Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: MSFV6MKxilUN2Qr3hgJvZve4LrIiln//qdM6yJfwrbs=
Subject key identifier: 64:16:1F:00:95:9F:C9:F9:B4:AF:E0:5D:07:0D:A4:84:59:50:82:66
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019FA82B81E3C3D2B9ABAFC63B8AAADD1FF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 1998
Signing time: Tue 28 Jul 2026 10:00:51 +0000
Manifest this update: Tue 28 Jul 2026 10:00:51 +0000
Manifest next update: Wed 29 Jul 2026 10:00:51 +0000
Files and hashes: 1: 4vljd6eS7xs98V4vbQdU27KIRbo.roa (hash: p9Wr9nNkj4z/XeaCt1WGEIqENx+18d7M1y0DLvifYF0=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: tYYC2eueb7ff9bhhobVziSWJk3ShamR//aXG1dCIjFI=)
3: uUX1xSwp1T9nuxxoEoS7mJ4ylKQ.asa (hash: ARnmi9JFKrZP1rcaarKtNChdLdy0XQtmO2iQxRYVYjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:81:e3:c3:d2:b9:ab:af:c6:3b:8a:aa:dd:1f:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: Jul 28 10:00:51 2026 GMT
Not After : Jul 29 10:00:51 2026 GMT
Subject: CN=64161f00959fc9f9b4afe05d070da48459508266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ac:c3:cc:5c:14:40:76:ca:b5:21:43:60:30:
93:52:63:1d:11:71:34:0f:d9:e9:26:e8:d6:a0:19:
05:6b:28:ed:18:fe:29:85:da:7f:7f:9c:00:72:a5:
a2:90:18:80:88:e0:d0:1f:7b:6c:23:5a:e4:57:2b:
b0:96:ff:4f:66:3b:e1:ec:0c:b2:37:6c:51:31:d3:
c6:76:b2:bf:d7:e7:cf:65:1f:92:96:d7:45:39:9c:
85:8e:c7:63:69:d4:a1:8d:f8:e6:c5:ad:7b:ec:18:
8b:4b:49:32:7c:f4:20:26:1c:23:bc:9a:8a:c8:0a:
48:34:26:37:fe:3f:1c:0f:27:78:40:30:34:a7:ec:
25:39:3d:9a:55:ea:26:31:66:b1:f3:4b:ad:df:47:
af:63:f8:c7:76:e2:23:bd:7d:22:b2:15:54:a5:70:
9a:ad:ef:2c:45:40:fc:31:dd:c5:fb:9d:f8:df:1f:
c1:11:5a:74:98:ed:e9:7d:7e:ee:ee:d4:88:06:1f:
6a:ed:51:ba:d3:9a:fa:ca:1a:84:04:ec:68:78:96:
82:8d:95:8e:c6:a8:1e:c6:14:21:c9:4b:d3:eb:e2:
9b:4b:29:da:bb:75:52:f6:8b:14:38:c1:87:29:10:
45:ea:8d:0d:3b:70:e8:da:d3:7d:4e:3c:76:83:b8:
4d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:16:1F:00:95:9F:C9:F9:B4:AF:E0:5D:07:0D:A4:84:59:50:82:66
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f0:23:00:96:c1:5e:62:f0:d0:56:34:2c:8a:38:17:25:b2:
f7:2b:4c:ba:19:41:c6:81:27:07:51:4f:ce:06:90:0e:9d:ee:
16:16:74:03:6b:bd:41:fe:87:8b:20:ea:db:f7:a3:69:59:f8:
bc:76:05:2d:ff:5e:0c:09:e8:35:78:b6:6e:4b:69:68:d7:00:
4f:a3:5b:b8:f5:ab:4c:6c:dd:d7:05:28:a1:9c:7b:82:29:e8:
56:2d:db:1d:1e:c5:0f:53:32:4e:99:cb:0c:d7:84:ea:ca:fd:
0c:2e:21:25:b8:fa:3c:cb:3f:d4:22:fd:34:bb:49:33:73:75:
a0:0c:b6:1b:ff:e8:a5:26:10:e0:d0:cd:90:04:7a:8e:f4:3f:
86:29:a3:22:de:2c:ef:42:c7:4f:1f:e2:8c:b7:e2:39:bd:5a:
99:0b:9f:85:82:08:a8:e5:01:dd:67:29:6d:32:35:f0:69:a0:
49:9b:57:0e:29:b0:54:48:e6:b0:28:c3:c9:12:ca:77:5a:f2:
40:1f:bb:0d:d4:f0:89:96:a8:ac:20:ef:ac:e7:2e:ca:0b:cf:
02:2f:2b:77:74:bf:5c:5d:b6:4e:84:7a:b2:35:33:3a:8c:3b:
bf:d6:4e:0b:c2:41:ed:4f:80:d3:46:86:96:25:f2:0f:db:94:
a5:ec:a3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:05:20 2026 by rpki-client