Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
File: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft (raw, json)
Hash identifier: Lu9eEqEJRMlObbNutJQc6J3mAX7EdC+puouJR0MsA6U=
Subject key identifier: EE:C1:8D:73:91:6A:00:03:C2:07:C4:B0:E0:BC:66:BF:69:14:05:E6
Authority key identifier: BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
Certificate issuer: /CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Certificate serial: 019F9022BE74E9BABEB0E4D2FA61272EE3BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
Manifest number: 10EE
Signing time: Thu 23 Jul 2026 18:00:23 +0000
Manifest this update: Thu 23 Jul 2026 18:00:23 +0000
Manifest next update: Fri 24 Jul 2026 18:00:23 +0000
Files and hashes: 1: 3xkUgPDW1_nU5u-zQWPWFuXblOU.roa (hash: TwymWVxNW7YipwcwZomXLwsBqGn5JSf6tMGWjIIvIuA=)
2: biwapYjW-yR38S3KZARQ10moe30.roa (hash: 1QN2loKj68piSOW4bamGYfAlPoY1h07q4+Z8Ry6dkfo=)
3: isbgVHj3TmGYN0uwFkd2CdHyHMU.roa (hash: QwGaFwSh5hfuRjoHH0+UtDhSsDuuueUvGza6DS4Ifsg=)
4: uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl (hash: vS8MigN/e+z/5JaWFD2k0lROas8pMCdwKyg6To9q+rM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:22:be:74:e9:ba:be:b0:e4:d2:fa:61:27:2e:e3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8861e17ebed57950ff32c7b377fc430413dbe4
Validity
Not Before: Jul 23 18:00:23 2026 GMT
Not After : Jul 24 18:00:23 2026 GMT
Subject: CN=eec18d73916a0003c207c4b0e0bc66bf691405e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:92:18:a0:b7:4a:75:67:ef:fc:13:55:2d:b9:
68:0d:0c:e6:4f:3f:ea:14:f8:5c:ba:1e:0a:77:fe:
f2:a8:92:91:72:4e:66:9e:0b:a8:c8:2f:c5:fc:ec:
9a:cf:ad:a9:ca:43:dc:b6:58:25:13:76:d5:c4:07:
9a:f5:57:ca:0a:31:3f:40:c4:8a:9d:11:2a:9c:fc:
f4:0e:6d:71:21:cc:4d:1b:0b:1f:e3:24:2f:8c:3a:
e0:3f:00:c8:89:a6:85:64:65:9a:7f:d0:8f:0e:a6:
e9:89:b1:f9:c5:fe:10:d1:3e:51:d5:84:1e:66:52:
01:58:97:54:61:8e:b6:92:25:94:77:20:c3:1f:a1:
e7:b5:7d:db:91:08:7a:c6:f7:2e:40:f7:08:54:00:
c7:9e:c1:40:52:75:5c:de:53:68:37:68:6c:7c:a5:
bd:2f:5d:65:96:15:eb:2c:d5:4a:98:8d:95:d5:1b:
97:3a:1d:3a:a0:38:1b:61:77:30:c5:4a:32:69:9b:
9f:9c:2b:ed:27:38:78:4b:d3:e7:3f:40:04:fd:72:
dd:72:66:49:86:f5:5e:7b:91:26:d8:57:4c:ef:88:
fd:47:fd:6f:44:08:8e:53:be:ee:c8:b6:35:3c:46:
dd:cc:71:8f:37:72:15:fa:ff:ab:72:ba:c4:03:86:
d0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:C1:8D:73:91:6A:00:03:C2:07:C4:B0:E0:BC:66:BF:69:14:05:E6
X509v3 Authority Key Identifier:
keyid:BA:88:61:E1:7E:BE:D5:79:50:FF:32:C7:B3:77:FC:43:04:13:DB:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/10d153-c3c3-4011-97cf-10fdca385ea4/1/uohh4X6-1XlQ_zLHs3f8QwQT2-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:8a:5c:6f:40:cd:a6:b9:fc:de:67:b7:9d:76:c6:43:cd:07:
5b:66:5c:30:e1:88:b1:94:ee:91:c6:38:51:c6:e7:46:5b:90:
0a:f8:5b:a7:43:11:80:92:13:20:43:f5:69:67:57:80:8d:f5:
16:4d:06:7f:97:bc:2e:37:7e:5a:c3:00:1d:8e:a9:de:98:c1:
ca:9b:ea:d9:fe:d4:59:87:f3:28:e7:fe:4c:93:73:cf:98:9a:
d8:83:f0:b2:ef:6c:30:3f:be:13:12:f8:80:00:e2:69:c6:0f:
85:0e:f2:2c:75:fe:90:e4:40:9a:12:91:22:b0:4f:42:7b:3e:
ad:41:04:63:cc:72:03:bd:78:7b:a3:ff:2d:4a:02:d3:e9:7c:
e1:90:a7:9a:be:4f:87:7b:84:84:5d:e9:66:10:a1:52:46:39:
9b:b7:3c:51:6f:82:0c:ab:b3:cb:6a:b1:2a:49:3f:e7:72:bb:
44:ec:84:84:23:fe:9a:32:30:d9:e4:67:e5:69:dd:40:df:12:
db:f5:be:54:9f:62:34:d0:47:1f:98:05:c7:32:5c:22:45:ea:
c2:82:af:ae:ff:db:b8:a3:53:83:b0:0c:b3:5a:41:db:fb:50:
cf:7e:be:cc:50:cb:7a:a5:a6:77:f9:b8:e2:9a:07:0c:d7:6e:
03:00:cd:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:31:16 2026 by rpki-client