Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
File: uQMr2xKMhuALIcd5WagBHEDQZQw.mft (raw, json)
Hash identifier: +WVF+xRO248yfKhQotbiA5Zu3+4ilX3UgMdiiHdJR20=
Subject key identifier: 48:56:DF:3D:B6:10:90:9E:2A:0A:84:66:E1:5E:94:9B:84:D2:C2:E5
Authority key identifier: B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
Certificate issuer: /CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Certificate serial: 019F92B65A052EB90DC5EB5EB3FD37FFC712
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 06:00:51 +0000
Manifest this update: Fri 24 Jul 2026 06:00:51 +0000
Manifest next update: Sat 25 Jul 2026 06:00:51 +0000
Files and hashes: 1: fvJ3MrGjIvFPtGs9u4_haCOR1_c.roa (hash: eQxsGkE0E+AwQWSL5A0odWC80qfy34hasAmM5mVKF6Q=)
2: uQMr2xKMhuALIcd5WagBHEDQZQw.crl (hash: VzRhs8clYLompF4Lg89hJIXqCI3db5of0H9oMlwEKtQ=)
3: vHsVg6hD3ixc7vhavhFacUnxI2c.roa (hash: Qy7RK21HF7+WV9xXt79u+lVLRf/LSsklO2ZYW8nk7Jk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:5a:05:2e:b9:0d:c5:eb:5e:b3:fd:37:ff:c7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9032bdb128c86e00b21c77959a8011c40d0650c
Validity
Not Before: Jul 24 06:00:51 2026 GMT
Not After : Jul 25 06:00:51 2026 GMT
Subject: CN=4856df3db610909e2a0a8466e15e949b84d2c2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:1c:c7:d0:52:01:e2:aa:b0:a6:17:a3:d7:41:
3a:c8:79:77:51:db:76:97:21:68:d2:7b:b0:79:7f:
98:33:8b:44:2c:e2:9e:82:3e:9f:ce:97:eb:2e:cf:
ee:09:ee:a2:39:12:1f:6d:c8:f7:16:6e:86:c4:d4:
1f:0d:df:33:94:62:b6:21:15:63:e7:bb:46:5c:e0:
96:6b:d0:34:4e:04:84:14:35:8f:a7:ee:07:0f:ee:
2b:ea:fa:e9:bc:59:b6:35:50:c2:0c:1c:e0:72:c2:
a0:b0:43:a1:c2:6c:e0:1a:ed:59:87:d2:3c:33:69:
e8:e4:93:15:fa:9e:e7:0e:d4:57:f0:63:03:5d:35:
2d:21:8b:9b:9d:57:43:f7:ed:73:33:b5:bd:82:1c:
3f:c6:1d:3e:ab:87:e3:7d:f5:4d:32:5b:85:ae:d7:
70:93:84:48:41:b6:66:b3:df:a4:63:05:06:2c:21:
94:2d:4f:83:4c:1b:b2:4c:61:96:55:bc:61:f4:35:
c8:50:1c:1c:23:0d:06:d4:37:fa:7f:0f:ea:43:84:
69:58:18:3b:b7:e8:d1:e0:67:ab:81:f8:31:f1:b6:
62:f4:cf:f3:70:eb:45:4c:ff:8a:bd:ee:29:8e:9a:
17:3e:58:7e:2b:04:1f:03:6e:bf:78:1a:49:38:ce:
59:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:56:DF:3D:B6:10:90:9E:2A:0A:84:66:E1:5E:94:9B:84:D2:C2:E5
X509v3 Authority Key Identifier:
keyid:B9:03:2B:DB:12:8C:86:E0:0B:21:C7:79:59:A8:01:1C:40:D0:65:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQMr2xKMhuALIcd5WagBHEDQZQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/bcb03d-1c11-4516-a88f-fe846f75d170/1/uQMr2xKMhuALIcd5WagBHEDQZQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b8:79:a4:5d:a8:a3:0f:01:6f:ba:99:68:ee:61:ba:25:f7:
e4:ad:e9:f1:37:97:65:31:90:5f:9b:a6:fb:85:76:fd:1c:43:
d7:75:13:82:a6:d8:87:db:29:57:e5:0a:9f:8a:64:1b:83:db:
d4:9d:45:26:92:75:29:0e:bb:c2:8b:ce:03:97:f2:dc:e7:b2:
f1:57:cb:42:d9:23:15:e5:5b:73:24:22:fb:7b:c8:d0:2b:b1:
45:25:fd:d7:95:91:56:b1:dd:9b:69:e9:6c:10:36:73:92:99:
b8:f8:63:65:94:05:81:c0:b5:31:72:37:db:f8:bb:62:a5:25:
b0:f9:0c:9c:61:28:a2:a1:cc:92:2c:a6:06:a9:40:74:cd:b2:
22:9c:a9:2e:d4:72:b3:a1:8a:ba:35:8b:66:ae:91:10:ed:d9:
da:1c:4a:65:01:a3:e5:3d:e7:00:d5:00:d5:e5:f4:5e:c6:fc:
6b:2a:c5:47:7a:14:0e:04:df:25:ef:3c:c5:f4:4e:66:ea:dc:
ad:18:a8:16:ba:f1:14:f5:2c:9c:cd:8e:ae:39:77:79:15:65:
b8:89:44:8f:8f:fb:85:52:53:a7:74:b8:18:4e:8a:19:87:c0:
27:8b:24:12:c4:64:57:cd:93:34:67:bf:7e:02:84:db:75:57:
94:0f:20:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:39:35 2026 by rpki-client