Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
File: UioivM096CZa_VX5gw_8Acg69yY.mft (raw, json)
Hash identifier: VCWmym/9XtkmhwpZcYkGvTqXa8O8xRYkb21ZBuiimDk=
Subject key identifier: 8D:4B:2F:BE:CD:44:B4:61:5D:BC:09:62:19:6D:A0:B4:B0:E7:1B:9A
Authority key identifier: 52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
Certificate issuer: /CN=522a22bccd3de8265afd55f9830ffc01c83af726
Certificate serial: 019FAA878BA5D28EEDF26143FF6C0BFCA124
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
Manifest number: 1898
Signing time: Tue 28 Jul 2026 21:00:37 +0000
Manifest this update: Tue 28 Jul 2026 21:00:37 +0000
Manifest next update: Wed 29 Jul 2026 21:00:37 +0000
Files and hashes: 1: JwD5lu0otqTMwfEAo1IGQBl5m2Q.roa (hash: 3lo1vZFHg/0VBofJBP7YITQIAttbUpYpy/FL0alINSo=)
2: UioivM096CZa_VX5gw_8Acg69yY.crl (hash: II4xLszNI7WDLrZxNpsDJMnd1b0vvSubnlvQiRFW0s4=)
3: _-cN-sAbrViLwmycVeqjqlvUMm4.roa (hash: noKzUYWAtrL71gb87r5bxvuWL2VHpxYOGDrkOQNEG/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:8b:a5:d2:8e:ed:f2:61:43:ff:6c:0b:fc:a1:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522a22bccd3de8265afd55f9830ffc01c83af726
Validity
Not Before: Jul 28 21:00:37 2026 GMT
Not After : Jul 29 21:00:37 2026 GMT
Subject: CN=8d4b2fbecd44b4615dbc0962196da0b4b0e71b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:37:6f:ef:a4:a4:9b:25:f7:c9:56:b0:ec:12:
b1:72:6e:2e:9a:f3:cf:60:b3:ec:20:04:3f:ba:b9:
9b:3c:40:b3:d0:fe:21:40:e0:d1:75:d9:ae:41:92:
3c:ff:89:d5:36:be:10:b3:a4:90:8a:43:5c:a3:d9:
44:8a:27:c5:43:c0:47:92:49:6a:90:70:79:76:1c:
88:7e:41:c8:79:6c:8d:05:67:07:9e:ee:ae:98:ff:
2d:2f:88:4e:27:46:73:9f:99:45:c5:e8:fe:36:e2:
21:51:e3:a6:4e:c2:f0:00:0b:58:3f:d6:06:53:83:
80:aa:e2:e5:75:b6:e7:c1:e4:de:0d:1b:2f:6a:74:
f6:e0:b7:72:fc:01:e6:af:5d:fa:46:3c:ad:fb:2f:
b6:ba:fa:62:46:a6:f4:38:4a:32:ce:4a:bc:b6:15:
d0:d8:8c:7b:2c:a4:93:97:46:8c:e8:fc:55:02:db:
48:20:c0:f4:e7:ad:76:3a:60:84:e7:86:06:e1:dd:
79:b3:fd:a2:a5:4c:42:49:b2:cc:3f:3d:69:c3:1c:
4f:28:52:47:cb:2f:d6:a8:7d:15:5e:96:81:a9:bf:
00:05:f1:3c:50:75:a0:d6:48:88:45:da:ca:69:58:
10:9d:4d:96:6c:c9:28:f0:27:15:0e:35:b5:8b:c7:
c1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:4B:2F:BE:CD:44:B4:61:5D:BC:09:62:19:6D:A0:B4:B0:E7:1B:9A
X509v3 Authority Key Identifier:
keyid:52:2A:22:BC:CD:3D:E8:26:5A:FD:55:F9:83:0F:FC:01:C8:3A:F7:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UioivM096CZa_VX5gw_8Acg69yY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/1e4760-c546-4bec-a635-ff3723e78bd3/1/UioivM096CZa_VX5gw_8Acg69yY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7b:dd:c3:a3:34:c5:3b:1f:99:a1:f3:83:f0:af:7c:49:4d:
7b:ee:d2:2d:91:41:a6:fc:b0:0b:98:bc:b8:a6:77:3d:42:ce:
8f:df:23:37:e1:0e:51:4b:95:b6:b3:a5:12:1b:dc:2b:9f:c3:
ba:7d:51:2b:03:f1:ba:b0:bc:c0:3d:5d:a9:64:97:49:ea:9e:
6b:0b:4f:cb:ec:36:5c:a3:df:d5:26:07:11:d9:9b:e3:f6:9a:
92:37:c5:ad:05:7b:ff:ac:04:3f:b1:64:a8:ed:bd:7b:af:1f:
db:df:c6:32:a1:44:96:db:f9:f8:1f:41:0f:41:b5:2a:3b:c7:
41:29:cf:da:c6:db:6d:16:c0:5d:3a:66:12:41:b9:98:7d:f7:
6a:51:8d:cd:4e:b3:13:c6:ef:9a:8f:c3:ad:e3:4e:cc:bd:cd:
25:91:43:76:79:ce:d7:d0:4b:b3:35:b2:d4:f9:ed:8d:22:ec:
89:08:f2:b0:64:12:50:65:1d:21:24:9e:cb:31:0f:1c:1c:9a:
db:f6:49:59:ee:ac:4c:53:de:a1:e0:42:9b:55:de:e6:bd:2b:
5d:ff:b5:bc:a6:23:0d:f0:bd:4d:68:24:ad:d9:99:eb:0b:f0:
7e:71:56:e5:c9:a1:51:14:ac:f5:64:bc:62:79:d5:a0:60:bb:
0a:2b:fb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:14:44 2026 by rpki-client