Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
File: ujfIenFHccKUkkjf-wehVd_jIEI.mft (raw, json)
Hash identifier: GJjWnTQM4fDIA9+AhvbFgDrJUukfQNAd0AywL3hvYPo=
Subject key identifier: E0:8A:CF:91:1E:67:22:97:DE:CA:52:AA:29:87:F8:AA:27:2A:1A:27
Authority key identifier: BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
Certificate issuer: /CN=ba37c87a714771c2949248dffb07a155dfe32042
Certificate serial: 019FA9E29EF6B72EEAA20C9A9807F1F8C357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
Manifest number: 0C
Signing time: Tue 28 Jul 2026 18:00:29 +0000
Manifest this update: Tue 28 Jul 2026 18:00:29 +0000
Manifest next update: Wed 29 Jul 2026 18:00:29 +0000
Files and hashes: 1: TBVe841E8hTpt49jYkM2WIOXK_k.roa (hash: NOuhNXk/OufxdL7HRlmsabi419cAeXvXPi+Yj06V8K4=)
2: ujfIenFHccKUkkjf-wehVd_jIEI.crl (hash: CgzizzIcLceAZKnTsm6/WQjwiKc8TQW9OXzTWAFLJM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:9e:f6:b7:2e:ea:a2:0c:9a:98:07:f1:f8:c3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba37c87a714771c2949248dffb07a155dfe32042
Validity
Not Before: Jul 28 18:00:29 2026 GMT
Not After : Jul 29 18:00:29 2026 GMT
Subject: CN=e08acf911e672297deca52aa2987f8aa272a1a27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c2:f1:99:aa:00:a2:5f:f7:37:93:11:35:e5:
65:58:e6:42:97:1b:b5:f8:86:ec:d3:12:3e:d6:e4:
4b:6e:ff:cd:c2:38:c4:0f:07:d1:1e:2d:d2:ff:28:
fa:94:46:77:bd:2b:bc:9a:7a:8f:d5:6a:ef:ee:d4:
c7:47:75:9e:50:97:ff:43:59:51:94:cf:17:3d:98:
7f:de:44:de:09:2e:cc:29:f3:0e:92:8f:e9:32:75:
e9:2d:d9:17:c1:58:1a:07:db:f2:02:c8:21:d5:55:
89:24:55:26:35:aa:64:4a:1b:a3:17:52:a6:d8:e7:
c5:b5:14:39:f6:d4:86:55:96:f8:df:48:d5:53:90:
90:56:9f:f8:5c:8a:0a:aa:84:81:13:e8:8b:80:4c:
b6:4c:f1:39:56:4c:54:6c:82:5b:23:44:bf:ca:f2:
02:37:d0:bf:b1:3b:c1:2b:90:4a:4e:75:15:94:cf:
d6:06:f3:82:5c:f6:c1:83:15:e1:4f:e5:5f:a4:75:
f4:f9:f1:29:91:8e:75:c3:b5:59:52:cc:ea:95:0f:
fb:ac:61:91:f0:44:7f:a1:ed:e9:6d:53:c1:94:26:
c1:c9:8d:60:84:c0:6a:92:21:88:cd:99:be:ab:80:
bf:80:d1:4b:92:22:03:03:01:0b:69:2c:96:41:31:
83:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:8A:CF:91:1E:67:22:97:DE:CA:52:AA:29:87:F8:AA:27:2A:1A:27
X509v3 Authority Key Identifier:
keyid:BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:21:f8:c1:79:6f:af:e3:35:07:f3:08:bd:7c:e3:04:0d:96:
1c:e4:16:17:19:39:2e:e9:d0:a5:cd:29:66:12:df:4a:07:d9:
58:69:3a:e0:21:e9:8d:6e:ed:4a:25:db:ba:b5:b4:42:96:c4:
0f:df:a0:b2:35:b4:3e:a1:9f:4b:76:05:71:6e:07:5e:4c:de:
b3:59:34:b0:2f:e0:b2:d0:3d:3a:32:b4:89:5e:b5:03:b7:b5:
e1:10:d1:e0:71:5a:9e:aa:d7:68:51:fe:c9:af:fb:f6:b7:db:
65:e0:37:7f:d5:e4:47:5a:88:0b:e0:a4:32:01:00:6a:1e:36:
cc:dd:15:58:c6:a8:aa:2a:97:a4:e0:76:68:ce:d6:a8:2d:21:
cc:d2:18:01:78:68:db:c3:eb:9c:57:84:c1:26:bc:95:fe:e8:
33:d0:d8:ed:1e:15:fb:f0:05:cb:34:1e:a8:86:b4:0c:d1:df:
4a:a5:ac:a2:0f:e7:47:4a:8c:99:85:2a:a1:83:43:fb:2a:5a:
e1:f5:df:56:ea:c6:f6:c6:b9:6b:e6:d1:ff:08:7e:94:f6:bb:
2d:ec:0b:99:31:6c:17:3a:23:ac:23:ea:72:f1:3e:d2:f9:59:
f8:d2:aa:f9:f2:09:3b:b4:80:ee:1d:94:f3:bd:6f:3d:a7:70:
d2:19:f3:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:03 2026 by rpki-client