Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
File: kUXq2NPxKEQCtvdWFKhyV1A84bw.mft (raw, json)
Hash identifier: pmzzeGQ+weY86O3aCYCULOLJwTGx5NGgla4fhdNSRIk=
Subject key identifier: 7E:8C:7E:FB:BC:83:06:9E:84:B0:AE:5E:47:21:8C:F1:DF:E2:2D:79
Authority key identifier: 91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
Certificate issuer: /CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Certificate serial: 019F9549B615A47019E09B6610F087A4E3AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
Manifest number: 1782
Signing time: Fri 24 Jul 2026 18:01:03 +0000
Manifest this update: Fri 24 Jul 2026 18:01:03 +0000
Manifest next update: Sat 25 Jul 2026 18:01:03 +0000
Files and hashes: 1: EA-NEOtP3uDP9jqB_OwjrtlomoQ.roa (hash: f9ettJwQvG7z/vLtWszxNDWQ12P3Qi4WIIeHx0l0KMI=)
2: RUWdvZOnBJK0iIW0niXlms-_ZTE.roa (hash: 2+wMNcHhj5TvnlxNSP9HNjiQphs6X1jHdgsBG2jH8oQ=)
3: dJ99YeIlqHaqk3MFFpF1s00gLYY.roa (hash: 2get34VvGB/+dlsQY7O9iVM7eMGsBo6doetqxUk2mpw=)
4: kUXq2NPxKEQCtvdWFKhyV1A84bw.crl (hash: z8Rc0b1Tz9C/TfOSmj1BM7lMVQG4IN2pV4pNxLkOnHw=)
5: oZzPr194SGFDBoXBt9T9kB-yFLc.roa (hash: Dw3uJz0rcR+PJswxCLk9+YfSwY4+DIuftXl5NNe/QJg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:b6:15:a4:70:19:e0:9b:66:10:f0:87:a4:e3:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9145ead8d3f1284402b6f75614a87257503ce1bc
Validity
Not Before: Jul 24 18:01:03 2026 GMT
Not After : Jul 25 18:01:03 2026 GMT
Subject: CN=7e8c7efbbc83069e84b0ae5e47218cf1dfe22d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b5:39:af:99:a9:b2:91:95:7b:4f:2a:47:50:
7a:4f:25:df:c3:19:53:17:ca:2e:7c:b0:e8:bd:4d:
93:3f:00:67:09:0c:22:b0:35:90:6f:dc:7d:e9:09:
26:59:45:fd:d5:1b:b8:80:c0:64:ed:ba:bc:95:a4:
6e:9e:1a:b8:62:5c:3e:8b:35:67:1f:96:95:35:8b:
c5:2a:03:1d:1e:e0:b3:33:d7:a2:fd:85:75:d1:8c:
af:30:84:02:7a:c2:b5:5c:6c:8e:fe:e0:43:ac:3a:
d4:13:ba:1b:a0:41:4c:56:ea:20:2b:28:98:c2:25:
52:06:dd:61:27:6f:37:34:ab:ea:d7:d6:80:43:ca:
0b:93:fb:b9:eb:e1:0e:1c:9f:ee:61:97:b3:eb:c0:
0a:3f:53:6e:7d:46:93:cb:5c:43:38:a1:f4:1f:73:
7f:ae:5c:3a:94:bc:a5:d6:af:f1:bc:bf:c1:ff:99:
f6:a4:12:0a:4a:a0:52:22:44:70:6c:6b:82:c2:8e:
a3:95:2a:bc:e2:6e:6a:40:cc:05:b3:b9:4f:fe:e5:
d7:da:e5:f5:59:ff:77:57:94:b2:cb:42:d1:eb:a3:
da:6f:a6:ea:f4:5d:c2:3b:04:e4:a8:cb:6b:fb:f5:
fd:a9:4d:63:86:c3:81:09:77:7f:8e:96:9a:40:49:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:8C:7E:FB:BC:83:06:9E:84:B0:AE:5E:47:21:8C:F1:DF:E2:2D:79
X509v3 Authority Key Identifier:
keyid:91:45:EA:D8:D3:F1:28:44:02:B6:F7:56:14:A8:72:57:50:3C:E1:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUXq2NPxKEQCtvdWFKhyV1A84bw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a5235f-62fb-4abb-8037-2ad195264c72/1/kUXq2NPxKEQCtvdWFKhyV1A84bw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:25:94:fa:ff:27:af:f6:3e:28:44:f6:37:b6:a9:16:32:36:
87:0c:80:41:79:83:88:c3:89:09:55:cb:9a:53:f4:cc:92:ff:
d3:d4:a5:49:c6:14:e3:a3:4a:62:87:0b:11:4a:7c:15:39:33:
72:e1:e9:96:b4:bc:88:45:4d:76:47:09:e2:af:21:f7:e8:05:
fd:20:a1:53:02:39:a5:d3:21:00:de:14:77:4c:98:7d:79:08:
bf:89:18:95:5d:ee:f3:7d:95:bd:55:52:e5:bc:ac:c5:21:e5:
7c:f4:ae:38:9a:96:e0:43:aa:e5:02:4e:3d:3d:17:3f:3e:23:
99:af:8a:27:0c:d7:ea:1c:cd:e6:f6:9a:c7:74:45:49:2a:63:
da:a9:97:04:5a:42:b3:36:f7:93:1a:70:5f:58:f9:31:bd:6e:
67:87:63:de:14:55:74:11:ea:3e:41:dd:db:99:25:aa:70:1f:
38:04:88:38:46:82:2c:d1:89:95:a4:6e:17:84:11:97:fb:04:
e8:23:bb:a1:36:aa:95:53:9d:5e:03:6c:e4:6b:34:5d:c0:6b:
82:22:82:33:8e:60:54:ac:1e:c7:2a:bb:b3:14:68:2e:52:d0:
37:f7:55:42:d9:3b:0e:54:7b:27:4c:6d:b7:11:f7:9a:2d:61:
ac:14:b5:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VSbYVpHAZ4JtmEPCHpOOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNDVlYWQ4ZDNmMTI4NDQwMmI2Zjc1NjE0YTg3MjU3NTAz
Y2UxYmMwHhcNMjYwNzI0MTgwMTAzWhcNMjYwNzI1MTgwMTAzWjAzMTEwLwYDVQQD
Eyg3ZThjN2VmYmJjODMwNjllODRiMGFlNWU0NzIxOGNmMWRmZTIyZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1LU5r5mpspGVe08qR1B6TyXfwxlT
F8oufLDovU2TPwBnCQwisDWQb9x96QkmWUX91Ru4gMBk7bq8laRunhq4Ylw+izVn
H5aVNYvFKgMdHuCzM9ei/YV10YyvMIQCesK1XGyO/uBDrDrUE7oboEFMVuogKyiY
wiVSBt1hJ283NKvq19aAQ8oLk/u56+EOHJ/uYZez68AKP1NufUaTy1xDOKH0H3N/
rlw6lLyl1q/xvL/B/5n2pBIKSqBSIkRwbGuCwo6jlSq84m5qQMwFs7lP/uXX2uX1
Wf93V5Syy0LR66Pab6bq9F3COwTkqMtr+/X9qU1jhsOBCXd/jpaaQEmD5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH6Mfvu8gwaehLCuXkchjPHf4i15MB8GA1UdIwQY
MBaAFJFF6tjT8ShEArb3VhSocldQPOG8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzct
MmFkMTk1MjY0YzcyLzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hNTIzNWYtNjJmYi00YWJiLTgwMzctMmFkMTk1MjY0Yzcy
LzEva1VYcTJOUHhLRVFDdHZkV0ZLaHlWMUE4NGJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsSWU+v8n
r/Y+KET2N7apFjI2hwyAQXmDiMOJCVXLmlP0zJL/09SlScYU46NKYocLEUp8FTkz
cuHplrS8iEVNdkcJ4q8h9+gF/SChUwI5pdMhAN4Ud0yYfXkIv4kYlV3u832VvVVS
5bysxSHlfPSuOJqW4EOq5QJOPT0XPz4jma+KJwzX6hzN5vaax3RFSSpj2qmXBFpC
szb3kxpwX1j5Mb1uZ4dj3hRVdBHqPkHd25klqnAfOASIOEaCLNGJlaRuF4QRl/sE
6CO7oTaqlVOdXgNs5Gs0XcBrgiKCM45gVKwexyq7sxRoLlLQN/dVQtk7DlR7J0xt
txH3mi1hrBS1GA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 22:23:25 2026 by rpki-client