Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: L4u1vgx9qEJFi8wzsILZKVxXQFQe3PLbi8c3Tugukz4=
Subject key identifier: 6A:4F:5B:D6:CC:A8:F1:64:B5:CD:7A:81:63:F9:7E:81:03:32:E7:94
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019FABD19FA6EE9F5422B470C958301324EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0E75
Signing time: Wed 29 Jul 2026 03:01:09 +0000
Manifest this update: Wed 29 Jul 2026 03:01:09 +0000
Manifest next update: Thu 30 Jul 2026 03:01:09 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: +Z/49AG5kEjko3kBTSUVL/sE/VzBynm+XtuhgHb6tc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:9f:a6:ee:9f:54:22:b4:70:c9:58:30:13:24:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Jul 29 03:01:09 2026 GMT
Not After : Jul 30 03:01:09 2026 GMT
Subject: CN=6a4f5bd6cca8f164b5cd7a8163f97e810332e794
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:e8:5e:7d:a4:d2:e8:9b:96:3d:67:62:7e:7e:
d6:5c:a6:e8:cd:42:89:37:9f:1f:d1:9a:bb:45:61:
0c:73:28:ae:03:3c:74:85:0c:24:e5:d4:50:14:c9:
82:7a:86:98:a1:e9:33:bc:b0:54:02:63:57:94:b4:
a5:64:bc:35:c7:6f:28:dc:3f:bc:a1:51:96:99:ba:
55:3a:e9:35:7a:33:a7:d5:bc:43:18:4d:38:43:46:
be:6e:fd:eb:ad:1e:1c:d5:a5:6c:53:11:0b:52:45:
6e:5d:36:e2:5c:a6:c4:f7:24:52:30:3e:21:1e:2d:
11:78:fa:bd:01:63:cc:28:75:5a:84:af:42:f6:6a:
73:a7:21:7a:2a:ae:17:1a:83:7d:83:b8:a4:ab:e8:
1e:27:4a:25:03:46:b8:39:26:f3:ac:cb:8b:b4:5f:
36:15:5c:c6:ba:87:73:25:f5:a1:f3:47:ea:64:8c:
14:cd:b7:33:ff:ae:7e:69:cb:46:86:59:e2:05:53:
f9:b7:9e:dd:57:0a:53:4b:24:03:41:f9:c3:a5:3a:
f7:ba:40:4d:0c:eb:4d:f9:b4:3e:2b:ad:f1:96:9a:
59:9f:f5:2f:02:b5:a3:5a:78:50:32:6e:51:6f:a0:
d7:81:de:14:4a:3c:67:7d:06:25:9b:6b:18:0c:99:
2e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:4F:5B:D6:CC:A8:F1:64:B5:CD:7A:81:63:F9:7E:81:03:32:E7:94
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:82:a7:ba:c3:f9:53:e4:21:8e:ed:78:7c:73:48:52:60:ba:
04:11:fc:53:45:1c:92:ae:9b:fe:0d:a7:03:a2:5e:0e:41:9a:
52:7e:95:07:04:53:b3:fc:85:df:3f:e8:ad:5a:49:cf:67:05:
32:94:c8:7a:82:40:2f:8c:c6:f5:68:c8:0c:cf:b2:b7:4e:a5:
7d:33:6a:b6:55:14:2c:89:26:ae:b7:8c:4d:a9:f7:e6:23:07:
28:24:a7:12:95:c7:64:6d:4c:08:a4:56:32:9f:a4:40:18:43:
d1:70:9d:b7:cf:31:5f:4e:01:76:00:1c:83:41:96:2f:dd:08:
df:7d:1e:86:c9:4f:fe:66:6b:ee:6a:b5:69:ed:74:7b:c9:23:
bc:3f:c7:80:53:fb:02:ac:e3:15:96:63:6c:a7:67:ed:40:56:
a0:e5:e5:26:9c:a9:de:e3:5b:90:fb:c9:a1:f6:4b:18:69:ac:
d8:e7:a9:d8:50:ba:f9:4d:b1:e3:1b:53:09:b9:f4:2d:bd:5f:
c6:23:b7:58:53:a2:26:32:4a:72:9a:55:94:96:ed:57:26:0d:
38:7d:9a:06:8d:23:36:15:22:a7:a5:06:f5:62:5a:31:4e:02:
e2:c0:ed:f5:13:51:96:9c:96:f2:dc:b3:70:38:1c:a4:3c:4a:
9a:53:b7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:05:21 2026 by rpki-client