Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: 8lqjM9vgjBUE1/ww0W3i1ldtQssN+3nK1so5klVC9go=
Subject key identifier: 3E:86:3D:D3:85:FA:22:3D:52:1E:35:61:47:B0:70:3F:6F:83:DE:AB
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 019F9625427A90F4BEABA446E18172392102
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 0696
Signing time: Fri 24 Jul 2026 22:00:51 +0000
Manifest this update: Fri 24 Jul 2026 22:00:51 +0000
Manifest next update: Sat 25 Jul 2026 22:00:51 +0000
Files and hashes: 1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: fvdCyWo0lJVvHh1EO3sp/HKihlI3nHj/ll8FIWnqHz4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:42:7a:90:f4:be:ab:a4:46:e1:81:72:39:21:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Jul 24 22:00:51 2026 GMT
Not After : Jul 25 22:00:51 2026 GMT
Subject: CN=3e863dd385fa223d521e356147b0703f6f83deab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c2:cd:33:2c:6b:54:61:2c:47:a8:33:9c:22:
c1:79:a2:14:e5:f2:ce:63:e9:f0:bc:16:f8:77:5e:
5c:cd:9b:eb:7d:ad:e5:93:ed:b0:2c:a3:a6:49:47:
fd:00:c0:25:cf:a7:9e:91:e6:ea:56:41:0c:79:b1:
e8:fc:ae:14:17:2e:12:2a:54:15:1f:bf:89:79:5d:
57:71:5f:c5:6e:f1:70:1b:a2:fb:be:db:fd:b9:0d:
f5:6f:ac:79:ff:69:05:fd:fb:bf:d1:dd:b4:9a:cc:
72:a8:7f:b3:4f:15:02:17:07:99:bb:8e:94:e3:ab:
d8:0d:f6:48:4a:ef:1e:ff:39:2b:b8:03:06:92:c9:
c7:43:e2:8e:20:dc:53:86:6e:35:f4:49:06:71:00:
21:0c:aa:ef:e3:50:30:98:be:b3:9a:96:c5:68:a7:
b6:04:92:b0:e4:cd:01:f8:9a:83:22:72:14:54:16:
c2:23:ae:0f:41:41:e9:93:f0:db:f0:eb:ee:36:ce:
94:f6:78:c0:98:20:29:8d:12:8b:91:87:6e:69:cc:
c6:fb:7a:fa:cd:5b:4f:f0:ec:31:ed:49:0f:e5:94:
ff:88:f9:37:c2:9f:16:23:03:51:dd:83:af:41:64:
a4:50:a9:46:49:da:ac:6a:54:4f:89:10:0a:bc:64:
ae:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:86:3D:D3:85:FA:22:3D:52:1E:35:61:47:B0:70:3F:6F:83:DE:AB
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:96:37:9f:34:71:69:11:e1:49:f2:64:d2:a2:56:29:24:f6:
2e:a4:f4:45:18:c2:4a:09:b7:85:e0:ff:88:a8:a8:42:d8:6b:
4f:54:48:16:45:ab:d3:65:c1:8f:b6:90:11:3c:5d:00:17:86:
7a:91:77:0b:b0:55:21:28:8b:fd:ba:36:d9:14:84:50:e4:46:
37:6a:e4:f6:64:81:8c:75:c4:79:41:a5:fc:db:3c:80:0e:49:
e1:e0:7a:94:9c:61:3e:32:57:ec:d8:b1:11:a9:d7:53:ac:fb:
ea:5d:5f:37:a8:49:be:8b:67:73:ba:70:8f:e6:91:04:1d:0a:
22:de:85:b6:63:fe:87:2c:a5:11:83:20:4f:12:76:68:82:f0:
c5:70:b0:4d:3b:6b:78:cd:69:fb:12:b1:ad:f4:a8:1e:78:d0:
2c:a6:14:3f:a4:d0:c8:5e:ce:35:0c:9c:fd:03:06:d6:af:d8:
c5:f5:28:20:93:96:97:cc:f2:7e:db:e5:7f:97:7c:cc:fa:f7:
21:f3:e2:79:1e:40:de:76:a6:ae:90:65:8c:f8:30:92:7d:0a:
dc:02:fc:ee:56:08:09:74:27:e6:71:a9:3e:37:43:c5:cd:56:
ed:e0:d7:ce:60:9a:6a:ef:ba:db:54:b3:71:9c:fa:29:50:df:
33:f8:31:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 07:51:31 2026 by rpki-client