Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: nogr36hT5yKlxzsAUb3pUXlyBNSE6WLPbf5fDc+YQZQ=
Subject key identifier: 0F:9C:3D:56:D0:50:6F:94:60:47:46:D5:F5:9D:1A:2E:57:03:30:DF
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 019F9248097FC290404501C882C4E9DB6259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0DCD
Signing time: Fri 24 Jul 2026 04:00:22 +0000
Manifest this update: Fri 24 Jul 2026 04:00:22 +0000
Manifest next update: Sat 25 Jul 2026 04:00:22 +0000
Files and hashes: 1: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (hash: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw=)
2: Bryd42xc20l8yGYzsCePWUyIRpQ.roa (hash: SfEAMcqg1lAI6lIUE6EnsEoR1LWkzVlNk7fPcXSOd1o=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: 9vSXdIrvu5dFnW//ioZgomixMkuIlFkd2wBgQyrqmpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:09:7f:c2:90:40:45:01:c8:82:c4:e9:db:62:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Jul 24 04:00:22 2026 GMT
Not After : Jul 25 04:00:22 2026 GMT
Subject: CN=0f9c3d56d0506f94604746d5f59d1a2e570330df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:7f:4c:63:32:32:59:4e:8a:d3:34:07:ac:4b:
a7:5d:d0:65:a9:28:f7:23:ff:2a:3b:ca:23:7f:fe:
99:f8:d9:89:1c:c5:35:95:e8:9c:0c:ba:61:cc:f9:
40:1c:92:88:29:a0:e0:21:47:1f:6a:cb:12:e5:e3:
51:94:b4:db:c7:f4:c1:3d:d6:91:d2:56:6b:fe:22:
20:71:86:b7:37:58:48:da:f9:a9:45:a3:c1:82:6d:
b5:e9:ab:1e:85:7e:ca:3d:0c:75:ed:a8:42:ee:41:
e6:60:a4:38:64:57:e8:03:27:0a:3e:43:ea:1d:21:
5f:d3:46:4a:52:e0:bd:02:58:9d:c2:fa:4b:01:e1:
0f:fe:6c:b2:01:f2:88:cd:1b:bf:64:2e:3b:e2:39:
7e:bd:5f:cd:03:97:f7:55:97:c5:85:d1:d6:5d:15:
8d:0f:5b:56:16:09:a8:4d:9a:dd:fe:86:0e:d2:11:
2d:2f:fc:99:69:6d:70:31:2c:2b:cd:4c:2d:c8:58:
6a:70:73:a4:61:5f:bc:e7:bf:93:c8:d4:71:93:2b:
b4:bc:7f:37:0d:27:d4:2c:d4:1b:7b:e9:27:89:78:
48:19:73:58:03:c4:46:c5:8b:fc:a1:e8:cb:63:48:
8d:40:1d:41:10:80:aa:c4:c0:8d:2d:a6:cc:db:24:
e4:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:3D:56:D0:50:6F:94:60:47:46:D5:F5:9D:1A:2E:57:03:30:DF
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:86:9b:0d:df:91:c1:59:aa:20:c3:dc:9a:ea:6c:08:0a:c4:
72:59:8a:fb:6c:62:ee:ff:dd:63:e3:94:9c:ef:cf:73:c6:94:
91:ac:95:4b:ef:77:29:57:9b:fa:33:26:ca:2a:f8:32:d1:45:
bc:8d:a6:d2:c8:7c:37:99:c3:1a:6b:01:88:48:38:7c:b5:41:
97:eb:48:69:be:6c:c9:21:96:1e:f2:19:75:05:7d:1b:ae:ec:
46:02:77:f3:95:c0:e6:cf:28:31:23:3c:fb:18:4a:0c:19:f7:
47:fa:00:44:41:8f:ee:73:cf:f2:44:44:1a:85:50:d0:d4:a6:
39:ee:0f:7e:0b:c7:00:2f:70:f0:7e:06:a4:04:e2:8a:31:e4:
7f:91:bd:7e:67:f9:47:4b:87:24:06:c7:b8:96:36:cf:61:ea:
0c:7d:b8:71:1c:21:4d:bd:c4:e6:2f:4a:f4:3e:82:64:7c:fc:
64:88:34:e3:4e:d4:a8:93:c3:15:11:c0:af:a9:88:7d:ae:e4:
f1:73:d1:f3:1e:3d:ac:79:e6:14:56:6c:01:80:47:4c:f8:08:
dd:03:47:28:eb:8e:6f:f8:ba:18:21:b9:9f:e0:1a:3c:dd:83:
8f:fe:07:6c:db:e5:63:56:d6:54:5b:62:e8:86:aa:c4:19:ba:
d6:fa:41:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:08:32 2026 by rpki-client