Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: 4q/P2yN70IGqGRZPKF9E2JyeMMbU8WhS7Gxj7mZVutA=
Subject key identifier: 93:80:49:74:AE:45:BA:48:79:C0:3E:F9:D6:09:27:68:BA:CA:51:CE
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019FA9751F58A3692C7E3E24F83FAF4C8BCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 1022
Signing time: Tue 28 Jul 2026 16:00:52 +0000
Manifest this update: Tue 28 Jul 2026 16:00:52 +0000
Manifest next update: Wed 29 Jul 2026 16:00:52 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: W5rhwWminnwvt1ikNTwA8epDEL4EwehcySV36A9pV5g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:75:1f:58:a3:69:2c:7e:3e:24:f8:3f:af:4c:8b:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jul 28 16:00:52 2026 GMT
Not After : Jul 29 16:00:52 2026 GMT
Subject: CN=93804974ae45ba4879c03ef9d6092768baca51ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:58:e3:c3:b0:11:d4:59:21:4b:1e:d2:50:96:
4e:97:d1:cd:71:01:4d:1b:88:05:49:78:44:72:ba:
33:1b:76:eb:52:aa:cc:21:ae:e1:74:53:7b:59:57:
c8:b4:82:67:72:87:02:76:cb:b5:7d:51:e2:72:25:
ca:63:72:0c:b2:aa:e8:91:08:0a:b7:a3:f8:61:4e:
14:64:3c:26:e5:e6:11:41:9b:ed:2c:50:a6:ff:f3:
3e:a8:fb:84:21:b3:f2:5a:bf:21:4c:1f:57:12:22:
22:00:4b:1c:cf:e0:a1:d0:e4:e4:11:99:61:d7:ff:
df:1f:15:12:5b:d0:23:17:49:34:93:2d:aa:de:59:
83:57:ee:ec:85:02:0f:ad:ab:fa:17:cd:fb:ba:72:
3b:7d:a4:f8:19:cc:c1:9f:9b:59:61:dc:88:91:17:
82:98:89:bf:25:f9:74:48:e0:96:18:d2:1d:06:90:
e8:4e:3a:c4:5d:19:70:ff:4a:23:22:7a:44:53:3c:
c0:c3:52:6f:9a:fc:9d:27:cc:32:c7:53:39:a5:ed:
dd:dd:b7:f9:3e:4e:27:34:f2:e2:5d:cf:da:8f:5a:
d2:28:32:50:49:17:7a:a1:76:50:63:0d:23:33:45:
ed:29:18:11:95:8a:ae:8d:23:45:86:09:bc:b6:40:
a2:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:80:49:74:AE:45:BA:48:79:C0:3E:F9:D6:09:27:68:BA:CA:51:CE
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:b2:e3:08:ae:bc:16:31:e2:cb:9d:bc:2a:6f:2d:a2:cb:fc:
74:9c:f0:ef:9a:b6:30:19:7a:5f:b8:b5:de:f3:ac:8e:7b:ad:
22:66:9d:a5:2a:25:be:39:9c:99:46:8a:44:93:96:30:cb:80:
ec:64:b7:36:21:1a:dc:3f:f2:fa:d0:ec:d9:86:e0:0c:52:5d:
73:95:8b:c5:3f:91:d8:15:fa:71:34:d4:c4:fd:26:d2:aa:4e:
35:7e:21:2c:2a:7b:8c:7f:8d:7d:97:0d:57:47:35:1d:cc:80:
11:52:87:3c:d7:84:13:5a:5f:38:9a:bb:c2:48:31:20:da:ef:
a8:3a:8a:83:60:83:e6:ee:87:fd:6e:a6:c1:a3:21:4c:05:6b:
3e:55:fc:0c:0e:c8:be:69:54:b0:8d:37:5f:bc:fb:32:9b:f8:
69:3c:97:b8:a4:1a:a6:bb:b5:51:40:10:14:27:a8:1f:86:85:
4a:25:ca:86:6f:c5:df:a0:b0:e2:5b:5d:4d:78:06:a3:8b:56:
ad:9e:63:4d:59:14:f8:62:55:ca:2f:e3:be:8c:a8:19:7f:91:
45:e0:8e:39:9c:e5:85:dd:6e:c8:f7:cf:47:75:c8:ec:89:90:
e7:1d:01:c1:c2:13:07:b2:34:d3:9c:5b:53:ef:2b:1f:21:fd:
a5:70:0c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 22:56:16 2026 by rpki-client