Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
File: uHt2aWhxYpblu6C86DhWrnFluLg.mft (raw, json)
Hash identifier: GPaeDsfY7DQrH7BnbKtXglCo6P9ZB+JrChccQYsbsls=
Subject key identifier: A8:40:37:32:79:FA:D1:10:51:4D:4F:5B:9A:1B:86:00:8E:1D:A3:A2
Authority key identifier: B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
Certificate issuer: /CN=b87b766968716296e5bba0bce83856ae7165b8b8
Certificate serial: 019F8F7DD0D4C49189E42843FB1E16286A13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
Manifest number: 19CD
Signing time: Thu 23 Jul 2026 15:00:14 +0000
Manifest this update: Thu 23 Jul 2026 15:00:14 +0000
Manifest next update: Fri 24 Jul 2026 15:00:14 +0000
Files and hashes: 1: _9wTHX3cjznzX1cGZZv1QLly23A.roa (hash: sMqmwh/SXLdaeDaF/VXKg3vRCCuPQk7by10Th5+s01k=)
2: e7AWg6gMHyJzfFZoLv-TywEgAls.roa (hash: 2GqfqgPDlKIc3f3uKLBeBJ8FyT92S1ZVg6GX/uLDIAM=)
3: uHt2aWhxYpblu6C86DhWrnFluLg.crl (hash: jFXPDbg43tZD3dBweGWMT8dlSChtPUi+a4iNus+tZo0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7d:d0:d4:c4:91:89:e4:28:43:fb:1e:16:28:6a:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87b766968716296e5bba0bce83856ae7165b8b8
Validity
Not Before: Jul 23 15:00:14 2026 GMT
Not After : Jul 24 15:00:14 2026 GMT
Subject: CN=a840373279fad110514d4f5b9a1b86008e1da3a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:33:ef:30:c4:e6:25:b2:f8:e8:93:47:cd:2e:
12:4e:b2:31:4e:39:54:1b:46:a7:93:e4:c3:84:b4:
dc:99:22:f4:0c:21:c6:c2:f9:ac:90:0a:26:84:02:
21:98:37:28:ba:7f:fa:45:31:b0:88:06:02:2f:cd:
3d:06:55:5b:d4:58:40:a9:1c:51:16:ac:46:4b:45:
18:52:53:e3:8d:d1:d4:0f:47:c8:8f:bb:91:7d:d8:
05:61:f2:35:ae:ac:f8:8a:4f:7d:85:aa:8c:cf:fa:
de:0b:d2:13:8c:98:9d:f5:ea:8c:9a:b5:b1:f3:ee:
7a:e0:d5:cd:2f:7c:fb:86:85:75:42:e1:94:72:3a:
ac:bb:82:26:66:ad:0b:c2:13:23:a1:48:71:34:7e:
65:61:e7:6e:31:fd:10:f1:45:0d:8e:78:bb:72:43:
3e:a8:92:f0:2b:72:54:08:f0:1e:07:02:02:ec:67:
9f:57:8c:f5:be:97:49:71:15:6a:0d:3f:75:57:54:
96:c5:b7:87:35:a3:f1:7c:5a:18:fa:26:d1:db:2d:
26:91:6c:57:98:62:4d:f2:e0:8f:69:aa:50:14:fe:
2f:8f:d5:bb:1b:1a:e7:01:ae:03:06:a0:51:98:ef:
3f:1a:53:14:3f:66:61:8e:ac:83:c1:24:9a:6d:99:
38:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:40:37:32:79:FA:D1:10:51:4D:4F:5B:9A:1B:86:00:8E:1D:A3:A2
X509v3 Authority Key Identifier:
keyid:B8:7B:76:69:68:71:62:96:E5:BB:A0:BC:E8:38:56:AE:71:65:B8:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uHt2aWhxYpblu6C86DhWrnFluLg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/a3ede6-bc31-4d00-925c-3d612f324996/1/uHt2aWhxYpblu6C86DhWrnFluLg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:38:c9:7e:d5:b8:e0:ac:34:3b:49:55:85:16:55:85:20:61:
1a:37:a4:bd:f4:c2:6a:f7:df:21:7e:96:1a:b1:9e:7f:e0:0b:
1d:69:e4:68:08:97:73:65:d7:12:5d:86:6e:70:d7:4f:64:ea:
46:81:85:e7:04:e3:1a:a2:9b:aa:d5:88:3c:84:5e:16:63:fb:
2a:1b:93:52:7b:1e:53:7c:3a:b1:c0:49:65:ad:75:7c:9d:d5:
ca:32:f7:f8:95:f3:74:63:13:c8:46:1e:5d:76:32:a6:77:a2:
bb:7a:9c:6a:ce:c1:5b:5a:5b:f9:d8:22:eb:0e:4c:cb:50:b6:
53:0b:3b:d7:8e:20:28:0f:ec:fd:76:90:ca:fd:59:cb:c2:98:
be:9d:89:d5:bf:fe:d5:0e:8d:e5:db:e3:37:f8:26:63:37:89:
55:90:42:ef:ba:3d:bf:72:21:d8:27:c4:7a:3e:a6:e5:cf:ac:
a3:ea:35:1e:07:66:d3:1a:4d:9f:21:55:6d:3c:b3:e9:f6:1e:
bd:2b:08:0f:50:3c:84:1f:d2:32:98:5c:78:60:34:28:ff:54:
aa:23:0b:f2:8b:49:74:d9:17:08:a4:27:98:90:7e:3a:4b:bd:
40:a2:4d:9f:b6:1d:cb:e7:c9:b7:59:f8:43:8d:5d:5a:4a:f6:
4c:b5:2b:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:11:52 2026 by rpki-client