Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
File: uGu2DZaz5dYYfuo4NovlSJuYdcY.mft (raw, json)
Hash identifier: Ob+v6wYuIYROCot8N/oXrGkNDIhsWoRUk8AOvn9ZbNE=
Subject key identifier: 3D:2A:DE:61:52:03:77:42:57:20:E8:8A:51:C3:65:F9:09:26:C3:56
Authority key identifier: B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
Certificate issuer: /CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Certificate serial: 019F91A41D16762360D03822BB298687762A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
Manifest number: FE
Signing time: Fri 24 Jul 2026 01:01:19 +0000
Manifest this update: Fri 24 Jul 2026 01:01:19 +0000
Manifest next update: Sat 25 Jul 2026 01:01:19 +0000
Files and hashes: 1: JKRhGHz1wOMMDMbkd77Yaq_Pjqk.roa (hash: HUtH+6+YHomcHaSyEnrlGRMw9Xpgpt0Knkn8njrNXug=)
2: uGu2DZaz5dYYfuo4NovlSJuYdcY.crl (hash: Uvogl1FoSjugGn7GwF0ADkcN+EtX7kt3gquCuLdas0c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 01:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a4:1d:16:76:23:60:d0:38:22:bb:29:86:87:76:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Validity
Not Before: Jul 24 01:01:19 2026 GMT
Not After : Jul 25 01:01:19 2026 GMT
Subject: CN=3d2ade61520377425720e88a51c365f90926c356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:dc:ac:56:78:77:98:d2:49:60:f0:35:80:
d7:15:ef:b4:31:7a:8a:2b:32:19:48:6f:8b:88:3f:
8c:2d:ac:8c:1c:c8:df:1a:5f:e6:0d:f5:a6:70:be:
7b:e9:ea:0b:c3:fc:cd:47:1b:e3:5f:12:d4:04:6e:
79:25:3e:e4:68:68:98:d1:6f:a4:a1:ca:b4:3c:f8:
97:c6:03:9d:a9:40:ab:59:51:e3:c9:16:f7:d0:bc:
98:e1:55:ee:1d:05:5b:4b:d8:68:63:cd:ec:14:bd:
9c:23:41:4c:00:8d:91:04:50:c0:2e:e5:01:34:a8:
b5:d5:91:32:f6:cb:81:ce:4d:7e:e0:2f:4f:b1:06:
a2:6e:46:64:68:97:e3:42:58:6c:66:45:a5:51:92:
39:fc:d8:2f:7c:04:68:f5:07:cc:c3:df:eb:77:27:
11:f2:6c:1a:5a:02:48:1d:73:18:0d:a3:05:10:0c:
f7:05:ea:ec:d8:7d:e3:ab:fc:a7:9a:0d:4c:80:2c:
61:aa:0a:b4:66:b1:c1:1b:65:bc:8b:c9:9c:94:9f:
ad:78:12:6b:a9:ef:f6:cb:7c:e7:84:1c:a7:34:e1:
8b:90:01:05:b0:9c:76:46:de:7f:76:e4:38:d0:7e:
23:db:25:10:b3:66:59:a0:60:a9:30:ff:ca:d1:ca:
5c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:2A:DE:61:52:03:77:42:57:20:E8:8A:51:C3:65:F9:09:26:C3:56
X509v3 Authority Key Identifier:
keyid:B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:73:dc:9b:09:89:c5:19:c8:90:7c:fc:d1:f0:16:aa:57:5f:
1a:ac:a7:41:37:c8:d8:0b:6a:14:81:04:0b:f6:ed:19:ab:90:
d8:60:96:81:fc:29:09:d2:73:d5:f2:50:2e:a5:18:cc:06:b6:
5a:4c:d2:f3:67:81:b3:82:59:45:4d:65:b9:11:2d:83:6b:00:
8d:80:7e:4b:95:e9:c6:60:8d:4c:b4:6f:e7:64:f3:72:e8:d5:
a5:59:22:66:e2:70:f9:39:fc:59:26:8e:f0:cf:11:16:7e:80:
4f:fc:6f:31:1c:41:40:d7:39:f5:c5:fa:30:44:7d:d9:4c:05:
54:af:aa:1a:e9:a8:a2:e2:7c:24:c6:b0:f5:62:dc:39:7b:a4:
1f:d3:82:66:35:0f:d5:33:e6:37:be:e4:b1:c9:6a:d0:08:16:
3d:0c:fb:ba:9c:66:b6:21:a7:81:ef:c2:31:88:42:7d:2a:c8:
a4:c3:4f:68:21:38:b2:76:65:4a:2d:44:7d:a6:6e:1b:89:66:
ca:0e:bf:5c:85:dd:47:84:b7:52:52:bc:fa:a7:3c:cc:01:ed:
91:47:34:36:d3:ab:3f:c2:52:cd:40:a5:31:ac:77:7d:5c:4b:
56:80:08:e5:7e:bb:ff:dd:97:f3:1c:c8:0a:56:57:3f:de:6a:
33:47:c8:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:58:07 2026 by rpki-client