Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: +NknfCGXdHMg7ETcn+Bf0NArCcUINtKOgtu5ZMHoRl0=
Subject key identifier: 56:63:FD:AC:11:71:EC:6D:95:9D:69:CB:6F:70:3E:FE:0E:D7:EA:BE
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019EC06D55B45B4966C8EC53FA18632204D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 1959
Signing time: Sat 13 Jun 2026 10:00:51 +0000
Manifest this update: Sat 13 Jun 2026 10:00:51 +0000
Manifest next update: Sun 14 Jun 2026 10:00:51 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: p28oorHkKIIvjl/638L8nhNHpyRm64TYAaMDIebser0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:6d:55:b4:5b:49:66:c8:ec:53:fa:18:63:22:04:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jun 13 10:00:51 2026 GMT
Not After : Jun 14 10:00:51 2026 GMT
Subject: CN=5663fdac1171ec6d959d69cb6f703efe0ed7eabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:5d:df:03:0e:a7:00:12:2c:2f:9c:18:b0:24:
42:7b:58:77:cd:94:1d:73:fb:cd:53:09:c6:9a:21:
73:c8:2b:c4:c8:40:2d:cb:25:29:70:d4:f0:28:66:
b4:1b:94:ee:33:7a:a4:41:fe:01:32:af:25:28:45:
04:fa:97:23:0d:f0:5a:b8:11:e2:8b:df:da:7e:60:
2d:13:58:66:9e:c0:33:58:91:d4:ec:be:08:b0:e7:
de:e0:6b:77:05:d0:7a:88:35:c5:8b:34:28:92:76:
7e:80:fd:86:42:0b:96:16:cc:05:74:c1:89:55:3a:
09:9b:13:c3:09:d9:15:d1:74:ab:9a:a5:33:92:43:
c8:73:ab:23:79:e0:76:1d:dd:2c:12:5b:3f:ba:72:
25:05:26:f5:ea:fa:8a:71:ce:d5:86:68:bc:2f:f3:
df:9d:34:4b:be:e6:2b:ce:63:22:57:0b:64:22:ba:
8a:13:22:3a:5d:45:93:b1:53:6c:7f:dc:a1:08:fc:
3c:08:72:6b:bd:e8:0e:e3:44:e9:14:b1:37:45:8d:
30:58:1d:9f:7c:8f:3b:10:88:51:49:a2:de:18:a1:
78:12:eb:0c:cb:ba:41:6b:93:d0:1f:33:c2:7a:23:
87:7b:31:77:6f:8b:d1:1c:1f:60:c6:eb:07:87:14:
e4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:63:FD:AC:11:71:EC:6D:95:9D:69:CB:6F:70:3E:FE:0E:D7:EA:BE
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:18:27:70:15:c6:33:a7:f8:d9:ed:13:5a:5d:7e:6c:87:54:
d5:44:90:28:49:ca:33:ba:7a:c1:db:4d:13:c9:2a:0c:fb:31:
c4:e5:4d:36:cb:3d:88:3e:b6:76:83:32:55:e9:e7:40:98:18:
ca:0d:8e:a7:d8:d0:c7:56:ac:c7:24:8e:13:68:b2:35:33:53:
5e:0c:28:b2:71:2d:ff:52:c0:5d:81:90:e2:66:b7:14:88:4c:
e0:c7:8b:4c:b9:45:ba:df:a6:ae:f4:71:0b:1e:be:2d:3e:03:
8e:13:ba:ac:76:e5:02:ef:78:97:78:b9:67:d9:94:49:14:5d:
15:c0:a3:26:3e:bd:98:1a:72:d6:b2:62:40:1a:ab:a5:b1:88:
71:8f:cc:fc:8c:2a:08:9f:14:c1:21:5e:2d:31:bf:c1:6f:2d:
27:55:c8:fd:41:1e:53:a7:b3:5e:23:68:24:17:e5:50:07:db:
14:5a:26:06:93:dc:63:b5:16:c4:35:ef:1b:3d:c8:66:0f:f1:
f0:d4:aa:66:83:59:36:0d:16:1d:c8:7a:a4:70:ac:d9:3a:58:
ac:ce:09:8e:41:b9:f3:86:d5:08:9a:45:69:9b:28:c1:09:c3:
0b:e9:6a:13:47:41:52:11:e6:e1:a0:66:3f:d3:f5:43:ac:e8:
75:6e:58:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:08 2026 by rpki-client