Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File: uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier: IPgvIL08XRZUardnnalUa47jwF+9p7tqoRxHaBHL+7E=
Subject key identifier: 3B:12:49:F5:C1:05:C8:14:E1:1F:AA:EB:BA:86:76:18:CA:84:38:B8
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer: /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial: 019EC1EDCF26B750F4D162CE54912D71B723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number: 0194
Signing time: Sat 13 Jun 2026 17:00:48 +0000
Manifest this update: Sat 13 Jun 2026 17:00:48 +0000
Manifest next update: Sun 14 Jun 2026 17:00:48 +0000
Files and hashes: 1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: 9iCdO7ekfw8MC84xoWYbyuP8dtils6sLSnhEdEnzJbk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:ed:cf:26:b7:50:f4:d1:62:ce:54:91:2d:71:b7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Validity
Not Before: Jun 13 17:00:48 2026 GMT
Not After : Jun 14 17:00:48 2026 GMT
Subject: CN=3b1249f5c105c814e11faaebba867618ca8438b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:a9:b2:a8:fc:e4:28:f9:73:16:8d:8c:88:a4:
23:9d:d5:0a:15:87:f0:24:c7:78:48:6f:5a:37:f8:
7e:03:29:47:40:be:38:60:38:fb:61:bb:4d:13:20:
8b:2e:ec:e8:82:ce:46:7d:27:33:89:bb:62:4b:9a:
f2:1f:c2:cf:94:2e:a4:71:f5:e7:c6:5d:8e:33:15:
1b:90:96:7a:9a:1e:32:a3:d4:01:12:1c:60:37:9c:
bb:c0:d6:7c:b3:f2:9d:3f:7d:ff:63:b8:e6:94:c3:
94:ad:28:34:5d:25:97:3e:9d:74:76:ba:8f:25:cd:
b3:ff:e1:74:89:ea:5c:5a:f0:31:70:22:42:3a:c9:
95:23:1f:9b:f0:b5:bf:17:7a:ab:cb:4a:70:f1:e7:
ee:e7:58:27:d3:d9:08:0d:a6:54:9f:83:2d:cf:17:
a3:d5:43:9f:36:0c:2d:c3:75:41:5d:b2:1e:03:ee:
20:ef:8e:52:96:4f:33:91:30:f3:0e:9d:66:0a:37:
57:69:87:49:84:d7:72:11:8a:ba:44:c3:ed:5e:d5:
8e:45:fa:01:02:82:e9:9d:ef:1d:7c:b5:06:72:53:
ba:54:b2:94:fa:c6:a4:ba:52:28:bd:c1:b6:19:5f:
a0:b4:18:a5:ef:09:94:d8:50:60:8c:89:de:90:4b:
06:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:12:49:F5:C1:05:C8:14:E1:1F:AA:EB:BA:86:76:18:CA:84:38:B8
X509v3 Authority Key Identifier:
keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:31:0b:a6:10:23:21:72:fb:81:64:e2:51:6f:00:be:0c:39:
76:10:d9:8a:ba:1f:74:f3:24:8c:22:9c:52:76:01:18:b6:84:
27:95:25:a2:e9:91:3b:6d:05:27:87:f2:fb:56:91:be:34:27:
52:80:f4:9e:f6:f7:b5:b1:ed:fa:99:bf:c4:98:e1:9f:50:9b:
ed:d5:c1:c4:22:d1:dc:2d:60:fe:ef:8f:ff:cc:32:c7:39:04:
c8:20:d3:e1:d9:3b:af:fb:f0:5e:45:2b:a4:4c:dd:aa:57:b9:
79:59:33:33:03:ec:63:53:06:19:6e:51:53:45:0c:4c:16:0d:
80:e0:9e:1c:f7:b4:c4:da:bb:66:a9:48:af:e1:07:ce:58:f3:
8d:e2:9f:c0:ae:ad:e0:87:6e:73:78:13:28:c4:0b:cc:b9:86:
d8:68:d9:1d:93:3e:71:bc:49:f3:2d:30:77:39:73:22:45:67:
a0:14:12:98:4a:53:d9:ef:1f:83:55:4c:fd:7c:c7:ad:52:ba:
be:57:b5:b5:48:ec:92:34:e1:b8:7b:57:2f:42:70:66:33:59:
f7:c8:f1:41:3a:47:7b:1e:ad:df:0a:7b:e5:82:07:1d:dd:c5:
79:5a:43:4f:81:1f:90:25:5c:d9:22:83:e8:40:22:43:5b:83:
bf:45:44:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:40:03 2026 by rpki-client