Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: ONe8lawemlvrPHHSXeEFHFPLlkVnz4iebFTYaFYkUyg=
Subject key identifier: E2:A2:D7:CB:0B:FF:B6:EA:C7:17:31:E5:9A:BA:A9:9F:F3:F7:BA:ED
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 019E1FB5DB0226CA3627C572617DB8628F6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 06F9
Signing time: Wed 13 May 2026 05:01:12 +0000
Manifest this update: Wed 13 May 2026 05:01:12 +0000
Manifest next update: Thu 14 May 2026 05:01:12 +0000
Files and hashes: 1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
2: bcgYn6i6szRgiqTef_V2TVLz0_A.roa (hash: DRHxg4qnrjdE5Fr30c+nCCNxRklO15CgLQ5tWP25jjE=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: miNNrP1Lbw+JpCWzdV/0yUkj/Sbz9A7LvSk7FKnrkfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:db:02:26:ca:36:27:c5:72:61:7d:b8:62:8f:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: May 13 05:01:12 2026 GMT
Not After : May 14 05:01:12 2026 GMT
Subject: CN=e2a2d7cb0bffb6eac71731e59abaa99ff3f7baed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1d:b4:c9:ea:76:bb:82:0f:37:12:c6:87:34:
ca:8d:5f:70:c7:87:e3:ad:59:c1:20:91:c0:22:11:
1b:9f:2d:8c:e4:ca:ed:ee:e2:6c:35:95:65:1a:f3:
9f:c3:89:93:5c:d6:97:52:5f:5f:e4:63:e8:3d:b8:
c5:06:db:08:36:ae:9d:60:03:51:f5:37:5d:25:b6:
37:bf:3c:b6:90:1b:a7:f4:30:ca:21:62:c9:25:e7:
60:42:7c:58:65:e2:ef:10:de:46:e0:a4:8b:5f:df:
fe:16:39:e1:9a:9c:04:5c:69:de:b2:82:d0:33:b8:
f8:ee:bb:18:67:2a:6b:5c:f6:fa:89:ae:2b:54:09:
b0:b8:0c:ba:d7:59:a1:34:9d:99:c7:ee:97:aa:85:
6b:d7:98:52:ab:62:2b:e5:73:24:93:48:3e:00:8a:
51:b5:04:d2:0d:7f:39:20:51:c4:9a:99:0d:25:5b:
f4:1f:96:55:03:2c:0c:a6:f1:b9:2a:4a:6a:8b:b4:
98:cd:1d:04:65:e9:55:ba:62:0a:52:03:1c:c4:86:
40:29:58:46:4e:ed:0d:9a:cd:70:70:ef:a7:92:27:
5e:f3:9b:46:b3:43:03:6f:6c:f2:6d:6d:5f:2c:f8:
ca:6a:ee:5e:67:89:97:e8:66:60:e6:d6:a7:4f:07:
f9:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:A2:D7:CB:0B:FF:B6:EA:C7:17:31:E5:9A:BA:A9:9F:F3:F7:BA:ED
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:da:b3:92:cc:c6:8c:fa:21:7a:f0:1c:03:57:b9:e5:83:bd:
a9:49:b6:9a:d3:f7:a5:70:78:34:95:62:d4:ba:d5:65:01:d6:
c5:4b:ed:50:8a:b2:28:c1:be:f1:eb:0e:5a:0d:4a:7a:3e:40:
a2:31:fc:67:26:6c:76:05:dc:06:a1:78:69:4e:00:0e:dc:2a:
5b:ea:3f:4e:a6:89:ce:8f:76:df:46:87:71:5d:cd:36:3a:7f:
03:0d:fa:b0:48:5f:59:3d:be:92:07:63:64:ba:6b:c0:b3:e0:
5c:c9:78:1a:67:48:16:f3:66:1a:9d:e0:15:f3:38:5e:e2:41:
48:f5:a1:8a:95:d8:22:d6:e1:bc:49:bd:cd:9c:9e:99:86:a0:
4e:86:80:a6:78:72:9e:70:04:7b:32:0f:22:0d:cf:ba:c8:8d:
d1:15:7c:14:d3:09:21:dd:03:01:5f:d2:5a:be:97:ba:82:cd:
6a:9e:6f:33:40:42:31:8f:81:73:ac:39:5e:5e:43:2d:2e:7c:
6d:03:5f:f3:31:f2:3f:60:5c:56:87:dd:11:3a:92:ff:52:a9:
cb:e2:c5:d8:e4:5f:d5:63:04:ac:02:02:84:3a:fa:d6:3a:b4:
60:2e:0e:28:21:29:b9:52:a6:92:38:c7:98:ad:8a:14:c2:bc:
2d:db:7f:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:27:56 2026 by rpki-client