Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: Sf3ZX1Ky0JIb5uA/ofaAldGL6dx2lYEJ4JmlDG+y17w=
Subject key identifier: DD:F9:BB:A1:E0:55:B7:82:8D:52:95:AF:58:8D:E1:0F:04:FB:37:6C
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019F9436EF3C74E64A7AADC3E653D337383C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 1723
Signing time: Fri 24 Jul 2026 13:00:55 +0000
Manifest this update: Fri 24 Jul 2026 13:00:55 +0000
Manifest next update: Sat 25 Jul 2026 13:00:55 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: eGGPmsk2SHWke+jCbAfw9naLxxI0o6LP+lzQS7fDHBI=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:36:ef:3c:74:e6:4a:7a:ad:c3:e6:53:d3:37:38:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Jul 24 13:00:55 2026 GMT
Not After : Jul 25 13:00:55 2026 GMT
Subject: CN=ddf9bba1e055b7828d5295af588de10f04fb376c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:03:04:c7:b8:18:5b:28:f2:6d:39:6a:de:87:
2e:fe:16:9d:36:45:98:04:f2:d6:f4:2a:01:f5:6e:
68:ab:63:48:11:c7:a9:a5:97:81:2f:ef:72:62:d9:
50:1a:35:cc:19:73:e4:99:11:0d:1f:5a:8d:77:88:
ea:a5:2b:ef:19:d5:3e:11:0b:48:ab:a3:5e:e2:cd:
96:66:14:5b:dc:0c:50:7d:66:ed:4c:55:6c:8b:84:
0b:21:5b:0e:b4:a3:30:d9:f2:7b:e3:0b:95:9b:8a:
8f:6d:ac:f8:71:f0:d6:ec:31:de:36:4a:86:3a:c0:
4d:c2:f4:55:b3:2c:60:a0:72:8e:3f:cf:66:8a:cc:
9e:6a:08:23:34:61:18:9f:02:9f:d1:44:06:1a:be:
95:93:b2:c7:34:4c:af:78:a3:0c:98:35:b4:8f:e1:
db:cc:2d:76:9b:b7:62:c3:c8:44:d5:a8:f8:11:54:
9d:45:0b:90:ef:80:2c:3b:b2:1d:05:f9:80:33:d2:
2e:04:82:c7:d3:a3:60:c9:16:5e:5c:81:db:b0:e0:
c7:c9:08:4c:f5:fd:dc:37:42:68:73:fb:45:90:f7:
66:36:bc:e5:cd:ce:8c:9d:d5:d3:e7:27:3f:26:a8:
a0:8e:2c:f9:b8:a5:c5:21:03:f9:42:f0:d7:f8:ca:
58:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:F9:BB:A1:E0:55:B7:82:8D:52:95:AF:58:8D:E1:0F:04:FB:37:6C
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:1a:24:8b:d2:7b:b3:c2:5c:c1:e3:e3:dc:f9:83:90:f2:43:
5e:c7:73:c8:7e:d7:a1:b0:5d:de:13:b0:c5:16:24:bf:f3:e4:
bd:be:e8:8c:54:d1:3d:4b:5b:12:3c:b5:ed:28:64:1a:6b:7e:
0d:27:c2:78:ec:57:45:32:7d:44:d6:41:06:70:73:c6:16:56:
f3:7d:ac:3f:af:c4:db:a3:92:4c:7a:96:83:d3:9e:b3:63:7c:
cb:8b:b3:61:81:46:52:77:55:d4:93:ad:e1:58:ef:2e:6c:65:
ab:1d:8d:52:e6:fb:48:f8:2e:f5:a0:95:71:b9:ca:27:a6:c9:
7d:66:a2:99:92:00:1a:09:db:e9:0a:55:64:fc:99:f9:78:fa:
61:25:73:7b:16:dd:d3:96:fe:ed:5f:9b:c3:0d:54:55:70:f1:
6f:a5:3e:d5:8c:25:52:66:27:d4:2e:c8:3a:42:2d:0c:cd:d3:
48:f5:69:23:db:12:06:64:82:ff:1e:e7:f6:eb:63:00:2b:76:
d8:af:f3:e1:5e:a5:6a:86:33:24:f2:1c:15:47:a6:e3:d9:fe:
87:2b:1c:6b:94:47:04:68:db:3b:64:b6:a5:3d:93:9c:e4:f6:
fb:11:7e:ba:10:8d:ed:1f:19:c3:bd:cc:bb:06:da:81:75:41:
f8:10:c3:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:06:27 2026 by rpki-client