Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft (raw, json)
Hash identifier: Tgr1AapiJ3Lw4wVIDUkHkEW5VLuPQ/rejKPosvpLmnc=
Subject key identifier: 46:A8:4F:B3:BB:A3:85:1A:D9:52:F8:8B:16:6F:08:23:CE:D7:82:06
Authority key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Certificate issuer: /CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Certificate serial: 019F93241E42E786459EFE44CE5D323F21D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
Manifest number: 07BB
Signing time: Fri 24 Jul 2026 08:00:45 +0000
Manifest this update: Fri 24 Jul 2026 08:00:45 +0000
Manifest next update: Sat 25 Jul 2026 08:00:45 +0000
Files and hashes: 1: 845se0I5w_ABtHgN1jpZJhRDX2U.roa (hash: XtKaLfEk8dB6Tywis/naWcuQfxkanpJ2MfBAflauD8s=)
2: DFDpF7Vmbd_GPoD3_0_PfrTTyn0.roa (hash: dUYfJyucIcgSEye6sBcDdNQsfbXuPD7ojWDauTvFvck=)
3: uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl (hash: EnHtm4g/WIvn5m6iVyXZPScqkaRxC4AR8GxyARKH99E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:1e:42:e7:86:45:9e:fe:44:ce:5d:32:3f:21:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Validity
Not Before: Jul 24 08:00:45 2026 GMT
Not After : Jul 25 08:00:45 2026 GMT
Subject: CN=46a84fb3bba3851ad952f88b166f0823ced78206
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8f:9c:cf:80:15:a9:b5:82:89:16:5f:59:4c:
16:d3:aa:7b:14:f5:84:19:7c:13:90:b5:fc:89:eb:
b3:63:11:35:08:07:a3:a4:ce:50:bc:13:a4:3a:c3:
d7:a7:96:e6:83:7a:b0:67:46:e1:e1:44:df:22:a0:
4c:aa:fe:90:0e:9f:53:78:5c:cd:37:2b:76:e7:4b:
92:2b:6c:91:d2:71:1b:78:0d:68:60:14:19:ed:3f:
61:7a:a5:05:85:b7:06:a3:de:96:6e:48:70:0e:15:
10:bd:b4:53:d7:e2:96:cd:ee:2a:02:d6:1a:00:7e:
5f:4d:3d:56:d2:a1:3a:0e:e3:1b:ee:d8:63:a3:91:
d3:67:a9:ee:c7:2a:ae:96:67:39:a9:02:7b:4c:84:
6e:ca:24:e5:fd:c2:63:19:4c:ca:8f:49:6e:e4:17:
78:ff:f5:5d:7b:15:f1:8b:54:2c:fd:4b:0c:d7:76:
96:7a:ce:5b:7f:90:ad:9a:61:e2:c6:e0:02:1b:9e:
17:da:d4:45:09:ec:75:a0:2d:3d:28:24:d2:07:6c:
32:4b:07:57:ac:cd:ac:6e:54:fa:be:31:e1:88:e3:
61:e3:27:23:6d:6f:d4:b1:31:33:e1:c4:32:58:b7:
de:b2:4c:4e:81:00:c7:16:5e:ae:e8:d1:af:98:4d:
b5:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A8:4F:B3:BB:A3:85:1A:D9:52:F8:8B:16:6F:08:23:CE:D7:82:06
X509v3 Authority Key Identifier:
keyid:B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:5c:09:07:6f:60:8a:47:b3:3b:db:9a:6a:22:4e:4c:9b:1d:
9d:7f:8a:38:a3:13:47:3a:00:00:bd:bd:65:01:36:74:85:e7:
d1:0d:d9:86:9d:72:d6:b4:b0:f8:50:d7:10:5e:ef:a2:a4:1b:
6f:6d:d6:3e:f7:3e:3f:f7:c2:6d:db:fd:26:2f:ce:ab:eb:ec:
dc:19:10:1c:b5:40:73:07:32:23:c3:cd:ff:b2:f5:a5:a3:b3:
74:9f:bc:2e:12:be:89:8c:4e:b7:91:cb:7d:ec:1b:bd:4a:d9:
40:02:05:0c:ae:cc:01:27:1c:35:13:86:c1:52:54:76:86:95:
f8:eb:43:48:d0:36:a3:92:fe:83:51:43:44:58:64:c2:c4:62:
d9:51:de:ef:6a:e4:31:42:52:68:0b:51:a7:d5:df:4a:a6:10:
e3:86:61:91:aa:5f:67:55:c1:16:81:0a:38:39:f2:3b:d5:4a:
e3:53:8b:b2:e7:ed:c2:14:29:ff:bb:84:0e:9f:4e:43:36:88:
57:e3:0e:33:28:12:9c:4e:a0:0f:9e:3f:d3:5c:fa:17:0f:91:
19:05:fb:91:20:52:f8:f4:56:15:17:e1:c8:68:b7:44:5e:a2:
10:f7:e5:7b:d7:87:3b:fe:04:aa:38:e1:68:9b:ff:d8:0b:9c:
18:5e:c2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:17:09 2026 by rpki-client