:84:a8:fd:78:de:95:c4:fb:b5:
f4:95:ab:c2:61:ec:9f:10:10:b7:c7:36:8e:fc:b1:
7d:67:d9:4c:62:36:26:a7:7c:03:16:26:35:c4:e9:
b7:75:59:95:3c:9f:20:68:2d:14:3a:59:4c:d8:89:
29:24:ef:2c:2b:ef:ae:ca:e0:0e:00:05:72:06:3f:
a0:9e:b3:c1:5c:6c:35:0c:22:cb:69:e5:17:49:07:
07:25:a1:01:05:ac:fa:55:4d:64:5d:bf:bc:25:71:
96:40:de:a1:da:d3:54:3f:a2:02:b6:7d:f6:a3:59:
c7:71:42:55:b5:e1:2b:a0:0e:9c:f3:07:ae:2d:46:
4f:8f:cd:7c:41:c8:04:45:4f:d6:86:b4:f3:4b:f6:
50:31:23:38:94:b6:2b:ba:a7:dc:5b:b1:4b:20:81:
4d:d3:83:5a:1b:1a:d5:a7:9a:a1:77:1a:2f:25:2f:
d1:87:16:ed:f5:cf:b2:1e:c5:4b:f1:16:79:73:a9:
8f:6b:c1:29:e8:c5:ce:5e:1f:3b:66:b5:47:02:d7:
68:a2:57:34:9a:ab:22:3a:b6:2d:e5:ca:37:5f:52:
64:f4:0f:cd:87:a7:5a:76:e0:fd:07:ef:33:12:67:
75:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:3A:BC:D1:BD:5D:8D:A5:B0:00:F5:9C:75:ED:B4:E1:A3:8D:AC:90
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:f2:a3:d8:c4:57:0e:74:d7:8a:6d:82:66:7b:85:5a:b0:03:
0d:c2:45:82:a0:47:80:90:97:cd:80:d1:62:ac:9c:03:d3:1f:
98:2e:a2:2c:2f:65:e4:24:64:50:fd:ba:b6:00:f7:bf:b4:ab:
41:9d:81:c7:41:70:08:22:40:70:91:b6:0d:1e:82:01:82:70:
bc:6e:58:45:f4:37:75:0a:47:57:73:02:58:fc:95:f5:fe:cb:
9b:30:ab:83:78:00:ee:26:a6:a6:5f:40:d0:36:39:01:99:7d:
6a:3e:0b:cd:88:02:d7:97:bf:c3:44:f7:75:7b:b3:f9:3c:b7:
d7:bc:65:e1:66:85:69:11:ab:0c:f4:59:42:31:27:14:2e:da:
27:0b:34:4c:26:66:96:8e:e5:a8:44:9b:75:de:56:cf:e1:ea:
d0:a1:11:f4:76:9d:51:ba:db:98:58:ad:8e:c0:cf:b1:42:46:
80:46:47:83:56:db:c7:22:f4:14:16:f7:11:5d:32:03:fb:17:
8f:2b:e7:50:38:a2:a2:98:b7:ae:0d:cc:4f:65:0e:09:74:b1:
ac:ea:9c:24:d9:9e:55:fc:60:12:35:31:4b:b4:64:f0:9b:76:
97:df:f3:29:1c:7a:dc:23:dd:60:70:d1:3c:5d:b6:e9:8f:04:
1d:f2:40:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:47:57 2026 by rpki-client