Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier: 8j2+W+nE6BOx9EsmUXFgXju2zk/whBoGCi/Wddmq6ns=
Subject key identifier: E0:99:75:8A:F5:CE:61:DF:EB:62:5B:95:1B:6D:5E:53:43:3A:CD:B1
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 019FAB2C49C8F9953E68EBB26CFB6508CB6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number: 13E7
Signing time: Wed 29 Jul 2026 00:00:34 +0000
Manifest this update: Wed 29 Jul 2026 00:00:34 +0000
Manifest next update: Thu 30 Jul 2026 00:00:34 +0000
Files and hashes: 1: P5QGU51MBWbq811ui2M903jDzeM.roa (hash: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8=)
2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: G7lbCdnqNAdrfO82KS0dnwr8xMqTQYtWlOmS/rMyqmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:49:c8:f9:95:3e:68:eb:b2:6c:fb:65:08:cb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Jul 29 00:00:34 2026 GMT
Not After : Jul 30 00:00:34 2026 GMT
Subject: CN=e099758af5ce61dfeb625b951b6d5e53433acdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e4:2b:c8:49:08:35:d1:98:6f:54:c6:7d:0f:
b9:1f:31:a0:ea:17:c7:31:0c:da:72:b9:32:63:41:
9e:ef:60:9c:8a:e9:2d:ef:91:1c:56:37:f9:2c:8f:
53:4d:da:37:e7:f8:b9:7e:ea:cd:14:5e:04:84:62:
d4:5f:11:46:d8:57:4d:1d:e6:37:c5:44:85:e2:4e:
86:78:a7:96:2a:b9:45:cc:3d:b5:09:72:3f:5f:19:
6d:c2:82:3c:a2:69:f5:0d:d8:40:94:90:5f:e0:eb:
87:f7:2f:01:0c:ca:cc:e3:49:22:16:2b:2f:d4:a6:
f0:a7:1b:2b:b2:5c:f0:76:0e:54:03:3e:24:5b:21:
11:13:ad:67:21:18:4a:74:6b:44:4c:4f:1e:f9:aa:
87:1f:a6:91:72:d5:a1:5d:2a:d4:d5:00:aa:ba:aa:
51:98:eb:d9:36:31:5e:1f:d9:21:d4:05:c2:80:72:
cb:56:06:d0:6b:99:30:67:d7:66:32:5b:5a:d4:e4:
ec:4d:9d:63:44:45:7e:7a:c2:bf:b7:14:bc:00:16:
ed:83:94:0b:23:d6:f0:56:2b:b6:8c:4b:0a:a1:ea:
47:2a:ba:bc:37:51:d0:c8:05:ee:43:a6:89:33:57:
f6:1b:95:f0:4b:36:e5:11:d7:ae:e3:d4:e7:11:b9:
40:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:99:75:8A:F5:CE:61:DF:EB:62:5B:95:1B:6D:5E:53:43:3A:CD:B1
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:c4:3f:4e:40:d2:35:53:71:b2:fa:16:09:06:a6:e3:ad:15:
3b:93:67:77:56:e8:ad:99:95:cb:34:e5:35:d3:12:f2:43:c9:
fa:96:96:c7:66:2c:d0:51:fc:70:fe:74:97:0d:d8:38:bc:56:
a0:c4:a9:12:c4:2b:c7:0f:4b:ab:c1:e0:95:97:33:68:e1:50:
eb:04:f9:74:35:61:0a:01:de:f4:ef:70:26:df:00:95:7b:d3:
50:ee:e9:c3:95:f3:1f:ec:6c:78:c4:d1:c7:4f:8d:da:b4:95:
b4:35:06:6a:d5:03:9e:fc:52:44:e8:73:d8:4b:f5:c1:46:97:
cc:84:e8:8a:c4:56:60:46:35:8d:a4:7e:76:2a:ad:7d:52:70:
96:d8:6e:1d:42:bb:09:8b:e6:54:13:ca:0e:ea:33:9d:d0:fd:
fa:14:d8:06:a4:df:f9:b8:1b:94:59:f4:9d:82:46:69:a4:b3:
b8:f9:2a:58:f0:d9:2f:1e:75:82:dc:16:c0:1e:7d:e4:24:97:
a8:7a:dc:c5:32:1b:10:82:05:ee:59:c5:4e:04:ba:b3:bd:24:
87:5f:ab:0e:3f:16:85:51:f4:fa:8a:7b:e7:0f:6d:fa:35:d1:
fd:50:27:f4:75:63:d4:ff:57:20:3e:f1:3c:26:e3:d0:3c:59:
e3:78:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:28:49 2026 by rpki-client