Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: 0t50SuKJiBlry37bmEmr64mkMIK0gPoBNPeK74C3rQc=
Subject key identifier: 5F:53:98:82:C6:F2:3C:1D:87:3E:00:6D:27:74:B6:71:A6:C8:7F:2E
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019EC25BCF859926DA837FD5C72045FE33EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 08F4
Signing time: Sat 13 Jun 2026 19:00:57 +0000
Manifest this update: Sat 13 Jun 2026 19:00:57 +0000
Manifest next update: Sun 14 Jun 2026 19:00:57 +0000
Files and hashes: 1: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: ACvrOMg5F5DGPPpRhTbo5c86xUjvpTQ07QAfXlSfD6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:5b:cf:85:99:26:da:83:7f:d5:c7:20:45:fe:33:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Jun 13 19:00:57 2026 GMT
Not After : Jun 14 19:00:57 2026 GMT
Subject: CN=5f539882c6f23c1d873e006d2774b671a6c87f2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:d0:f5:65:83:15:3b:13:11:a7:38:02:92:
dd:0c:3f:41:86:bf:f2:81:08:3e:ed:b5:58:e3:94:
47:06:95:43:cb:15:9b:35:61:0e:9c:f5:22:f4:3a:
d2:fb:6b:eb:3b:53:af:23:1a:f6:48:4d:f6:8a:42:
fa:ae:e4:22:49:35:3e:9c:3c:25:9d:11:04:04:a4:
46:9e:4a:74:cd:08:39:e2:4e:af:38:12:06:46:27:
44:37:7e:14:ca:6a:67:c9:8d:09:13:d8:44:a8:07:
53:29:61:d3:78:9b:14:35:51:a7:60:bc:42:d6:71:
85:07:04:54:cd:d1:0f:c5:45:f3:49:a3:b8:f6:ce:
db:5a:2f:29:f4:9a:bc:bc:eb:91:86:3d:b3:3f:7a:
b8:42:f6:f9:d3:da:39:34:d5:da:94:95:f8:e4:b3:
ce:5d:3d:5d:aa:ec:d5:54:a6:c0:1a:67:8e:92:3f:
55:45:96:81:bb:1f:e4:3e:9a:63:54:3a:59:07:50:
ec:5d:60:6a:d2:5b:a2:e5:d1:d6:12:d5:c7:f5:fe:
c4:5e:4e:77:0f:3a:33:ed:b6:0a:9c:9e:5d:4d:78:
ee:67:78:d6:02:0f:62:13:f4:fd:b0:00:10:8b:93:
ad:c9:9a:81:37:e3:89:a0:3e:28:78:50:57:53:52:
8a:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:53:98:82:C6:F2:3C:1D:87:3E:00:6D:27:74:B6:71:A6:C8:7F:2E
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:8e:64:9c:9a:f1:aa:6f:04:2a:64:98:fa:63:ee:e8:09:13:
ec:95:c3:87:b4:bc:7b:09:9d:b8:fd:04:61:9d:20:3e:5f:93:
ef:26:f9:09:84:13:51:da:aa:d4:ac:d8:bb:12:d5:64:74:d5:
6d:39:55:3c:46:65:9a:6e:f5:05:37:26:c0:e7:f4:9e:25:e0:
25:d6:7f:bd:cb:bb:ef:be:ab:92:74:ac:2b:9f:a3:a4:52:9f:
80:65:85:62:bf:6f:f5:87:f3:c0:5f:00:7a:26:3a:f6:29:48:
95:93:1e:90:ed:7e:bc:38:fb:5d:89:73:e6:e5:46:44:2c:af:
bc:e7:61:16:6b:56:01:c4:d0:8d:72:ff:c5:c1:c8:37:30:42:
d1:95:70:7d:99:16:1a:e3:f9:24:34:67:6e:6e:60:8d:a1:9b:
97:6f:16:a4:1c:57:94:06:ca:50:77:f6:3a:a7:8b:d2:a7:a6:
f4:c4:4c:43:9e:19:fe:8c:09:11:e7:39:1c:6e:24:49:a6:76:
39:da:e2:59:ba:71:b0:1f:09:45:ed:3b:18:e3:87:17:58:c9:
c3:f4:0d:46:30:f3:dd:a1:da:f4:f2:fa:3a:ea:2d:92:4e:ec:
4a:10:b3:ba:a2:d1:a8:00:e7:05:79:3b:71:e8:57:a6:64:9e:
b0:ec:50:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:14:48 2026 by rpki-client