Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: VRCiy++ru07jSkmAi2ZYYc35eRHllB5OrPe1/bjVKZA=
Subject key identifier: C4:0F:5D:EF:89:8C:1B:54:98:77:06:10:78:79:1F:5D:71:76:97:4E
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 019F927EE13C92D8D00E52D410AF4B4E767D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 05:00:16 +0000
Manifest this update: Fri 24 Jul 2026 05:00:16 +0000
Manifest next update: Sat 25 Jul 2026 05:00:16 +0000
Files and hashes: 1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: ZRazM3vv6v1YsOhsGRsGFDHtEubNP+QiGi2VL8R13yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:e1:3c:92:d8:d0:0e:52:d4:10:af:4b:4e:76:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Jul 24 05:00:16 2026 GMT
Not After : Jul 25 05:00:16 2026 GMT
Subject: CN=c40f5def898c1b549877061078791f5d7176974e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e1:8b:39:7e:6c:ca:23:3b:76:da:b9:3e:c4:
8c:dc:49:ca:da:1e:cc:c1:5f:66:ed:8d:48:b9:2b:
0e:cc:39:e9:b7:91:4f:e5:83:68:98:62:41:f3:5a:
f0:58:7a:49:ea:e7:d3:fe:91:d7:40:f3:3e:e0:bb:
8f:c2:95:90:38:7c:fb:37:52:48:13:62:fa:e0:1c:
a0:20:0a:ae:fa:e6:26:81:e4:df:94:d0:0f:3f:d0:
a6:f5:79:7e:85:27:8f:49:46:5e:42:9d:71:da:25:
cb:29:7e:2c:89:74:7e:78:87:47:6e:55:fd:c5:35:
47:01:16:39:fa:f1:ec:fa:61:8b:b3:26:4d:e8:6b:
dd:88:6c:e2:c4:7b:06:5c:d6:6b:44:34:d0:ad:c0:
e9:1b:54:4b:1b:60:b6:cd:66:d5:6b:9d:37:8d:f5:
b0:02:72:d1:62:d8:95:08:ee:06:93:6b:55:6f:0b:
41:9b:76:33:c0:6e:cd:70:e6:9a:25:d2:de:08:90:
f2:5d:91:91:56:7c:f4:fa:71:05:52:c4:8c:35:d6:
cf:7b:91:bc:2b:34:af:66:74:91:de:8e:40:9d:42:
e0:2a:21:0d:9d:28:f4:97:b3:72:cd:67:c9:fc:a7:
d1:58:18:75:87:ad:a3:20:b9:3f:99:4c:94:cd:fa:
2c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:0F:5D:EF:89:8C:1B:54:98:77:06:10:78:79:1F:5D:71:76:97:4E
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:bd:50:e4:28:1e:a4:cd:cb:65:a9:c4:af:77:62:72:06:59:
97:dd:7f:4a:28:29:bc:26:92:ae:c5:09:4e:1b:8b:5a:32:af:
09:dc:f0:94:c8:00:32:6f:68:ff:c8:e4:50:e9:81:b9:66:ad:
7e:13:cf:a1:f6:9a:b6:a4:4d:94:2e:4d:f1:e6:76:bf:d2:8e:
80:80:65:7e:bb:76:28:08:6a:4b:c7:33:37:a5:39:8c:e9:77:
51:d6:a7:54:dd:90:ab:56:bd:2f:bb:1a:4c:b1:03:d0:04:57:
cc:2d:50:2a:3f:cc:a6:b1:f7:80:82:2e:30:52:b6:f4:c6:1a:
c1:60:39:31:2d:f3:b9:d2:e2:fc:1a:c1:20:de:94:c4:f4:7f:
61:8e:e5:37:ca:eb:a8:0f:7d:ff:a8:b0:f2:1e:f0:9c:78:eb:
3d:cd:d6:b5:2a:e0:bb:c1:67:3d:04:dc:e8:ad:dc:e0:d8:48:
2b:cc:67:be:4c:67:d0:55:20:12:14:53:00:12:03:13:af:06:
37:a0:bf:53:c9:d2:b4:fa:5d:99:41:6a:6e:f0:11:a3:e5:1c:
9d:af:d0:a2:1e:b4:f6:b1:98:e9:d3:e8:05:27:39:9a:a1:92:
5e:6d:48:c7:e2:ac:5f:00:5e:f1:89:18:75:c6:7f:ba:f9:04:
33:8c:fb:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:40:08 2026 by rpki-client