Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: rU0bAK2XFd3JaPv3lTdaPVQYMyH86fP/86wBEra/VYY=
Subject key identifier: 1B:57:58:7A:D8:2D:B8:14:76:EA:EE:F7:17:87:56:77:DC:F2:36:F8
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019F9248CDCBFC877B978350EE384F4722EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 1722
Signing time: Fri 24 Jul 2026 04:01:12 +0000
Manifest this update: Fri 24 Jul 2026 04:01:12 +0000
Manifest next update: Sat 25 Jul 2026 04:01:12 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: IFE1i4s6SDzXoKE7x3MnOwUWku9Mkp47ghxZXVheLfM=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:cd:cb:fc:87:7b:97:83:50:ee:38:4f:47:22:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Jul 24 04:01:12 2026 GMT
Not After : Jul 25 04:01:12 2026 GMT
Subject: CN=1b57587ad82db81476eaeef717875677dcf236f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:d8:3d:c2:20:28:23:75:97:b7:1a:56:69:
55:de:19:3b:db:1f:cc:a7:c6:5d:f6:3e:4b:05:fc:
c8:ae:db:35:dd:46:66:45:f2:35:87:ea:61:df:27:
f1:c2:42:5b:50:1a:04:c9:26:5e:64:5f:de:0c:a0:
59:51:29:91:40:f9:31:08:4a:b4:27:f8:af:53:29:
9f:ed:04:f1:47:56:ab:1c:32:ca:55:2a:5f:ac:0e:
11:fe:cb:b2:2d:4e:15:4b:82:48:7a:3b:46:27:8e:
97:f1:13:94:11:b3:d2:cb:ee:94:20:c8:03:54:46:
de:5f:32:83:b9:5c:39:52:b2:69:58:23:57:2f:59:
d3:04:d6:6f:62:c3:7a:5d:62:31:c1:3d:7e:51:ec:
2f:aa:fe:54:67:30:2e:12:de:c0:f0:ad:68:c8:2b:
2b:a3:0e:9e:c3:05:2e:bb:f5:a7:d4:4f:84:c3:91:
ba:1e:29:88:5c:77:9e:01:84:5f:bc:9a:83:b5:00:
b3:ba:84:63:2a:1f:58:4d:7d:7d:74:ef:2d:18:f6:
22:83:19:2b:98:53:28:3b:12:d0:e2:a5:19:b1:25:
48:c9:4b:b0:16:9b:11:e1:f0:24:6d:27:77:26:c5:
96:fe:ef:6f:ac:77:e7:b1:2e:11:87:8f:f9:78:00:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:57:58:7A:D8:2D:B8:14:76:EA:EE:F7:17:87:56:77:DC:F2:36:F8
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:67:8a:fa:d6:28:a2:8f:0e:a4:03:4d:3a:90:c0:a5:92:d9:
cc:85:b7:9e:87:c8:03:f7:36:df:73:b0:f2:09:d7:05:25:2c:
b4:d9:ae:eb:7a:e9:dc:37:cb:07:b3:cd:04:6e:d6:31:b5:18:
3c:3c:b5:83:c0:ae:bc:58:fc:a3:70:93:14:e8:77:bc:cd:03:
b0:11:1e:82:85:52:fb:20:03:51:78:84:be:c2:95:63:48:9c:
d5:7c:74:b5:5b:d8:44:2a:34:18:2d:ca:44:81:af:44:68:4a:
2a:6d:04:69:5a:d2:57:5b:e1:c3:8d:8d:b8:51:04:30:69:db:
c9:9e:60:bc:54:7e:a1:8f:70:74:aa:5a:0f:42:18:8b:10:3a:
95:a0:8e:8c:3b:5f:8b:a3:cb:7e:32:34:11:d3:b7:ba:7e:8d:
84:d1:26:29:12:6b:47:47:97:98:2b:75:17:86:e8:3b:0c:39:
57:88:21:2d:9c:f4:07:fb:fe:dd:fd:67:1c:0d:55:67:d7:21:
2a:dd:8d:66:fb:08:6c:23:ff:d0:8e:23:6b:c2:62:f9:d0:aa:
83:ee:33:c4:d9:68:02:77:af:22:6f:03:42:b5:bd:8a:04:36:
e2:28:00:cf:58:a8:4a:0b:b8:2b:c1:dd:3d:aa:3b:f1:3b:9d:
cd:16:72:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SSM3L/Id7l4NQ7jhPRyLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NDcyYjE0NzNiYzc4MWI3MDQ0MDMxNWM4M2QxMTljOGFi
Yzg2ZmMwHhcNMjYwNzI0MDQwMTEyWhcNMjYwNzI1MDQwMTEyWjAzMTEwLwYDVQQD
EygxYjU3NTg3YWQ4MmRiODE0NzZlYWVlZjcxNzg3NTY3N2RjZjIzNmY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAserYPcIgKCN1l7caVmlV3hk72x/M
p8Zd9j5LBfzIrts13UZmRfI1h+ph3yfxwkJbUBoEySZeZF/eDKBZUSmRQPkxCEq0
J/ivUymf7QTxR1arHDLKVSpfrA4R/suyLU4VS4JIejtGJ46X8ROUEbPSy+6UIMgD
VEbeXzKDuVw5UrJpWCNXL1nTBNZvYsN6XWIxwT1+Uewvqv5UZzAuEt7A8K1oyCsr
ow6ewwUuu/Wn1E+Ew5G6HimIXHeeAYRfvJqDtQCzuoRjKh9YTX19dO8tGPYigxkr
mFMoOxLQ4qUZsSVIyUuwFpsR4fAkbSd3JsWW/u9vrHfnsS4Rh4/5eAC/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtXWHrYLbgUduru9xeHVnfc8jb4MB8GA1UdIwQY
MBaAFKVHKxRzvHgbcEQDFcg9EZyKvIb8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQt
YjE1NjViMjU1ODU0LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS8zMDExMmYtMGU5ZC00ZmM4LWI4NTQtYjE1NjViMjU1ODU0
LzEvcFVjckZITzhlQnR3UkFNVnlEMFJuSXE4aHZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmeK+tYo
oo8OpANNOpDApZLZzIW3nofIA/c233Ow8gnXBSUstNmu63rp3DfLB7PNBG7WMbUY
PDy1g8CuvFj8o3CTFOh3vM0DsBEegoVS+yADUXiEvsKVY0ic1Xx0tVvYRCo0GC3K
RIGvRGhKKm0EaVrSV1vhw42NuFEEMGnbyZ5gvFR+oY9wdKpaD0IYixA6laCOjDtf
i6PLfjI0EdO3un6NhNEmKRJrR0eXmCt1F4boOww5V4ghLZz0B/v+3f1nHA1VZ9ch
Kt2NZvsIbCP/0I4ja8Ji+dCqg+4zxNloAnevIm8DQrW9igQ24igAz1ioSgu4K8Hd
Pao78TudzRZyVg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:40 2026 by rpki-client