Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: NWSqbsUoaEfxJ+YXjqhS1CHlzI278d6wic5xmZrFTCI=
Subject key identifier: 38:E2:17:4B:63:1B:11:0A:10:15:01:EC:BE:6C:09:F3:92:86:CB:B1
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 019FAA87421F2A6CAF4A2EF16EE83A4A28DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 21:00:18 +0000
Manifest this update: Tue 28 Jul 2026 21:00:18 +0000
Manifest next update: Wed 29 Jul 2026 21:00:18 +0000
Files and hashes: 1: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
2: e7AWg6gMHyJzfFZoLv-TywEgAls.roa (hash: 2GqfqgPDlKIc3f3uKLBeBJ8FyT92S1ZVg6GX/uLDIAM=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: kLf222fhuk528nV8OTQgSX4MA65qyjfsBl3sZd1iVjM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:42:1f:2a:6c:af:4a:2e:f1:6e:e8:3a:4a:28:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Jul 28 21:00:18 2026 GMT
Not After : Jul 29 21:00:18 2026 GMT
Subject: CN=38e2174b631b110a101501ecbe6c09f39286cbb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:86:51:91:cb:26:e2:77:e3:93:89:33:18:1c:
ab:1d:e4:a9:30:dc:de:69:75:80:a9:df:de:f3:95:
3f:79:0f:15:e1:84:45:1e:bf:a8:14:99:2b:9b:c4:
de:d1:ec:76:11:fc:7e:27:40:9c:a1:97:9d:c3:1c:
b4:b6:98:f2:47:f2:6d:81:e8:96:a9:9f:4f:4b:56:
6b:65:a0:77:38:ce:75:d7:c9:63:eb:ca:53:80:b7:
db:41:34:39:40:af:f8:30:08:b9:f7:27:f1:e8:cb:
55:f7:78:5a:f1:64:4e:1d:50:17:7b:f5:c7:5b:7b:
44:12:3b:0f:4e:f7:ee:c7:71:37:1b:9a:88:42:44:
88:3c:7a:83:51:a3:b1:d7:cd:b0:22:f5:c2:84:70:
98:fe:7c:1e:33:e4:8d:b3:1b:e8:40:ea:ad:4f:77:
86:1f:9a:0b:b6:ad:dc:01:2c:5a:5c:06:cd:40:13:
85:9a:68:5c:07:68:9a:bb:4a:97:7a:25:60:06:60:
88:ce:84:78:80:7f:53:7e:69:be:cd:45:9e:4d:b9:
1d:ab:f9:2d:fa:75:b7:a1:7e:1e:66:c6:4d:9a:25:
fe:e2:1d:e1:98:32:16:17:f5:b4:f9:c8:da:3d:08:
f6:72:ae:3d:ab:53:10:3f:9a:b5:fd:26:6e:c4:fc:
81:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:E2:17:4B:63:1B:11:0A:10:15:01:EC:BE:6C:09:F3:92:86:CB:B1
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:b3:0c:89:05:67:b9:65:a5:b9:b2:a0:15:0c:da:8f:3d:2b:
5c:48:63:19:ff:45:b4:1f:42:e4:e7:57:9e:84:3e:11:49:0d:
66:62:e6:45:e5:8b:ae:88:22:e5:da:75:9f:03:a7:b0:5c:6f:
d6:9d:d2:43:1d:25:c0:72:29:1d:f0:41:91:22:5b:e9:6e:ff:
1a:e6:68:0c:98:87:7b:9b:21:34:f0:50:1f:50:15:ae:5f:6c:
d4:d8:8e:ad:b6:40:f7:14:e2:58:0c:0e:0c:fb:90:57:38:b8:
df:df:a8:16:72:26:aa:5e:0d:e0:fa:d2:ff:32:13:81:e4:cf:
4c:11:62:7a:83:39:3b:48:72:f6:19:77:b4:a0:8c:e7:f4:31:
ae:f6:47:81:6a:83:fd:27:b0:49:bd:c7:80:66:d1:80:6a:c7:
00:af:a5:0e:16:cb:55:90:90:b7:00:98:76:c6:c3:f2:92:d4:
2a:d9:87:91:de:b5:d0:72:59:63:4e:bc:d2:0d:dd:29:88:de:
94:c1:af:67:c2:43:f9:f1:39:46:b0:f5:66:f3:a0:20:b2:4a:
4e:46:e1:fe:bb:22:7c:b8:b4:ae:26:f6:4b:b2:8c:34:ca:6c:
87:45:70:18:cc:02:dc:ba:16:cb:c3:ce:a1:64:61:24:71:71:
4e:1a:87:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:17:41 2026 by rpki-client