Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: +R5n9R2a/m3HpDP5v06uEGv7aG0aAF54TUodTT0o+So=
Subject key identifier: C7:58:22:A5:DB:25:31:FD:7C:A0:57:1E:CC:59:16:01:7F:2E:8B:A0
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 01A0C0A01739499A6BAC2D99CDB22B74DE81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1A74
Signing time: Sun 20 Sep 2026 21:01:52 +0000
Manifest this update: Sun 20 Sep 2026 21:01:52 +0000
Manifest next update: Mon 21 Sep 2026 21:01:52 +0000
Files and hashes: 1: CmF5mSEXoMC1Oy8BmmVOJziTGbs.roa (hash: 1rLmMiDPBYELVghvKsD5T99v1Kom/oBVCDlNcbfcIwE=)
2: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: FHT1gIHDOiQ7jYmaRNAIW1cVKTnY+IF3az9sE9y8GI4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 16:19:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c0:a0:17:39:49:9a:6b:ac:2d:99:cd:b2:2b:74:de:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Sep 20 21:01:52 2026 GMT
Not After : Sep 21 21:01:52 2026 GMT
Subject: CN=c75822a5db2531fd7ca0571ecc5916017f2e8ba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:d8:72:95:5b:30:4f:6a:d4:f5:4e:4d:54:fd:
0d:47:3a:8c:ca:f5:d1:73:e2:74:4e:9b:53:3e:bc:
38:17:bf:9d:e0:81:19:ae:c2:29:ac:f5:64:1b:01:
60:2d:5d:77:c4:b6:e6:35:a2:6e:89:ea:36:e6:87:
07:8e:92:16:b4:0a:41:d3:0e:16:8c:4e:d6:75:f4:
33:82:7a:32:aa:1d:1a:4d:1f:68:0f:ad:51:81:0d:
de:cd:05:a4:fb:1e:d5:ba:06:f8:32:a1:e3:f6:55:
53:61:fd:63:37:27:88:91:1b:e8:c6:0e:af:10:e0:
d7:7f:48:b3:70:ec:ad:55:9e:27:d9:58:ac:31:10:
05:ec:01:8b:cb:33:1e:4e:9e:ee:04:19:ef:89:fd:
e3:9c:62:6c:c2:f1:b0:fc:d1:c6:3c:ae:32:c4:b2:
be:5a:7b:08:00:47:d5:63:29:c2:ad:7d:f7:92:54:
c0:6c:de:49:d5:25:8b:a5:4c:1f:26:40:c5:92:ff:
56:aa:79:4b:23:a5:35:d5:f9:6a:ed:53:e1:3a:d0:
9a:cf:de:b6:94:0c:0d:c1:ab:ca:9a:84:a4:64:5a:
83:73:4b:8a:4f:57:14:17:9f:87:f4:d2:bc:b8:0f:
0f:c2:ad:3a:bb:b7:a6:a1:21:ae:03:40:35:41:79:
47:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:58:22:A5:DB:25:31:FD:7C:A0:57:1E:CC:59:16:01:7F:2E:8B:A0
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:95:6c:0a:5c:dc:fa:c7:cc:d6:e3:c1:84:7d:78:78:da:47:
ff:95:5f:e2:09:c3:ca:a0:3c:19:56:2f:de:53:9e:87:3d:5f:
72:26:c3:36:13:3d:75:8c:69:9f:e4:54:3e:60:28:14:14:75:
9f:77:5d:94:87:94:fd:f0:89:9d:bf:06:43:7f:7f:24:db:bc:
d7:19:11:84:f4:f2:50:fa:81:da:0d:3c:55:9e:27:5a:6c:8d:
09:ad:88:6a:2b:8f:5e:1f:82:c3:cd:c6:8c:e0:18:48:22:aa:
58:01:ef:e0:bd:e5:de:38:39:9b:f1:ef:66:3c:15:b2:b6:c6:
db:0d:f0:14:7a:f2:66:b6:3e:c4:e2:51:69:ca:b1:ca:cc:ae:
20:70:55:47:04:63:15:c2:97:c7:d9:35:e0:bb:c6:54:0b:ce:
6a:29:60:f8:1f:25:0b:d1:8b:a5:7e:bb:f9:f0:8a:9d:c7:8f:
4f:71:e1:b4:d0:4a:c2:f0:38:9f:64:17:4e:71:8e:90:8a:d7:
e2:9a:a0:2d:e9:d5:75:32:ca:eb:89:2a:fa:56:6a:e5:73:12:
35:71:d0:18:6c:bf:62:9f:3f:1e:16:60:35:39:67:55:3b:06:
81:2e:26:55:a1:74:56:b2:19:22:20:12:ba:ff:ed:12:78:35:
ce:e6:07:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 02:09:33 2026 by rpki-client