Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
File: uncwHhTWWzo9aG2qwW38SaxIx80.mft (raw, json)
Hash identifier: l4fXp0bfTBp+XH2RHOIVhT/97cs4xEqVy5gG2jlaygs=
Subject key identifier: 96:88:87:42:BB:15:01:8A:A6:9E:F7:74:30:B9:8F:2A:CA:54:37:D6
Authority key identifier: BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
Certificate issuer: /CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Certificate serial: 019E1F7F5DB2868E3FCEF75DF31AE08940D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
Manifest number: 1525
Signing time: Wed 13 May 2026 04:01:41 +0000
Manifest this update: Wed 13 May 2026 04:01:41 +0000
Manifest next update: Thu 14 May 2026 04:01:41 +0000
Files and hashes: 1: 1LEFsPM_H8xQ-_ougrkdy_5rKNU.roa (hash: vqS3TtpAElEQP9C4hD+5YU/4Tth0LEZ2oFRo5KORXho=)
2: LBsEkxwQTYhHk4PbiWkcMNY_VwM.roa (hash: 3yJGlq/sSfsWxxmZU2mXpZuXHcJRJ3V2hkCfCCtg9JI=)
3: uncwHhTWWzo9aG2qwW38SaxIx80.crl (hash: 4EHqH4LRkj4PTzbdO2g8rHKIljOjDtBO78k5iezkuQE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7f:5d:b2:86:8e:3f:ce:f7:5d:f3:1a:e0:89:40:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba77301e14d65b3a3d686daac16dfc49ac48c7cd
Validity
Not Before: May 13 04:01:41 2026 GMT
Not After : May 14 04:01:41 2026 GMT
Subject: CN=96888742bb15018aa69ef77430b98f2aca5437d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:d2:98:ab:be:b5:41:62:ce:5b:ad:7c:e9:c1:
8c:d3:df:3c:c5:f2:a7:21:b5:a2:b4:bd:74:2e:71:
df:ff:46:04:c2:0e:f1:84:20:79:0f:22:3e:74:d0:
06:af:9e:ef:51:c6:d0:94:d1:46:16:7f:b2:dd:95:
00:19:8f:18:7a:d3:28:ee:31:f0:cc:37:79:6a:de:
46:80:02:3c:e6:7e:af:b5:d8:d3:70:79:09:92:4c:
40:74:39:c9:7b:71:df:76:7e:e0:69:48:58:d2:cd:
43:d1:f9:24:45:d3:f4:4a:7d:11:47:e4:9a:83:49:
93:df:85:10:5f:ad:36:45:b2:e4:be:42:91:68:f7:
d5:b3:d1:15:c0:17:29:c5:a5:60:bd:fd:11:39:95:
70:a4:cc:cb:a4:0f:af:65:2d:6c:99:85:66:90:22:
18:57:a3:c2:1e:57:40:ca:11:ec:1a:63:37:54:e2:
3b:5c:9c:8a:68:3a:ab:5d:27:47:a3:cd:8f:46:f3:
44:8d:ef:81:99:de:f1:f3:0b:66:63:25:20:83:51:
0e:72:42:0d:19:36:0a:00:49:da:4c:08:33:a3:20:
84:3a:35:a9:bd:07:cb:bf:11:98:08:89:f0:95:25:
dc:74:72:57:c5:90:bc:91:46:5f:f7:aa:c2:77:fe:
ea:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:88:87:42:BB:15:01:8A:A6:9E:F7:74:30:B9:8F:2A:CA:54:37:D6
X509v3 Authority Key Identifier:
keyid:BA:77:30:1E:14:D6:5B:3A:3D:68:6D:AA:C1:6D:FC:49:AC:48:C7:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uncwHhTWWzo9aG2qwW38SaxIx80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/b7393b-6818-48d3-b081-5c68f6b0b2c7/1/uncwHhTWWzo9aG2qwW38SaxIx80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:96:90:c6:a7:89:57:5f:84:d9:4a:b3:f8:1e:5e:52:7c:b8:
8a:ce:39:a5:7c:3a:6b:86:42:ff:1d:e5:20:82:5a:90:1b:49:
a0:8e:56:66:41:d7:56:e5:1b:b1:0e:6b:06:84:66:0b:b5:f1:
3a:4a:81:04:04:07:d5:d7:4e:47:18:2a:b3:df:84:40:b0:26:
5e:63:fe:3d:70:61:ea:ea:b4:e4:a6:47:c8:d8:1c:95:ad:da:
65:7e:c4:f3:70:ef:a7:17:38:cf:87:1c:9a:21:80:fb:3d:95:
0e:cf:8d:7e:80:56:44:67:ca:02:db:b9:36:2c:91:30:04:e2:
85:7b:6b:03:fd:55:36:be:15:cc:d7:07:7a:1d:c6:bc:e0:eb:
99:d7:98:1a:cb:d8:45:b2:b6:28:db:6e:3d:1b:fc:b5:72:36:
04:d6:67:3c:6d:1b:74:15:8a:e1:9a:8a:d6:e9:13:b9:78:ab:
52:a0:2a:cb:2b:87:8b:38:c7:d1:e9:b6:d6:e7:e6:83:17:16:
32:32:c0:9b:d9:34:81:64:af:c0:5d:74:ea:5b:34:4b:c2:74:
6a:47:73:0e:b5:0d:fa:52:81:f5:e8:3f:8a:1c:01:f6:c0:60:
d6:28:93:f3:b4:8a:b3:26:91:20:6e:f9:59:85:37:f8:7e:d2:
31:a6:95:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:25:46 2026 by rpki-client