Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
File: UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft (raw, json)
Hash identifier: 6gcfRvM6+KkePPTycXEXFV2u2F/Wg0G1L6MDE8MHJ7k=
Subject key identifier: 4E:01:D2:8C:BF:63:35:BB:08:48:0D:75:AD:27:3D:DD:41:88:84:4C
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019FA974FE25CE155FAD741B11CB88A99787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
Manifest number: 19DB
Signing time: Tue 28 Jul 2026 16:00:44 +0000
Manifest this update: Tue 28 Jul 2026 16:00:44 +0000
Manifest next update: Wed 29 Jul 2026 16:00:44 +0000
Files and hashes: 1: 839K-vKQDLSTwMi3nTUbevknphU.roa (hash: HWchlrTom/TGMmTux6MqBdQXZihANha7ZNaVFdwZvu0=)
2: C8UfE0IBgOfa82iiaROrfI3V4Xc.roa (hash: TcuXg8S+SstfBTo+BPKj9cktm49XEEJIOwMTVogMNKQ=)
3: KQYzDmlbtLb0TIveiic0hQtg1_8.roa (hash: KwMCQ5pXReeQWpe8C0PWaWWc7IeA3pbKv8Ezi0wF6Rc=)
4: KlidTRE0Ld2vhd7LchTBrjDXtCM.roa (hash: oYu7FrAcgyOmxnR9Y/a2v7qA05r9PwyCGoG1X5C3eMU=)
5: UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl (hash: 5ycnaIzA+EeMfCf8R4LRrP477MZxSHLXdXUD0V5vs3A=)
6: fXPoY-0-q5iOyYhj9TEia273Zdo.roa (hash: mEk1psIYpULRd0+LS2omMVGz1dNS2p38t/9B8etfgac=)
7: q1JURLd9vPg2ZEVFw3HbNbZQiwY.roa (hash: iHyXS2U/MvjHApO8EPSodH4gSLDPv/lbRHcjdHk3d+c=)
8: slmMvnIFywHDgwV-wFbQ9dx_MgM.roa (hash: 14u6qAwoGY/eFFNW93mUvg1QcjQ1Oh3qZtQw1ddD8zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:74:fe:25:ce:15:5f:ad:74:1b:11:cb:88:a9:97:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jul 28 16:00:44 2026 GMT
Not After : Jul 29 16:00:44 2026 GMT
Subject: CN=4e01d28cbf6335bb08480d75ad273ddd4188844c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:06:fc:96:e4:f5:ee:20:64:b6:00:03:62:98:
99:49:20:9c:42:24:ed:a5:1c:0e:ee:b9:df:27:13:
2b:42:c6:b8:b8:b5:f7:c9:42:72:db:ec:b6:bd:b8:
d7:ad:b3:98:27:5f:7d:cd:6d:a3:0d:b3:69:4e:b3:
32:b0:01:c8:cd:6c:ba:90:a9:f5:7b:22:2d:23:8e:
ec:40:00:b7:41:d6:d2:3d:85:3e:ae:71:53:85:8c:
eb:78:32:e6:03:2b:4a:6f:fa:0f:c2:da:cf:18:92:
dd:be:5b:a2:03:7b:2f:54:94:b2:92:ad:37:90:93:
c6:d3:e4:67:6f:98:61:7f:80:d2:7e:b2:ec:78:75:
ef:f7:16:f2:92:fb:05:2b:d2:bc:4e:ee:7f:2d:f6:
46:2e:1a:85:bb:63:95:e9:38:1a:c1:51:59:ca:91:
72:2a:e9:f4:78:af:f3:7b:03:5c:b5:46:06:22:a8:
c0:cc:b6:dd:e3:bc:e5:cd:1a:f8:7c:02:c5:70:c5:
26:34:ce:36:db:54:b6:7c:1b:99:45:05:f6:76:55:
ae:76:0e:2b:aa:e0:d9:a4:a5:07:89:31:ee:52:cf:
93:b4:fe:c9:97:fe:0d:6f:10:4d:7b:1c:ba:94:e9:
63:39:08:a0:94:ae:98:67:fc:da:72:5e:2e:9e:9c:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:01:D2:8C:BF:63:35:BB:08:48:0D:75:AD:27:3D:DD:41:88:84:4C
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6b:e3:62:5d:04:a1:7e:1c:33:26:df:4e:24:5a:0d:b9:e6:
58:2b:c0:32:5b:a9:ae:a5:77:98:7e:81:e4:42:86:5b:6a:6e:
50:83:6d:3b:e6:19:69:7e:0a:04:fa:10:bb:1e:40:f1:4b:8b:
30:15:9e:a4:e1:79:2d:af:89:f4:01:7c:36:d7:ea:dc:df:80:
0c:37:af:55:2b:d5:aa:11:85:fa:ac:3f:b4:43:b8:a2:87:27:
d7:02:68:d4:a4:bb:7e:82:dc:81:26:5b:48:83:9f:05:24:91:
33:96:f7:a9:63:c7:c5:cc:b6:3b:be:4b:78:67:6a:b9:e9:04:
f9:0c:6b:b4:13:8e:0f:49:8d:67:e0:65:dc:d0:84:22:c5:36:
0f:2e:9d:e0:2d:6d:04:3b:61:e6:12:75:4b:44:94:b3:13:c4:
27:3b:2e:df:21:af:07:0e:1a:b9:8a:ae:b0:52:61:df:df:0e:
47:12:8f:dc:08:aa:b7:0c:69:8f:93:fd:23:94:b7:67:fc:60:
a7:c5:d2:5c:d1:5b:95:28:0b:62:a5:52:09:56:65:a3:65:b3:
9b:d1:24:15:ca:15:eb:83:e6:79:80:03:65:6f:fa:81:11:00:
e5:b0:8b:b0:f4:2b:ed:2e:52:54:1f:54:26:73:60:80:f9:7d:
d2:59:f0:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:14:16 2026 by rpki-client