Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: YfiaAcTN0OjQ28U/TDYN+HCaALMacTd9YELsO6+W+uw=
Subject key identifier: 57:96:9B:7D:79:D9:1D:0F:71:CB:E0:02:4B:C5:E1:3F:D9:F6:C1:41
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019FAC07F2FB7CC71BDF3FDEEC6571BD76F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 04:00:29 +0000
Manifest this update: Wed 29 Jul 2026 04:00:29 +0000
Manifest next update: Thu 30 Jul 2026 04:00:29 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: Pbtp6KfWeEUhYZw2RlyyUvP+Z+4Tos005iynxSC45EE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:07:f2:fb:7c:c7:1b:df:3f:de:ec:65:71:bd:76:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Jul 29 04:00:29 2026 GMT
Not After : Jul 30 04:00:29 2026 GMT
Subject: CN=57969b7d79d91d0f71cbe0024bc5e13fd9f6c141
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:a1:9b:cd:e8:06:5a:67:6e:8b:ea:ca:aa:35:
22:d8:54:b7:72:c4:e4:9a:96:9c:19:a3:ae:c0:9b:
fb:48:c9:68:f6:e2:cd:95:9f:69:7d:fc:83:27:cb:
73:85:5d:b7:1a:e7:c7:7c:05:90:82:2d:c3:7d:a3:
72:f1:75:8d:68:03:11:8d:9f:70:2d:f0:1c:f6:bf:
49:63:42:de:29:e6:38:97:c2:13:be:3a:0b:d4:23:
fc:84:78:16:77:77:ff:0a:ec:ce:87:75:8e:dd:dc:
7c:43:c1:53:1a:9a:32:06:84:46:17:41:7b:40:cd:
30:8d:a8:56:45:fa:b6:ac:c0:42:de:8b:ef:c0:95:
39:be:b5:0f:eb:a9:cd:e3:ba:f5:fd:80:59:ae:cf:
3c:3e:42:9b:08:7d:52:05:cb:46:4e:d4:a9:01:8c:
1b:7c:9a:97:41:a8:9c:e7:c4:7a:2e:1c:7e:dc:03:
fe:88:c7:49:19:4e:07:b2:3f:f8:2e:39:d4:f4:bc:
9f:20:89:c9:7e:1d:6b:ef:84:75:59:80:78:26:29:
cf:1d:fc:a4:39:b3:e8:6b:eb:29:2e:ee:61:1c:63:
46:4f:d1:5f:43:d0:db:fe:8a:af:1b:ae:34:99:eb:
ea:24:bf:3e:24:0f:e7:4c:23:82:73:1a:08:9d:a8:
9e:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:96:9B:7D:79:D9:1D:0F:71:CB:E0:02:4B:C5:E1:3F:D9:F6:C1:41
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:5c:ea:49:05:43:cf:13:25:0e:1a:b1:5d:d7:bf:5b:1f:24:
ca:16:be:34:d0:b1:70:c1:0b:e0:fa:6e:87:fe:94:b8:34:99:
c3:d1:4b:f9:fa:03:0f:14:31:7f:6d:74:bb:b0:63:0d:6a:ed:
3d:5f:dc:2e:14:91:41:21:db:b8:50:d8:08:37:f2:b3:f1:04:
6e:b5:c8:f0:3b:61:a6:49:fa:ae:88:d0:c3:a7:eb:99:29:e2:
e8:d3:0f:f0:66:21:55:45:6a:f3:cc:30:31:40:81:86:88:ce:
ca:9f:32:2b:c6:31:cf:68:c4:59:f3:67:65:3b:df:a3:5c:99:
a8:bb:01:72:9a:dd:99:05:1d:1a:ed:e5:f5:87:3b:e6:65:65:
49:81:75:80:97:15:24:e6:3b:7b:35:05:92:77:3b:76:fa:69:
a2:47:09:96:27:dd:09:61:f6:c6:69:f8:61:f7:88:06:26:08:
52:55:44:48:16:45:05:10:b3:08:96:7d:db:f6:2f:94:4c:82:
79:56:93:75:c1:5c:ac:50:fa:9d:07:69:37:a3:a5:3b:2c:9f:
a4:2a:72:fa:1d:52:be:60:8d:89:24:81:6b:e3:d7:30:f9:2a:
59:80:12:f4:19:cd:ab:1a:45:d8:a2:66:10:94:3a:88:b6:6d:
32:e3:da:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:41:27 2026 by rpki-client