Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: aZKr/8W2difar8hRFFA881rGPZHunzdBWYHyzAzUccc=
Subject key identifier: DC:A7:DB:CB:E4:DC:5A:FC:AF:80:8D:19:2A:3A:58:20:F5:07:E4:46
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 019E1CEB6E43C51739ECFCFEF46F9D686411
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 0F83
Signing time: Tue 12 May 2026 16:00:51 +0000
Manifest this update: Tue 12 May 2026 16:00:51 +0000
Manifest next update: Wed 13 May 2026 16:00:51 +0000
Files and hashes: 1: kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa (hash: 5aG03E0waW0vZXu+Aw8pqhSKzIZ48IES/FsMx7tVVjA=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: 3kkWo4vk/POFi0xejk7zAtDW0fMd8A4pBLHKZJ28puA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:6e:43:c5:17:39:ec:fc:fe:f4:6f:9d:68:64:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: May 12 16:00:51 2026 GMT
Not After : May 13 16:00:51 2026 GMT
Subject: CN=dca7dbcbe4dc5afcaf808d192a3a5820f507e446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:49:22:a8:99:e8:c1:da:15:e2:9f:7a:b1:be:
6d:fe:2c:1f:d3:53:18:3a:e3:9e:62:0f:bd:93:da:
9e:1a:67:17:c0:60:0b:9f:4b:b2:ab:f3:6d:ef:68:
04:14:79:ca:fa:d0:22:07:80:4d:44:22:52:a4:23:
1b:6a:e4:39:8d:ff:dc:a1:dd:48:68:1e:26:48:e5:
c5:30:63:dd:20:27:19:10:f3:0a:84:08:c6:4a:20:
87:af:52:f5:1a:a6:f9:8c:98:b0:dd:98:e9:15:05:
63:46:ca:a7:c2:84:98:ce:67:f0:22:aa:2d:ad:f9:
f1:c0:68:3d:81:dc:eb:16:92:f4:ee:f9:a3:9b:a3:
0c:89:0b:c5:f8:41:e6:bb:af:2c:9b:ab:a5:ec:4a:
b9:c9:23:67:00:25:9c:d6:9d:07:15:0e:7b:31:ac:
cb:fb:9b:2f:23:73:d9:d6:11:ad:bf:86:f1:ba:ff:
e8:0e:fb:4a:24:9c:a5:99:3c:4f:b7:e8:5f:df:5d:
31:01:32:d9:5e:5a:d2:8b:66:ee:46:a7:40:f3:7c:
a0:b5:29:24:6d:f6:e5:9f:a5:a0:4c:6a:56:46:b2:
ce:a7:f3:78:b2:7c:94:c4:02:5c:5a:a1:dc:fa:fa:
88:d7:2e:0d:fe:bb:9a:4a:0d:03:b5:40:6f:c5:28:
2a:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A7:DB:CB:E4:DC:5A:FC:AF:80:8D:19:2A:3A:58:20:F5:07:E4:46
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:4e:40:3a:71:c5:e2:43:e4:3f:14:cd:30:09:14:62:b1:4b:
20:2e:97:2b:b2:87:ad:f5:5a:6f:ba:c3:4e:d6:46:df:c3:b2:
ff:e5:bf:ff:10:49:1a:49:ee:16:34:b0:af:66:f3:c9:61:52:
0c:87:3c:1a:a0:51:90:ef:f4:85:1e:f0:ca:69:10:5f:54:a6:
df:46:ff:31:a0:2c:63:5d:f1:a3:f8:51:e6:ad:8e:e6:3e:79:
10:39:ca:51:b2:c7:78:7e:5a:82:a7:7e:c4:d4:b0:3a:a4:8e:
91:c9:f4:ab:0c:34:eb:41:48:c3:57:b6:ad:c5:2c:d8:f1:ce:
28:c3:1f:d9:50:e0:f8:75:8b:91:3b:3c:03:f2:ed:ad:b7:56:
25:2c:75:88:f0:2a:6a:82:1f:12:a9:ab:2c:38:08:12:bb:f5:
96:17:52:c8:d6:66:04:b3:24:f5:2f:b4:67:12:8b:87:ba:de:
8c:53:35:d3:5b:26:35:3d:85:f6:9f:65:39:8e:ce:44:c6:d0:
bb:73:4a:64:35:57:50:92:62:e4:c8:b5:f6:e7:8d:5a:d0:7e:
b8:67:65:db:f5:6b:eb:26:29:17:9a:de:4b:b5:09:b8:26:83:
f8:7e:37:15:08:14:a3:6b:41:fc:e1:b9:74:9e:a4:fc:37:8f:
0a:47:ef:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:54 2026 by rpki-client