Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: xkc0MI48Z/5QnmjvvxP7RHIzIxL/cTMvBz1f3DCsUNM=
Subject key identifier: A3:73:6A:63:FA:C8:30:20:93:67:40:77:4E:1C:E5:96:D8:01:A6:78
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019F92B69C0BEE87AA6CB0E12E3B3FD9F5CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 0960
Signing time: Fri 24 Jul 2026 06:01:08 +0000
Manifest this update: Fri 24 Jul 2026 06:01:08 +0000
Manifest next update: Sat 25 Jul 2026 06:01:08 +0000
Files and hashes: 1: _E-18Yix5OeOjpkpq4btG5ylqEQ.roa (hash: G5MMNAQN+PyBy79Pw9SL7XUT08jrMuESj9HjH5BbLWA=)
2: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
3: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: aPRDpRZyBYkYt4E0G6UEPBQMC9byvdJP4BWWdnunDLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:9c:0b:ee:87:aa:6c:b0:e1:2e:3b:3f:d9:f5:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Jul 24 06:01:08 2026 GMT
Not After : Jul 25 06:01:08 2026 GMT
Subject: CN=a3736a63fac83020936740774e1ce596d801a678
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3a:a7:a1:1a:63:17:0f:dd:30:2f:7a:4e:a6:
d9:2a:d7:e8:2e:7e:90:41:70:5f:15:4c:cb:a0:93:
2f:69:b5:2b:60:fc:36:ce:20:65:31:a5:9b:bf:48:
87:99:d7:2f:19:11:f6:fb:ba:a7:15:53:01:30:88:
d0:31:14:a4:82:0d:ff:25:f0:3e:e1:80:0c:10:77:
9e:58:65:0a:9d:3a:c5:66:72:4f:5b:5b:fb:21:ec:
12:bc:7d:4b:f8:89:d2:d1:ce:1b:42:18:6c:fa:f7:
85:8d:5b:77:14:6e:e8:81:67:41:a6:03:3d:6e:c0:
37:b1:04:7c:fe:8f:ba:0a:a5:87:86:ba:ca:c9:dd:
47:4a:48:8e:4c:0c:af:dd:52:d4:0b:6f:e7:e2:67:
35:89:16:8f:b6:39:6d:de:3a:7d:b6:a0:b9:82:e0:
a2:46:34:45:bd:73:f5:ff:ec:b3:63:8c:d6:8d:bd:
d9:91:e8:70:9b:97:7e:3d:ed:5d:68:45:71:3d:4b:
2f:fe:7b:8b:54:a7:31:29:e5:ff:4c:e4:95:8e:a7:
50:ef:11:75:94:ec:2a:92:08:d0:1a:0e:55:58:c9:
d7:6e:22:b4:3e:14:db:a5:27:82:37:a8:0f:14:03:
95:c7:49:71:21:aa:fb:d0:1a:2a:48:a5:6f:ac:0b:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:73:6A:63:FA:C8:30:20:93:67:40:77:4E:1C:E5:96:D8:01:A6:78
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:38:07:20:ae:eb:11:3f:2f:9c:0d:80:41:7c:b6:c2:ec:17:
df:0a:ee:e3:77:a8:94:75:73:67:42:06:1c:d5:9f:bc:ec:06:
1d:3f:9d:89:66:c0:db:70:42:88:6f:8e:6b:1c:96:fb:21:93:
94:ab:02:41:f1:f2:98:88:cb:27:55:4b:c3:53:0e:29:fc:d4:
ea:df:20:a7:eb:00:7b:d1:42:aa:06:da:cf:18:b8:c9:ac:e2:
65:30:4a:ef:f6:c2:8f:f4:46:de:24:1d:16:0c:5a:86:f8:5e:
14:44:7f:ca:74:da:8f:ac:7f:81:30:1b:0f:5b:4d:65:86:c6:
50:7a:6d:c8:38:44:e5:44:4a:11:1e:1f:a5:46:67:51:2f:06:
05:34:0d:75:a9:71:e6:cc:2d:62:17:35:a9:e8:56:72:d7:80:
a7:98:44:17:bb:0c:4e:fc:58:6c:17:9e:b6:bf:e2:fb:b8:3e:
d5:2e:35:09:39:d4:ec:94:7a:ad:70:b4:e8:93:69:9b:b0:44:
9d:fc:12:31:73:13:26:78:d6:7f:ba:a5:5b:85:cd:69:35:d0:
bd:7a:9e:4c:4e:2a:bd:5b:83:dc:de:db:6d:34:f0:53:5c:0b:
09:cc:bc:c1:fd:a5:b5:9b:a2:79:df:59:a5:d0:07:45:ef:d0:
8f:78:4f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:15:26 2026 by rpki-client