Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: +UdYH0aICs7pFfca+TlavhI0c9c9FEv/klCl8v+iZrY=
Subject key identifier: 5C:5E:E7:75:F9:55:08:43:44:01:D0:4D:EC:E6:87:CD:B4:66:E7:FC
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 019FABD123AECCCA66FDBBD258A191E3289F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 1005
Signing time: Wed 29 Jul 2026 03:00:37 +0000
Manifest this update: Wed 29 Jul 2026 03:00:37 +0000
Manifest next update: Thu 30 Jul 2026 03:00:37 +0000
Files and hashes: 1: sQXNrRfabqEAqxGuf8P5f2NecXw.roa (hash: 2PpXo8MephsPJxKEGzhYMR57A346BOGMuHA13iu9pZo=)
2: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: zQGbn4hrPL3uU85+tc8fP//r4/3HVnEfYxymFr0gj4g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:d1:23:ae:cc:ca:66:fd:bb:d2:58:a1:91:e3:28:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Jul 29 03:00:37 2026 GMT
Not After : Jul 30 03:00:37 2026 GMT
Subject: CN=5c5ee775f95508434401d04dece687cdb466e7fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ff:ac:f4:51:9b:02:80:12:3a:61:90:af:53:
fc:9d:ce:19:61:2c:e8:8b:af:37:a5:8a:ce:43:cd:
c9:c1:7b:9d:22:18:fc:93:23:4a:f8:09:d4:19:63:
be:55:87:e1:98:77:27:76:99:75:0c:3d:aa:1d:4b:
ce:bc:d7:68:c0:13:07:06:83:a4:55:ff:49:42:ce:
64:ca:9c:bd:30:86:e3:70:cf:aa:e6:90:79:98:a0:
5f:21:8b:74:fb:9d:9f:2f:7d:f5:cc:8b:2b:27:16:
6d:9a:76:19:bf:7e:ad:49:14:a9:98:91:19:67:91:
03:82:f6:b6:2f:71:30:b5:22:c2:58:18:ed:b8:ab:
08:f3:65:54:83:c2:6a:46:0f:d5:b4:75:e7:be:9b:
ab:0d:a9:83:17:68:0e:f8:2e:d1:b4:e0:94:6c:cb:
42:7d:2c:91:3c:42:7e:e7:f7:ab:ee:c9:84:74:55:
d5:b1:f7:c4:6e:4f:cc:cd:27:f4:4a:2b:99:a2:44:
ac:0a:fb:77:80:c8:fb:14:d5:e5:bf:46:8f:94:50:
72:27:1f:cb:c7:0f:48:c4:be:f1:1f:c4:84:49:13:
67:00:e3:ed:08:e7:32:ac:79:ee:88:e7:af:bc:2d:
c7:3f:39:f7:ec:23:8c:f0:1b:d6:e2:59:f6:29:8b:
00:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5E:E7:75:F9:55:08:43:44:01:D0:4D:EC:E6:87:CD:B4:66:E7:FC
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:e5:96:dd:5a:eb:5e:45:d3:8a:b5:6a:6a:73:85:05:d9:b7:
bc:b8:4b:17:43:84:11:41:6b:ee:c0:80:82:68:ae:45:b0:e0:
29:8e:61:98:3c:47:77:5c:de:60:41:f0:5b:84:60:70:d5:8b:
9d:a3:d2:09:95:74:82:50:06:44:39:9b:26:84:fa:82:87:f1:
09:cb:8b:74:c1:44:bb:15:b5:72:b4:91:5e:15:fa:d4:5d:a0:
9a:0d:5a:0e:ee:a0:fc:d4:c9:6b:40:d3:83:99:2d:01:8f:73:
1b:47:c6:5a:b1:78:d4:84:ed:f3:9b:b3:c9:be:b4:39:45:c8:
78:9b:36:c2:a1:c5:86:92:ca:cb:f6:b0:00:87:d6:55:10:ec:
25:15:40:ed:71:28:cb:22:88:60:f7:d7:bf:15:0b:f6:67:c4:
3b:65:3d:61:9d:f7:6b:e1:a9:4c:9b:e0:8b:96:90:69:1e:d0:
43:3f:fe:86:0f:19:4c:36:c6:90:bc:b5:89:0d:ec:41:2b:41:
21:e8:a3:ae:b5:d0:30:1d:a7:c8:6f:a7:07:f7:27:7a:ba:8a:
12:30:00:b9:49:a4:f2:c6:17:b1:95:35:d8:d3:1b:12:f8:f3:
40:e1:75:cb:63:c6:ce:5d:57:a9:07:ea:6d:36:2d:bb:9c:82:
54:c1:e3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:35:23 2026 by rpki-client