Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: r9UgRzN2w/q1gx1nqdHo9cV0R+yz3QTKuWb0YxjeCGU=
Subject key identifier: 3D:ED:67:1F:BF:FB:95:0E:BA:BD:DB:8F:66:4A:90:00:1F:DC:6F:14
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 019F951285F7EA37F968E2BDF4AD91AD4C80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 17D3
Signing time: Fri 24 Jul 2026 17:00:46 +0000
Manifest this update: Fri 24 Jul 2026 17:00:46 +0000
Manifest next update: Sat 25 Jul 2026 17:00:46 +0000
Files and hashes: 1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: O2O2SmPRkhpFsHADq2NITXOsDNSrfsiIymipyLXiR/Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:12:85:f7:ea:37:f9:68:e2:bd:f4:ad:91:ad:4c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Jul 24 17:00:46 2026 GMT
Not After : Jul 25 17:00:46 2026 GMT
Subject: CN=3ded671fbffb950ebabddb8f664a90001fdc6f14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ce:6e:64:47:22:07:3d:1f:4f:f5:55:62:6f:
47:d1:86:ad:c6:4a:31:d2:2c:e4:82:f3:01:5e:c2:
c2:9d:12:21:91:64:8f:e9:1e:45:4a:46:ba:4f:28:
c8:0f:ee:9b:af:07:77:87:78:80:3e:47:f9:eb:63:
95:c1:1d:71:66:65:7b:bd:09:f3:19:c8:0d:54:55:
5a:f4:b5:03:d0:9e:02:ca:82:aa:64:46:a2:66:a1:
ca:45:8f:65:cd:3c:3d:2f:9a:be:ff:97:e3:4a:49:
06:0e:78:1d:c4:70:af:4f:28:aa:e2:2b:da:6d:f4:
73:27:2f:63:8f:99:e1:59:35:54:af:da:92:9f:83:
18:88:b8:e6:1f:85:73:51:03:85:3a:b9:12:0a:34:
6c:cd:53:c4:a9:a3:8a:83:d4:db:75:96:b9:b6:b2:
79:ab:f7:d0:66:3a:b6:f6:7f:78:01:49:ff:34:42:
7d:3d:49:95:2b:0b:8e:72:66:97:a6:42:93:94:28:
8e:53:f5:11:05:06:91:0c:2a:4c:7d:a9:4c:88:95:
5a:7d:08:b8:67:52:b5:a1:50:e3:c1:14:57:cf:d4:
21:79:c1:50:5e:62:1c:cf:9a:01:d2:31:77:14:db:
87:63:85:1a:2a:b7:9e:6f:b0:ac:bd:64:07:99:ee:
b2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:ED:67:1F:BF:FB:95:0E:BA:BD:DB:8F:66:4A:90:00:1F:DC:6F:14
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:c0:31:2b:35:9f:cf:7f:a2:86:5b:01:da:2e:44:91:ca:1b:
d4:d5:e4:39:bb:3a:e5:44:5a:0f:7d:63:f1:b1:9a:0b:03:45:
03:ad:a4:65:0a:1c:fd:1e:4d:35:11:d4:3f:2d:1b:bf:7e:d7:
60:b2:d3:79:82:b0:1b:97:71:e5:1f:15:4f:9c:53:13:16:bb:
a4:f2:c0:cd:1b:fc:99:07:38:f1:11:cb:7b:41:d3:7c:3c:86:
0a:f0:b7:f9:eb:1b:f3:6d:93:96:f7:50:f2:8f:bb:b5:f5:97:
3d:e0:a8:b3:6b:d1:7f:44:d2:b3:2d:ad:15:bf:0f:c8:3d:f4:
83:b5:cc:9f:57:04:1b:10:58:90:fd:22:70:30:c2:ef:f3:3e:
a5:42:2a:a1:dd:b5:e2:15:e8:b6:63:82:30:d1:6a:00:f3:0e:
db:3a:9f:5f:35:eb:7a:d2:a1:25:ef:40:64:c1:f8:ad:16:4a:
88:d7:e3:f3:87:a0:8a:7d:6f:92:3d:f9:c1:21:d3:31:ee:86:
17:94:72:56:40:f5:1e:24:0b:dc:13:a8:b2:e6:e7:52:3b:20:
19:ee:69:51:3a:1c:14:22:59:4e:ab:68:c2:83:d8:8c:3b:e4:
38:e4:fa:49:be:d2:d9:a9:06:5b:cf:e5:51:e9:bd:b2:eb:62:
f3:77:9b:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+VEoX36jf5aOK99K2RrUyAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5OTlkZDVhYzAzMjI1ODQ0YjZiNDkwZjkyZjAzNDdjY2Yw
OTY3MDgwHhcNMjYwNzI0MTcwMDQ2WhcNMjYwNzI1MTcwMDQ2WjAzMTEwLwYDVQQD
EygzZGVkNjcxZmJmZmI5NTBlYmFiZGRiOGY2NjRhOTAwMDFmZGM2ZjE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7c5uZEciBz0fT/VVYm9H0Yatxkox
0izkgvMBXsLCnRIhkWSP6R5FSka6TyjID+6brwd3h3iAPkf562OVwR1xZmV7vQnz
GcgNVFVa9LUD0J4CyoKqZEaiZqHKRY9lzTw9L5q+/5fjSkkGDngdxHCvTyiq4iva
bfRzJy9jj5nhWTVUr9qSn4MYiLjmH4VzUQOFOrkSCjRszVPEqaOKg9TbdZa5trJ5
q/fQZjq29n94AUn/NEJ9PUmVKwuOcmaXpkKTlCiOU/URBQaRDCpMfalMiJVafQi4
Z1K1oVDjwRRXz9QhecFQXmIcz5oB0jF3FNuHY4UaKreeb7CsvWQHme6yhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD3tZx+/+5UOur3bj2ZKkAAf3G8UMB8GA1UdIwQY
MBaAFLmZ3VrAMiWES2tJD5LwNHzPCWcIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2Yt
ZmNhYWYyZWYzNjAxLzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9jN2YwNWQtMzVmNS00MTE1LTlmN2YtZmNhYWYyZWYzNjAx
LzEvdVpuZFdzQXlKWVJMYTBrUGt2QTBmTThKWndnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOMAxKzWf
z3+ihlsB2i5Ekcob1NXkObs65URaD31j8bGaCwNFA62kZQoc/R5NNRHUPy0bv37X
YLLTeYKwG5dx5R8VT5xTExa7pPLAzRv8mQc48RHLe0HTfDyGCvC3+esb822TlvdQ
8o+7tfWXPeCos2vRf0TSsy2tFb8PyD30g7XMn1cEGxBYkP0icDDC7/M+pUIqod21
4hXotmOCMNFqAPMO2zqfXzXretKhJe9AZMH4rRZKiNfj84egin1vkj35wSHTMe6G
F5RyVkD1HiQL3BOosubnUjsgGe5pUTocFCJZTqtowoPYjDvkOOT6Sb7S2akGW8/l
Uem9suti83ebVQ==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:25:14 2026 by rpki-client