Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: JH6M/tWX+OH/6OsvLX1l5zVh82VTeHS2hWFqL93rzbk=
Subject key identifier: ED:4B:DD:04:FD:D5:61:6A:AF:48:DF:55:48:4D:5E:FA:7D:53:5A:08
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 019FAD5155FA57DC54692E5DE2770F4783F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0DDB
Signing time: Wed 29 Jul 2026 10:00:16 +0000
Manifest this update: Wed 29 Jul 2026 10:00:16 +0000
Manifest next update: Thu 30 Jul 2026 10:00:16 +0000
Files and hashes: 1: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (hash: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw=)
2: Bryd42xc20l8yGYzsCePWUyIRpQ.roa (hash: SfEAMcqg1lAI6lIUE6EnsEoR1LWkzVlNk7fPcXSOd1o=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: OnmvJqAA8qpvNM/b8VlJgOH6dNy5RfY6yxYVIUPgB+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:51:55:fa:57:dc:54:69:2e:5d:e2:77:0f:47:83:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Jul 29 10:00:16 2026 GMT
Not After : Jul 30 10:00:16 2026 GMT
Subject: CN=ed4bdd04fdd5616aaf48df55484d5efa7d535a08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c6:90:41:6e:ef:e4:68:fd:ea:c0:1a:64:2a:
22:71:f3:30:f0:f9:97:fa:31:7b:ec:69:f7:2d:66:
76:3f:7f:36:22:b7:0b:11:20:55:55:62:73:da:c2:
1d:ea:8f:16:95:14:84:3e:b0:14:87:a5:38:76:74:
85:bd:91:f3:da:7e:56:ab:d1:ce:fd:b8:16:c8:a1:
3e:08:89:01:ae:6a:7f:2a:a9:b3:5b:71:7e:63:58:
1d:4a:fc:87:70:72:a7:bd:42:97:b0:87:30:d4:db:
55:47:62:f0:85:70:e8:d4:5d:e4:f6:86:f2:23:44:
e1:44:f7:75:fa:4a:b5:76:8b:b8:90:68:17:48:28:
78:5d:dc:23:86:cb:e1:1f:05:c6:38:c6:60:06:fb:
06:1d:31:d7:5e:8c:50:a1:80:50:bc:24:8f:7b:7a:
45:c8:87:8b:f5:e4:d0:89:06:f5:0c:e7:32:f1:b8:
dc:8c:41:31:6f:64:33:f4:3d:c6:01:f3:20:dd:89:
bd:9c:46:3e:a8:43:95:aa:e9:4c:9d:a2:d3:b0:05:
8a:50:ba:a4:db:c3:74:b8:8a:94:fe:f1:1e:bb:38:
c5:66:fb:e6:f3:46:de:56:5e:f0:36:29:a6:8c:0f:
be:c4:18:67:d6:84:15:9d:54:87:46:5c:51:65:e4:
97:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:DD:04:FD:D5:61:6A:AF:48:DF:55:48:4D:5E:FA:7D:53:5A:08
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:a5:9b:6a:76:39:3e:82:ad:93:20:0d:db:50:d9:70:89:0e:
0c:c5:54:28:4d:28:6f:5e:81:29:09:a5:79:1e:43:6d:4e:52:
92:53:94:d9:b6:f6:68:74:d9:4b:c1:b4:cd:b7:3b:c1:bc:36:
a6:7b:67:f9:0a:03:29:aa:49:24:a6:6f:df:3d:83:2b:28:03:
63:58:97:1a:1d:54:04:07:a7:e2:f4:f3:d6:54:3c:6f:62:da:
7b:e4:45:d9:3b:01:1c:80:a7:df:08:4d:17:25:6e:84:97:63:
62:11:78:8d:a1:5e:52:1d:39:66:d6:6f:46:18:8d:06:81:dc:
67:c7:34:87:5f:39:05:d5:b2:f3:9b:5e:25:19:4c:06:a7:71:
7e:77:a8:6a:f1:f5:b4:af:f9:a8:95:9f:11:f1:e1:44:75:18:
bf:80:eb:05:8e:6f:99:ff:db:53:91:ce:46:ec:a5:07:f0:91:
a5:89:06:a3:c6:4f:e0:86:71:a9:fb:97:87:d0:03:6b:95:aa:
e4:2a:8a:c7:a9:69:df:3a:74:8e:5f:ba:9e:cd:da:d7:40:8d:
d0:14:93:96:4e:45:f7:f7:8e:1a:da:af:ef:18:91:98:c0:99:
aa:a1:f1:13:66:9e:35:36:97:d3:e7:1b:9a:c4:7f:b9:f2:76:
fc:38:cc:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:37 2026 by rpki-client