Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: 6jDRFeV5iaAT4U6PAUdl2JfNS2S4jbgPvxjm7sNG8/U=
Subject key identifier: B3:2A:82:AC:55:BE:34:5E:30:F0:19:12:0F:6A:05:58:3A:DD:A5:9D
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 019F9549D4D9F3FC4BB91C623E468BCCB075
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 1124
Signing time: Fri 24 Jul 2026 18:01:11 +0000
Manifest this update: Fri 24 Jul 2026 18:01:11 +0000
Manifest next update: Sat 25 Jul 2026 18:01:11 +0000
Files and hashes: 1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: 3xKirm2a21KUdFTRY5Pe4OjhI39j3RtRLA4aGQBlY1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:49:d4:d9:f3:fc:4b:b9:1c:62:3e:46:8b:cc:b0:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Jul 24 18:01:11 2026 GMT
Not After : Jul 25 18:01:11 2026 GMT
Subject: CN=b32a82ac55be345e30f019120f6a05583adda59d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:d1:76:07:70:f5:ec:ba:ca:66:96:bc:17:
af:56:46:a8:ce:69:41:97:8c:78:2a:46:88:5a:0f:
26:16:73:2b:b2:8a:97:c0:21:2d:15:7b:da:f8:82:
cd:b0:27:c3:5b:93:64:4e:39:c8:84:49:d7:25:7c:
2d:d4:b9:88:ed:99:c8:1b:7b:1d:fa:d7:19:a4:28:
b3:b4:9f:69:b7:02:74:34:2b:ad:3f:64:49:d0:d6:
89:0e:6f:a1:1e:6c:0e:ca:7c:ec:7d:ab:43:d3:5d:
06:48:5f:c3:84:0d:fb:a5:96:4b:da:b5:9f:4a:5a:
10:07:66:06:a2:26:f9:61:4e:24:89:6e:ba:6c:a8:
97:dd:5d:88:60:eb:d2:d4:e4:67:0f:2d:a6:6e:87:
4a:11:1c:55:61:71:40:fc:fc:c3:9d:5a:09:39:68:
48:5b:c1:24:1d:8a:b0:28:fd:05:64:ad:24:fd:ca:
f4:e4:af:c0:55:8e:ac:7a:2a:c2:14:1b:6f:0c:ef:
8e:36:0e:e0:8b:ba:0c:c5:7f:c7:f8:4f:b4:69:a9:
a7:4a:1d:50:26:55:68:d1:0d:d1:2f:15:cf:2a:f0:
0a:71:42:9d:7c:c6:e9:9e:e1:d8:82:a5:ac:bc:12:
04:22:9c:73:de:85:e7:a7:08:72:28:cd:6c:a0:5a:
3e:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:2A:82:AC:55:BE:34:5E:30:F0:19:12:0F:6A:05:58:3A:DD:A5:9D
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:91:0e:80:84:16:a0:85:9e:1b:37:3d:4b:fe:19:a3:b8:1a:
58:96:8c:83:f7:b6:76:59:69:2b:74:e7:90:43:58:e0:c7:94:
7c:68:47:4b:53:85:1c:94:4d:f9:9c:c9:1a:b9:fc:9f:a7:2d:
75:7b:a9:d2:66:a6:5c:d2:35:c1:a6:2b:69:82:fa:6a:1b:3c:
e8:ce:c9:25:f3:8d:a7:89:d5:79:25:28:fb:a6:2c:a6:e9:28:
e5:0b:4d:1c:3b:97:42:7f:f1:4a:90:12:9e:16:61:68:3c:ce:
ff:c6:b6:c9:92:ad:cc:04:16:07:64:b2:f0:e9:c3:5c:4a:b1:
0e:26:e7:9d:c2:56:1b:61:98:c6:18:d1:7a:66:4a:4f:56:36:
9a:b4:46:7a:12:d7:c5:2a:ec:68:05:f5:0c:b8:4b:04:40:fd:
3e:3a:3d:96:be:d5:3c:49:01:84:43:02:39:19:9b:d3:76:cd:
3e:79:a2:84:4f:80:b3:b2:09:aa:ae:cc:58:26:d0:ba:65:7f:
07:52:83:b2:7a:52:5a:39:99:c9:39:89:c1:3e:90:8f:5a:81:
78:43:98:e3:09:32:98:71:91:f1:a8:56:87:e3:a6:38:64:06:
fa:5e:e3:13:64:22:e8:58:9e:a7:e9:79:78:c5:3d:72:bc:66:
c0:3d:16:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:10:53 2026 by rpki-client