Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
File: uGu2DZaz5dYYfuo4NovlSJuYdcY.mft (raw, json)
Hash identifier: m4stIFmga3NaVHVW2L1IRoIFGycn2i1MN+LNACjpzJI=
Subject key identifier: E3:88:FF:95:06:9F:E9:B3:4E:87:C7:82:80:29:1C:84:0F:F1:4C:E8
Authority key identifier: B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
Certificate issuer: /CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Certificate serial: 019F9391D605112FB86F042BFD493F9DDEFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
Manifest number: FF
Signing time: Fri 24 Jul 2026 10:00:35 +0000
Manifest this update: Fri 24 Jul 2026 10:00:35 +0000
Manifest next update: Sat 25 Jul 2026 10:00:35 +0000
Files and hashes: 1: JKRhGHz1wOMMDMbkd77Yaq_Pjqk.roa (hash: HUtH+6+YHomcHaSyEnrlGRMw9Xpgpt0Knkn8njrNXug=)
2: uGu2DZaz5dYYfuo4NovlSJuYdcY.crl (hash: xSvHkXvjE0LMV7WNXGybHkHc4rsOka9fZd01LSFr2zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:d6:05:11:2f:b8:6f:04:2b:fd:49:3f:9d:de:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86bb60d96b3e5d6187eea38368be5489b9875c6
Validity
Not Before: Jul 24 10:00:35 2026 GMT
Not After : Jul 25 10:00:35 2026 GMT
Subject: CN=e388ff95069fe9b34e87c78280291c840ff14ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f6:81:1c:43:56:61:07:cf:f2:cc:f0:6a:67:
1c:61:63:55:04:d4:7a:2e:97:a0:8a:e5:15:a8:43:
05:aa:1e:0d:b8:50:dc:e9:3c:de:fc:06:1d:0e:25:
5f:4f:49:e2:75:b9:8c:42:d4:2c:25:0c:70:e8:fb:
bf:ce:44:6f:02:7c:57:36:81:3a:fb:e2:55:82:9e:
a4:58:b7:e5:17:ee:25:19:01:3f:1d:1e:69:6a:8a:
62:64:b9:b6:a3:ed:c7:0d:fb:0c:ee:44:7f:b8:9b:
74:4d:ee:89:f2:3d:c5:b0:3a:71:f9:db:9f:56:4d:
b7:84:ef:5e:28:2e:dd:e1:36:6b:3a:3c:75:38:2f:
da:77:10:5a:0c:98:6a:6e:cf:fd:b0:43:de:25:64:
a7:ea:c8:00:46:31:5c:80:50:c9:c8:e9:1a:2a:c5:
e6:0c:cb:ec:00:83:2f:e0:15:bf:46:e8:aa:f5:1b:
ee:24:8e:92:a9:3c:4e:a4:81:09:53:ce:97:56:bc:
35:f2:b6:e8:63:df:f1:9e:53:e2:18:ed:70:b1:3a:
8b:74:f4:88:19:81:38:42:0d:ff:e5:97:02:de:e7:
8f:f2:1a:c4:17:0f:98:73:78:37:4a:b1:1e:74:08:
83:43:8d:06:55:13:ca:2b:f5:ba:eb:dc:e5:15:35:
c1:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:88:FF:95:06:9F:E9:B3:4E:87:C7:82:80:29:1C:84:0F:F1:4C:E8
X509v3 Authority Key Identifier:
keyid:B8:6B:B6:0D:96:B3:E5:D6:18:7E:EA:38:36:8B:E5:48:9B:98:75:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGu2DZaz5dYYfuo4NovlSJuYdcY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/4ac7f6-4cfd-4b11-b007-69c25feaab50/1/uGu2DZaz5dYYfuo4NovlSJuYdcY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:94:15:b4:c1:cf:a7:89:be:d4:11:52:f9:47:79:95:34:fa:
16:2b:d3:db:f0:b9:34:79:6b:60:a3:df:32:9b:b3:6c:43:73:
e2:28:02:1c:f5:e7:67:d9:f6:8d:fc:4d:59:a9:2b:1d:43:f4:
fe:26:d5:f0:c2:23:e9:b7:3b:3d:1b:cc:e1:79:94:d7:b2:b8:
e5:f8:9a:71:17:d1:cb:44:c3:e4:69:72:08:eb:be:af:b9:7e:
38:6a:6a:5a:f4:d0:ff:bc:9d:8a:d2:b9:69:29:83:1f:fd:a7:
65:03:20:d1:82:0a:cd:21:ef:bf:c5:15:88:d0:f8:3d:d1:4a:
da:8c:7c:55:42:71:83:d5:f4:e0:8b:fd:af:ad:eb:b4:dd:f5:
a7:4e:7f:27:fa:7c:d0:7f:24:5f:cc:34:6e:23:c5:9c:c4:bb:
0c:54:da:e5:57:fe:b7:10:35:d8:c8:bd:58:39:ac:05:dc:4b:
70:89:c7:6f:73:61:44:2a:44:13:0e:61:64:ad:08:27:2b:7d:
d2:56:f5:0c:01:ba:0a:2b:12:71:54:13:21:d6:a4:e4:95:f8:
1c:83:95:af:b2:ff:7b:71:ff:56:4a:b1:9f:e6:90:f2:b8:7b:
6c:85:18:ac:ad:f4:9c:5b:63:14:79:6e:22:fc:2c:aa:03:9b:
78:38:74:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:20:32 2026 by rpki-client