Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: wBrYUqkk3OmOJvTIyVaCGGVmEx1faSF40nC8PzheIMA=
Subject key identifier: 7D:F2:92:EB:A7:6D:B1:4A:08:1B:9E:82:9A:65:01:8A:A5:76:A7:8A
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 019FAD1AC92D68C71E6D9406136CC818FFCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0C36
Signing time: Wed 29 Jul 2026 09:00:41 +0000
Manifest this update: Wed 29 Jul 2026 09:00:41 +0000
Manifest next update: Thu 30 Jul 2026 09:00:41 +0000
Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=)
2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: XjKvnTfiP82AAOPzWFEsiIoWh1jEEXvp3haOnEbL/c0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:c9:2d:68:c7:1e:6d:94:06:13:6c:c8:18:ff:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Jul 29 09:00:41 2026 GMT
Not After : Jul 30 09:00:41 2026 GMT
Subject: CN=7df292eba76db14a081b9e829a65018aa576a78a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f2:5d:db:e1:ff:3b:c9:25:b9:a8:d7:52:85:
d2:3c:41:ba:e4:49:f8:52:34:d6:20:b6:6b:f4:ef:
c0:28:0f:54:f0:e0:b1:c2:a9:08:bb:24:78:98:a4:
5a:55:9b:e5:6e:ec:53:2c:60:5a:31:2f:e1:f8:bc:
5b:6b:6a:e8:43:41:d9:83:d2:33:24:e0:7f:c6:3f:
82:3d:68:71:de:c7:f3:27:b9:d4:b8:69:d5:4e:06:
86:f0:53:5b:2f:67:e9:d5:3d:8e:21:1d:7f:de:1e:
4d:51:91:39:31:dd:fc:1e:22:0b:59:f4:63:a3:d0:
54:53:c1:84:6a:05:08:1a:b0:d5:13:d4:f7:52:7e:
31:88:8f:b9:8b:15:9f:3d:fd:b3:e1:f8:a9:68:47:
a9:93:25:12:41:0c:22:43:10:cd:f3:16:e6:2b:1f:
d8:a5:23:5b:c2:8e:dd:f6:69:66:e4:07:43:6c:18:
04:05:b1:7c:92:9c:a1:ab:b1:b1:fa:bf:4d:f0:42:
bc:2c:50:67:2c:82:22:8b:c5:69:8c:aa:c1:49:c6:
02:7b:69:b8:d0:31:34:53:d8:3a:49:e6:10:52:ea:
a8:6a:c9:64:36:be:a1:82:4f:51:c4:40:e1:bd:39:
9b:c3:f4:83:7d:55:b1:8b:31:b5:1b:a6:2d:9a:19:
2a:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:F2:92:EB:A7:6D:B1:4A:08:1B:9E:82:9A:65:01:8A:A5:76:A7:8A
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:ff:3e:e6:bf:21:82:e8:c6:15:33:51:96:ff:e4:b1:6d:c3:
46:98:d3:5e:67:17:6c:f2:f0:4e:0a:15:b6:80:4f:71:b6:5a:
43:6c:b7:68:36:d0:5b:81:0e:e7:f7:57:5f:5f:59:71:4e:3f:
08:e5:da:e0:c3:cb:14:0f:9c:b5:cd:3a:8b:52:d9:04:47:c3:
e3:e6:c3:7f:7d:b8:c5:01:c7:cc:77:cd:06:43:05:fc:93:c7:
35:a9:18:3e:2d:ea:d9:05:92:d0:5a:f2:13:19:cb:49:8a:90:
b0:31:dc:92:ca:3e:24:7e:43:cb:e4:7f:2b:85:83:e3:b4:ed:
c2:e8:e9:d5:5b:71:4a:ba:5e:e2:df:cf:5f:cb:0a:86:4e:a4:
6e:78:13:24:a3:9e:4c:c4:2a:ff:76:90:cc:4f:61:97:0c:eb:
22:13:75:3c:d3:22:7c:a0:98:68:a1:b7:c4:eb:89:02:0d:ed:
58:42:ae:84:a2:35:ce:c0:c6:df:e0:bb:5a:9b:d6:eb:2e:6f:
a2:42:b1:e3:c2:95:bd:00:b9:6e:28:e8:86:4d:60:a4:9c:4f:
8d:72:e6:ec:bd:08:cb:69:52:54:e2:17:69:41:72:c4:39:10:
bc:a8:9c:a8:13:31:4d:81:b9:d3:3c:04:f2:c6:80:c5:f9:df:
09:fa:79:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:30 2026 by rpki-client