Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: CX9kf0yqNheIlL5ZCkYqC/LaxEZIAwX6UCIAOLywtEQ=
Subject key identifier: DA:1B:98:CD:12:6C:36:8F:34:BA:3B:3B:06:6A:D4:AD:0C:07:78:85
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019F9323C87ACCAD61AD5B73566C82314FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 110C
Signing time: Fri 24 Jul 2026 08:00:23 +0000
Manifest this update: Fri 24 Jul 2026 08:00:23 +0000
Manifest next update: Sat 25 Jul 2026 08:00:23 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: XC3Np6+sfRlKpoENTYQySX6RUvChwuOR0rI1CPYdhUs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:c8:7a:cc:ad:61:ad:5b:73:56:6c:82:31:4f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: Jul 24 08:00:23 2026 GMT
Not After : Jul 25 08:00:23 2026 GMT
Subject: CN=da1b98cd126c368f34ba3b3b066ad4ad0c077885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c6:20:25:a7:5a:92:a3:3f:61:bf:10:5f:7e:
36:8d:53:8c:12:d0:dc:49:09:c9:0c:fe:48:20:d5:
53:c7:06:9d:5f:1c:92:a8:d7:5c:44:a2:e6:4d:e5:
89:be:b5:8a:e7:c2:87:3f:6b:76:27:db:5e:3b:c9:
87:99:1b:0e:37:7f:59:c8:ef:e9:c1:c5:9e:26:e2:
be:26:b9:db:41:58:da:49:27:66:51:3a:94:ad:9e:
ca:fe:7b:06:a1:a9:e8:bd:15:e7:c6:79:39:77:85:
b0:f8:44:67:a8:ba:e3:0d:d5:23:60:28:af:2d:4f:
2e:a9:62:21:be:3b:d9:48:91:a5:3d:25:29:c7:c1:
b6:62:f7:d0:95:c3:0c:87:70:05:8a:c3:50:30:1c:
05:c9:c3:da:fd:00:5e:b4:c8:63:20:b4:fa:1e:01:
94:65:61:97:ec:1c:ce:a4:82:73:4a:85:e3:3c:70:
48:54:f3:1c:6d:35:87:0c:03:63:44:a5:8b:5d:6e:
33:30:f7:25:47:2b:ee:4c:42:63:b9:7a:e1:f0:ae:
6e:93:b2:88:67:22:da:ed:bd:72:1a:7e:cb:30:6d:
0e:70:9a:fb:13:11:4b:ce:56:62:97:0f:9c:85:2b:
51:e2:41:de:5d:34:64:c9:67:1f:f2:1b:0e:86:48:
eb:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:1B:98:CD:12:6C:36:8F:34:BA:3B:3B:06:6A:D4:AD:0C:07:78:85
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:46:56:ea:3a:7f:13:c9:7b:b5:c4:2d:7e:d8:d6:1b:5e:e4:
09:63:cd:bc:14:8c:bb:a3:17:69:c0:a6:15:7d:f9:96:bc:8e:
0a:6a:9c:08:47:2b:63:e6:34:4c:51:5c:b6:8b:93:72:ac:3a:
0d:78:49:e5:6b:32:c4:f4:ed:ea:aa:4b:8e:e9:f0:c4:8f:62:
6b:2e:91:d1:79:47:02:5f:2c:69:4f:98:b7:3c:2d:e4:28:44:
c5:2a:a9:61:e1:e2:56:0d:2b:17:16:b1:a0:a7:5c:de:b1:fd:
c7:bb:93:82:4f:c0:bb:3c:2f:49:cd:e2:7f:1d:77:86:09:0c:
74:de:a4:19:74:08:af:aa:5d:47:4c:eb:03:fd:ff:3c:3c:b0:
8a:1a:d9:12:44:8d:13:02:3c:62:37:1c:04:c3:d0:7e:08:15:
cc:de:a0:61:19:df:83:d8:6b:1e:b5:15:8b:63:c4:54:9a:6b:
b5:ac:ff:21:89:53:14:4c:fa:2d:37:bc:8e:1b:be:e0:9c:74:
93:20:3f:19:a3:6e:e4:05:ae:d7:e3:7f:7e:df:85:82:5f:24:
be:17:8c:0a:12:72:ed:e3:92:ca:5c:91:ea:15:e1:ef:c2:f2:
ad:99:09:6d:c1:ad:29:6e:c3:dc:2f:15:65:8e:22:ba:61:87:
cc:6e:14:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:18:10 2026 by rpki-client