Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: tGVzn8oc/jZEqstb/kTa/VX+bzQ5ZoLrEo/9cJVKLSk=
Subject key identifier: 3D:9D:46:3D:0F:21:5F:6A:07:77:ED:2C:44:E3:54:F4:E5:B0:39:42
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019F91DB2B0F87EEBE01EAFF15EF23EC23C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 0752
Signing time: Fri 24 Jul 2026 02:01:27 +0000
Manifest this update: Fri 24 Jul 2026 02:01:27 +0000
Manifest next update: Sat 25 Jul 2026 02:01:27 +0000
Files and hashes: 1: OltqusiONwq6zhUPBl1q_HTWUcA.roa (hash: yohyGHRO9bN4Jv8extESQ5lHUkDgjz8947qRm997x8I=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: MsEIHxnKObwEbEt+aJQZ3F2KJyWzm6ovVmDmi+YnlEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:2b:0f:87:ee:be:01:ea:ff:15:ef:23:ec:23:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Jul 24 02:01:27 2026 GMT
Not After : Jul 25 02:01:27 2026 GMT
Subject: CN=3d9d463d0f215f6a0777ed2c44e354f4e5b03942
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9d:fb:30:06:23:ab:0d:73:c1:f5:69:5b:9e:
cd:5d:bb:8e:33:69:ef:e5:cb:6f:d3:af:22:b4:58:
c9:90:5f:b2:d8:5c:79:24:2a:88:f0:63:33:51:97:
03:81:5a:b1:09:3c:de:2b:47:b9:88:4c:25:78:e1:
79:b3:7e:87:5b:6f:44:28:1b:37:d0:21:ba:00:86:
15:26:31:a3:a8:8d:e2:4d:8d:55:78:5c:ae:92:41:
fa:f2:d8:1a:56:d0:74:e8:7f:7f:a8:eb:e3:05:b6:
bf:bb:da:c3:78:40:db:0e:b6:57:20:48:5c:d4:f0:
0e:27:94:1c:10:77:b4:4f:d2:b3:89:d4:13:11:bf:
fd:7a:fd:99:a1:bc:27:97:e5:6d:34:cf:41:5d:33:
f1:ff:70:cb:41:46:2b:ab:a4:e9:fb:bc:4b:9d:7b:
a9:18:e6:67:14:95:7c:48:e3:ca:5d:dd:cb:bb:b3:
11:bc:d8:83:8b:94:46:a1:66:19:36:88:4f:fc:1f:
e2:3e:50:6c:ec:7b:95:b6:13:35:ab:ec:f8:65:27:
eb:cb:4a:62:c0:a6:25:2a:07:c2:04:80:1f:c9:93:
8e:10:55:67:af:f8:fe:a4:fe:fb:2d:d3:22:82:94:
a8:1f:71:18:d0:6a:d3:42:0c:46:02:5e:0b:c3:7a:
59:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:9D:46:3D:0F:21:5F:6A:07:77:ED:2C:44:E3:54:F4:E5:B0:39:42
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:9c:64:b3:3c:ff:b0:67:aa:d6:e1:83:19:49:3f:1a:92:4a:
a8:92:d3:39:b1:f2:13:d8:b3:3c:07:4c:57:4a:86:7a:68:58:
a5:ff:07:da:88:50:72:a1:bf:13:94:ae:bd:b4:7b:4f:87:95:
07:36:5b:f1:e9:bb:78:42:c8:75:7d:9f:98:b7:30:8c:9c:7e:
78:80:e3:7a:ef:f3:39:9c:72:1a:b1:dc:28:69:32:91:9f:ff:
60:f4:6a:4b:13:b1:c4:74:7a:7a:50:aa:f5:03:0c:aa:da:ea:
50:2d:7e:52:8e:d0:6e:4a:bc:b9:eb:07:8f:bc:b0:2d:cb:bd:
c1:8f:e3:26:67:6a:22:7a:09:a9:55:ea:2f:d4:aa:93:1b:92:
f0:2d:24:ea:6e:f3:34:06:53:f0:de:51:5b:09:69:cf:66:59:
d1:a9:45:28:59:0a:46:45:6d:b3:02:de:88:29:28:b4:09:4b:
37:a5:52:5f:b5:67:49:b7:14:f2:55:46:aa:1d:e8:7d:e4:7a:
6e:86:31:22:70:48:73:cb:49:b3:05:38:ad:e5:2e:5a:bb:1b:
b2:29:6b:a3:5e:30:42:e9:87:da:b6:01:e0:cd:67:d0:98:1c:
b7:97:7a:be:d5:e1:e1:df:4b:c9:5b:7b:1e:bd:f3:6b:98:bf:
9e:24:26:17
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2ysPh+6+Aer/Fe8j7CPAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5MTQxNjZiNjg1YWMwMTViOTQxMjZjZGI4YjE4YzgzYTEy
ZWQ4NjIwHhcNMjYwNzI0MDIwMTI3WhcNMjYwNzI1MDIwMTI3WjAzMTEwLwYDVQQD
EygzZDlkNDYzZDBmMjE1ZjZhMDc3N2VkMmM0NGUzNTRmNGU1YjAzOTQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ37MAYjqw1zwfVpW57NXbuOM2nv
5ctv068itFjJkF+y2Fx5JCqI8GMzUZcDgVqxCTzeK0e5iEwleOF5s36HW29EKBs3
0CG6AIYVJjGjqI3iTY1VeFyukkH68tgaVtB06H9/qOvjBba/u9rDeEDbDrZXIEhc
1PAOJ5QcEHe0T9KzidQTEb/9ev2Zobwnl+VtNM9BXTPx/3DLQUYrq6Tp+7xLnXup
GOZnFJV8SOPKXd3Lu7MRvNiDi5RGoWYZNohP/B/iPlBs7HuVthM1q+z4ZSfry0pi
wKYlKgfCBIAfyZOOEFVnr/j+pP77LdMigpSoH3EY0GrTQgxGAl4Lw3pZwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD2dRj0PIV9qB3ftLETjVPTlsDlCMB8GA1UdIwQY
MBaAFLkUFmtoWsAVuUEmzbixjIOhLthiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYt
ZWE2N2E5ODYyNWZlLzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi9kM2JlNzAtZGRmMS00OGY1LTg2NmYtZWE2N2E5ODYyNWZl
LzEvdVJRV2EyaGF3Qlc1UVNiTnVMR01nNkV1MkdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADZxkszz/
sGeq1uGDGUk/GpJKqJLTObHyE9izPAdMV0qGemhYpf8H2ohQcqG/E5SuvbR7T4eV
BzZb8em7eELIdX2fmLcwjJx+eIDjeu/zOZxyGrHcKGkykZ//YPRqSxOxxHR6elCq
9QMMqtrqUC1+Uo7Qbkq8uesHj7ywLcu9wY/jJmdqInoJqVXqL9SqkxuS8C0k6m7z
NAZT8N5RWwlpz2ZZ0alFKFkKRkVtswLeiCkotAlLN6VSX7VnSbcU8lVGqh3ofeR6
boYxInBIc8tJswU4reUuWrsbsilro14wQumH2rYB4M1n0Jgct5d6vtXh4d9LyVt7
Hr3za5i/niQmFw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:23:46 2026 by rpki-client