Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: ilz0ziZY4HGJqmzp8vRGR5BztbDTCVXDtldPgjCkIrs=
Subject key identifier: 79:A7:73:4C:66:CC:24:D3:81:CF:83:E9:A5:CC:11:E8:78:50:99:BE
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 019F916C378AE60A7916A7541CC8DBC64BDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 19CE
Signing time: Fri 24 Jul 2026 00:00:16 +0000
Manifest this update: Fri 24 Jul 2026 00:00:16 +0000
Manifest next update: Sat 25 Jul 2026 00:00:16 +0000
Files and hashes: 1: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
2: e7AWg6gMHyJzfFZoLv-TywEgAls.roa (hash: 2GqfqgPDlKIc3f3uKLBeBJ8FyT92S1ZVg6GX/uLDIAM=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: CetuUGcd7c/3gnY2aY6C/zkHqL7bECY/weTPKBZbMo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:6c:37:8a:e6:0a:79:16:a7:54:1c:c8:db:c6:4b:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Jul 24 00:00:16 2026 GMT
Not After : Jul 25 00:00:16 2026 GMT
Subject: CN=79a7734c66cc24d381cf83e9a5cc11e8785099be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a3:05:22:0e:9d:86:e0:78:e0:6a:65:8c:58:
da:b8:0e:45:48:1b:3f:33:1f:e6:62:56:c8:bf:e8:
91:18:7b:54:37:ee:66:e7:d7:84:0a:bd:70:f5:28:
0d:79:76:d5:fe:71:57:4d:80:dc:c6:50:53:49:21:
b6:39:11:ae:12:da:64:dc:95:19:f8:a6:7f:7a:a2:
c4:4f:dd:0a:91:02:f4:12:73:78:84:77:cd:33:d1:
3d:e3:84:c5:a4:9d:e0:7e:17:16:8f:3e:a7:56:b5:
d3:d4:32:90:12:7b:dd:a4:0f:be:a6:26:be:08:5f:
91:9f:1b:ab:22:75:6a:8b:45:f6:94:a1:3a:5e:d8:
53:50:b5:99:12:dd:fc:69:10:29:83:b9:ca:b8:75:
b0:af:e3:5e:e6:59:27:52:b7:61:99:ad:18:c1:1b:
4f:93:ca:18:8d:4b:44:f8:41:f0:60:fe:35:d1:fe:
fe:53:ef:21:fc:61:5d:7f:97:ba:16:d0:f6:12:f5:
38:12:26:f8:b8:7e:5f:be:c3:8f:38:c8:05:44:cf:
bf:59:60:ad:7e:79:3b:97:b8:3e:0e:f4:5c:64:bc:
3f:41:5f:98:4a:a1:f7:47:fd:d9:d1:c0:e7:a7:5a:
6d:ea:c9:d7:65:7a:02:33:46:f6:2d:af:c9:48:81:
c4:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:A7:73:4C:66:CC:24:D3:81:CF:83:E9:A5:CC:11:E8:78:50:99:BE
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:4c:fd:0c:7e:79:cd:8d:b9:e6:36:98:39:e2:89:ef:97:f3:
05:b0:72:76:b0:fc:56:34:c1:e8:15:fe:63:d0:ab:02:01:0a:
84:60:08:36:4b:f2:a3:61:8d:ef:77:38:47:0e:56:1f:26:0b:
e9:8b:7b:fc:80:38:fa:e0:44:2e:3f:d9:5f:ee:df:e6:fe:4b:
79:54:42:37:42:12:41:34:43:1a:64:28:89:d0:de:d1:25:0d:
6e:1d:5e:7e:65:8b:2d:17:17:97:df:8a:42:e7:f5:87:03:72:
4a:d0:9a:1e:24:b3:79:4f:ac:c6:00:31:75:0e:39:de:d5:df:
92:92:ac:89:a8:78:91:a3:6b:81:5c:23:0c:22:97:d9:ab:b4:
1e:84:f1:24:80:4a:1f:78:69:24:35:31:33:41:ec:63:40:bd:
d9:b3:cc:4c:6c:24:4d:a8:33:b0:d0:3a:13:4c:58:2e:3d:d1:
6e:42:f9:ed:79:a3:52:0a:aa:c5:3b:dc:bd:30:dd:d8:f9:9f:
0b:64:36:8d:58:9d:5f:00:97:78:3f:18:4c:03:8f:4c:28:00:
01:ef:a7:ee:75:bb:04:9a:62:14:6d:2b:cc:bc:a0:d1:50:3f:
32:a8:25:2c:da:37:d1:38:e8:00:69:63:83:6f:a0:17:0c:4b:
a9:63:86:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:16:52 2026 by rpki-client