Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier: sa1qWho4I6bWoldpx+W9yRi9kjnxWsQSV6k26n2SMjI=
Subject key identifier: B5:4C:AC:F2:DE:84:D4:5D:95:25:CA:C6:E6:5A:7D:21:04:4F:69:BE
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 019FAAF572D8E163542C70E402D64E4D24B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number: 115A
Signing time: Tue 28 Jul 2026 23:00:40 +0000
Manifest this update: Tue 28 Jul 2026 23:00:40 +0000
Manifest next update: Wed 29 Jul 2026 23:00:40 +0000
Files and hashes: 1: MUDlj_foqQtHS4g3iVOxdnqwX5U.roa (hash: 8ddMF47yP0pJAVGHQdkSQLRsafhb5eoMN8E4QvTkIwo=)
2: T_ajvR2nQAvlNGNDSwjL2eitBKI.roa (hash: uZlllXoSCgzxncNwBPd5Cx/IZ61QG4puWlaD0A2LBZ8=)
3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: 05bTunNNI9v4EpjqI9bLFJZLVVRksnn6h2VhoKDLYps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:72:d8:e1:63:54:2c:70:e4:02:d6:4e:4d:24:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Jul 28 23:00:40 2026 GMT
Not After : Jul 29 23:00:40 2026 GMT
Subject: CN=b54cacf2de84d45d9525cac6e65a7d21044f69be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:0b:de:83:3c:36:ed:d9:bb:84:7a:19:02:
a8:bd:dd:49:aa:2f:48:34:fc:e1:51:58:c1:5b:57:
b4:5a:08:ed:43:02:f7:3d:55:c0:94:7f:6a:b0:35:
29:02:93:de:61:3f:79:76:2e:37:c0:9e:7c:35:f6:
f9:5f:57:55:f5:ff:f8:0e:60:8e:c0:b8:78:32:bd:
bc:fc:e1:7e:5a:a6:0b:21:e2:dd:9c:6b:44:04:68:
55:7b:c6:08:68:fc:31:ac:4b:48:98:0a:ad:8b:89:
27:2e:0e:8b:b8:22:c8:17:8f:20:60:da:93:ac:f9:
83:77:5e:e9:a2:e1:6d:12:aa:74:ff:8a:6b:da:20:
aa:5c:44:cd:6e:e1:5f:18:94:db:63:b0:d9:c0:d9:
73:ef:a1:6a:a7:3d:12:a5:06:bc:18:36:85:67:ae:
e8:80:82:ff:0d:16:3d:24:90:d5:b5:8a:3e:7a:cf:
ba:6a:35:39:48:ae:86:64:bd:e8:52:e2:e5:a0:fc:
66:54:ca:67:93:1a:33:34:3d:d6:ac:bd:ed:a5:f8:
05:b0:ff:aa:32:d2:0a:18:db:f6:08:c8:39:bc:0c:
c8:43:ab:aa:30:d4:38:4c:d2:5a:d0:e1:db:30:19:
c1:17:9d:37:e0:1f:d1:d8:82:9b:56:65:14:0e:8a:
70:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4C:AC:F2:DE:84:D4:5D:95:25:CA:C6:E6:5A:7D:21:04:4F:69:BE
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:94:7d:a8:c5:fe:de:e1:f0:aa:fb:d1:c4:11:9e:38:6c:bb:
7c:28:91:eb:81:3c:da:da:5b:07:8b:f5:97:6e:16:62:3b:3d:
ab:30:81:0f:c7:1a:03:9d:35:c7:89:fb:92:94:e2:34:c8:19:
c5:26:dd:c4:12:bd:70:83:1e:b4:00:43:26:91:d7:af:ed:db:
8d:15:47:08:3a:3e:a2:b3:aa:a3:a5:30:cc:5c:15:f3:25:16:
40:84:ab:2a:77:f1:89:f3:f6:df:d8:47:03:c4:da:9b:a9:b6:
92:e0:d5:a6:99:a0:f8:4c:0a:8e:39:1d:e9:31:d9:ea:40:c2:
2c:b2:a1:eb:bd:a8:0f:d2:23:34:ba:be:39:62:a5:3a:50:60:
80:eb:29:38:6e:22:e0:3d:29:1c:23:71:60:c9:3a:8c:6a:27:
ea:43:43:5e:93:ed:2c:ec:59:1a:22:b5:84:d4:40:9b:f3:3e:
ee:83:ee:9d:71:a7:16:93:8f:a6:7d:46:ad:84:9b:a9:71:d1:
f7:85:23:4d:cb:7e:54:24:ec:65:90:50:b8:8e:57:1f:62:17:
0e:9c:c5:f8:c1:2d:aa:d6:b1:26:ae:de:61:33:e0:00:d1:e3:
d4:e7:95:f9:d0:44:48:f9:6f:72:83:34:16:7e:cf:71:5b:03:
94:40:fc:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9XLY4WNULHDkAtZOTSSzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZWJhYmQ3ODZkYTEzODA1NjU1YjFiNTUwMWZkY2JmNDMz
YmM3OGQwHhcNMjYwNzI4MjMwMDQwWhcNMjYwNzI5MjMwMDQwWjAzMTEwLwYDVQQD
EyhiNTRjYWNmMmRlODRkNDVkOTUyNWNhYzZlNjVhN2QyMTA0NGY2OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMwL3oM8Nu3Zu4R6GQKovd1Jqi9I
NPzhUVjBW1e0WgjtQwL3PVXAlH9qsDUpApPeYT95di43wJ58Nfb5X1dV9f/4DmCO
wLh4Mr28/OF+WqYLIeLdnGtEBGhVe8YIaPwxrEtImAqti4knLg6LuCLIF48gYNqT
rPmDd17pouFtEqp0/4pr2iCqXETNbuFfGJTbY7DZwNlz76Fqpz0SpQa8GDaFZ67o
gIL/DRY9JJDVtYo+es+6ajU5SK6GZL3oUuLloPxmVMpnkxozND3WrL3tpfgFsP+q
MtIKGNv2CMg5vAzIQ6uqMNQ4TNJa0OHbMBnBF5034B/R2IKbVmUUDopwNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVMrPLehNRdlSXKxuZafSEET2m+MB8GA1UdIwQY
MBaAFMfrq9eG2hOAVlWxtVAf3L9DO8eNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgt
MGRjZDAzZGMwODk3LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9jMDY0YTUtZDdhOS00ZTZmLThmZDgtMGRjZDAzZGMwODk3
LzEveC11cjE0YmFFNEJXVmJHMVVCX2N2ME03eDQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAo5R9qMX+
3uHwqvvRxBGeOGy7fCiR64E82tpbB4v1l24WYjs9qzCBD8caA501x4n7kpTiNMgZ
xSbdxBK9cIMetABDJpHXr+3bjRVHCDo+orOqo6UwzFwV8yUWQISrKnfxifP239hH
A8Tam6m2kuDVppmg+EwKjjkd6THZ6kDCLLKh672oD9IjNLq+OWKlOlBggOspOG4i
4D0pHCNxYMk6jGon6kNDXpPtLOxZGiK1hNRAm/M+7oPunXGnFpOPpn1GrYSbqXHR
94UjTct+VCTsZZBQuI5XH2IXDpzF+MEtqtaxJq7eYTPgANHj1OeV+dBESPlvcoM0
Fn7PcVsDlED8Zg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:29:45 2026 by rpki-client