Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: S0nU2jqKMW3Cu8KPioUebOz04+mpTLCmrvltyIwcwhE=
Subject key identifier: 79:AE:8C:C9:E8:33:BF:EE:15:1E:56:F8:5D:69:E5:4B:A5:5D:30:1F
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019FAA1A87C099DE224552FD34F03B7AA319
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 1999
Signing time: Tue 28 Jul 2026 19:01:33 +0000
Manifest this update: Tue 28 Jul 2026 19:01:33 +0000
Manifest next update: Wed 29 Jul 2026 19:01:33 +0000
Files and hashes: 1: 4vljd6eS7xs98V4vbQdU27KIRbo.roa (hash: p9Wr9nNkj4z/XeaCt1WGEIqENx+18d7M1y0DLvifYF0=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: EsmcLbAtRoaCyPlKHWp/Q2TpvIrWEl+hF2YcwEC3Rsc=)
3: uUX1xSwp1T9nuxxoEoS7mJ4ylKQ.asa (hash: ARnmi9JFKrZP1rcaarKtNChdLdy0XQtmO2iQxRYVYjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:87:c0:99:de:22:45:52:fd:34:f0:3b:7a:a3:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Jul 28 19:01:33 2026 GMT
Not After : Jul 29 19:01:33 2026 GMT
Subject: CN=79ae8cc9e833bfee151e56f85d69e54ba55d301f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:31:3d:58:31:b5:f5:fc:74:c8:09:b6:35:de:
67:ca:aa:0d:4f:af:81:68:78:51:40:b7:1a:1c:69:
6f:b0:2f:e5:91:5d:4a:67:3f:7a:42:4a:50:14:c6:
4a:93:d5:1d:30:47:d9:45:60:97:fb:70:f0:d0:36:
dd:cd:21:e1:c5:bd:13:97:06:74:a1:b8:53:8c:37:
33:c0:95:fd:fd:24:2c:ca:a1:0e:89:eb:9a:ca:5c:
e6:cf:c1:b3:e9:3c:77:b3:b1:95:42:97:b5:d8:73:
ee:9d:2f:34:8b:c8:c9:cc:95:2a:17:42:fe:65:8b:
e3:be:39:36:93:69:71:f4:33:03:8e:83:15:ef:a9:
d6:75:ed:28:25:87:9d:39:8d:1b:8d:91:13:bf:3a:
8e:8f:e8:b7:4c:28:71:ae:0c:45:60:7a:be:25:76:
1b:37:3d:49:85:58:d0:c3:89:ef:39:84:43:de:a7:
07:19:f7:cc:44:01:ab:b4:53:89:e3:71:4e:63:34:
f1:cd:99:fd:c4:c1:84:2b:ca:22:29:2a:7f:01:43:
2d:ce:65:e5:72:ed:cd:d2:6c:a7:97:b6:29:74:1e:
8f:ab:05:29:5b:75:9b:d2:19:a6:e0:89:5c:c2:ae:
c2:f7:10:7d:bc:74:06:f2:11:47:d6:fe:41:45:2f:
db:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:AE:8C:C9:E8:33:BF:EE:15:1E:56:F8:5D:69:E5:4B:A5:5D:30:1F
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:a5:84:27:9d:0c:8d:7d:d8:03:67:da:f1:ea:2e:38:84:7f:
59:1a:03:b7:ca:bb:0b:60:40:89:db:6d:d8:e4:6f:3e:7d:f2:
86:06:75:7d:0d:e0:b1:f5:2b:b6:e4:d4:3f:a1:2c:dd:7e:af:
bc:be:88:a6:50:d7:38:09:b8:1d:2c:d6:69:06:69:4b:36:66:
3a:ef:0a:c5:b3:65:38:3e:78:ef:58:c8:a6:a3:de:34:7e:9b:
73:6f:99:ae:88:23:8e:0c:c2:7d:fe:80:c4:89:bf:92:fb:68:
d1:1a:96:84:2c:a8:71:52:a8:ca:4b:cd:7b:6d:70:ca:1d:d4:
ea:67:6e:30:08:36:73:69:55:79:e8:f5:53:00:bc:6d:0b:d6:
a9:d0:86:11:cf:4d:10:b4:38:97:50:29:bf:fa:b5:0d:95:58:
e1:51:05:20:b6:14:3d:2e:b7:a8:ef:19:4b:dd:b5:a7:a4:47:
99:fb:71:86:6b:f2:1d:f0:e9:b3:4c:93:4e:23:52:b8:4a:3d:
2f:1a:f8:dc:8c:ce:33:72:a2:8a:bb:d3:c0:ca:c9:6d:4b:32:
db:4a:04:67:af:3d:45:ba:7d:db:af:0c:28:49:04:8d:89:eb:
f3:c1:93:ff:2c:a2:80:a9:66:43:34:db:32:be:80:53:ba:e4:
44:21:e7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:53:02 2026 by rpki-client