Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: 6F2rpeAnhD/QjXq3edmL1YNiia5QVtWDQ9Ojtf4rqy0=
Subject key identifier: 9E:BB:E0:43:F1:EE:B1:62:1F:C4:CC:DD:9C:59:F3:54:54:09:5F:8D
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019FAC3F27DC4E76112D863EA6771CC18FF9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 19DE
Signing time: Wed 29 Jul 2026 05:00:47 +0000
Manifest this update: Wed 29 Jul 2026 05:00:47 +0000
Manifest next update: Thu 30 Jul 2026 05:00:47 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: 76V6f2tVaQgH5tHD3SlUs8E9RtFeGqboApTTwGsK2Gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3f:27:dc:4e:76:11:2d:86:3e:a6:77:1c:c1:8f:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jul 29 05:00:47 2026 GMT
Not After : Jul 30 05:00:47 2026 GMT
Subject: CN=9ebbe043f1eeb1621fc4ccdd9c59f35454095f8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d1:2d:6a:e3:93:9e:3c:4d:41:1f:90:21:dd:
ff:30:3d:f3:3e:ef:45:47:7a:3f:c2:32:3b:10:3a:
67:ee:64:1f:43:79:89:e6:63:a9:8f:8b:a1:54:08:
fd:42:3c:0a:32:16:56:8a:da:10:2b:75:a1:bb:ff:
19:ec:5e:c3:30:bb:0d:3b:c5:b8:b5:3e:34:0f:ef:
2d:b3:8d:4d:56:b3:d8:7f:17:a8:9a:0f:38:68:d5:
00:a7:d5:cf:c4:36:46:aa:2e:92:6c:5c:81:f2:fe:
42:37:d8:e7:8c:1b:9d:d3:80:e5:b5:03:81:2e:fe:
ba:2a:30:3e:64:ca:72:5d:ab:5e:2c:98:7a:22:42:
ec:b9:6f:62:84:29:51:f0:0d:e3:d0:12:4e:66:10:
5e:a0:be:54:c8:93:58:5d:bd:d4:86:6e:ca:14:04:
03:5b:05:c7:8c:77:f0:13:8a:1d:87:20:9b:19:3b:
50:ce:a5:c6:8a:fa:3b:64:7e:0c:c8:75:8d:99:29:
59:b7:47:d3:3c:f0:c7:86:12:bd:7e:91:ab:eb:b1:
dc:36:72:52:94:de:a0:ed:e1:e4:65:c7:19:ec:0b:
94:0d:92:ab:ff:3d:99:d9:57:1d:0d:7b:12:fa:9d:
8c:c3:28:09:ba:25:aa:a6:45:38:f7:77:00:f8:ee:
be:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BB:E0:43:F1:EE:B1:62:1F:C4:CC:DD:9C:59:F3:54:54:09:5F:8D
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:e0:b1:1b:eb:58:87:24:9a:dc:93:88:eb:2e:5d:d5:c4:52:
02:7c:9a:f6:5e:c7:f0:62:29:b9:42:15:de:e2:af:77:79:b8:
53:9b:d6:04:57:63:9c:78:67:ae:d2:00:e8:74:83:a1:15:07:
d2:27:92:25:7e:ac:07:b2:47:6d:31:b7:ed:57:4d:ce:21:19:
19:71:d3:0a:c6:bc:39:dd:44:51:fb:5c:6b:d6:da:80:bb:4a:
fe:c3:ca:b6:40:a6:bd:55:e4:f6:32:82:b0:1e:8b:63:0d:52:
0a:ef:59:59:24:65:c9:2c:b7:4a:dc:c3:bc:2e:bd:26:fc:37:
46:47:ac:c1:4c:4a:8b:02:57:78:09:b4:25:79:93:bd:c3:93:
36:37:d7:23:20:76:50:d0:f3:43:85:af:06:c5:89:c0:64:5f:
9f:1f:35:34:a9:37:99:47:d8:4c:d1:ad:aa:5f:98:d6:24:54:
73:d0:4c:88:a7:1e:44:5d:47:7f:27:05:1e:d0:8b:af:5b:60:
95:b4:da:af:84:1b:9e:a8:a6:e9:41:6f:8e:ea:fc:6c:8f:d2:
b0:11:e0:b0:2c:6e:e7:90:dd:0c:8b:df:42:96:b0:e7:60:c8:
85:41:d7:86:60:56:75:c9:ca:b9:cd:68:0b:a9:73:37:ed:a2:
a3:7d:ff:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:52:57 2026 by rpki-client