Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
File: ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft (raw, json)
Hash identifier: 9z4yeYstFAYzY3YFpYDzm0XyYyGr955W0o+MjAF5kd8=
Subject key identifier: F8:0E:EE:42:7B:A7:B2:4D:73:01:1B:9B:38:DD:0A:AA:B7:A5:C3:2A
Authority key identifier: BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
Certificate issuer: /CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Certificate serial: 019F8FB585A9AAB7B3160EF4D4388A8005E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
Manifest number: 1043
Signing time: Thu 23 Jul 2026 16:01:05 +0000
Manifest this update: Thu 23 Jul 2026 16:01:05 +0000
Manifest next update: Fri 24 Jul 2026 16:01:05 +0000
Files and hashes: 1: kCLH7SXCIPIUGs3qdbeDdnL8Wpo.roa (hash: 5aG03E0waW0vZXu+Aw8pqhSKzIZ48IES/FsMx7tVVjA=)
2: ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl (hash: ZbzjTEUIxHbQ4XE7JxtwjR4dnpiyPqUy9Vn4hZBkPAg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:85:a9:aa:b7:b3:16:0e:f4:d4:38:8a:80:05:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2f1a11de190c81c0b7752cf52b569425dc54cb
Validity
Not Before: Jul 23 16:01:05 2026 GMT
Not After : Jul 24 16:01:05 2026 GMT
Subject: CN=f80eee427ba7b24d73011b9b38dd0aaab7a5c32a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:11:f4:87:03:be:f2:47:85:70:2f:3f:98:74:
b7:8c:4d:1d:08:a2:74:0f:1b:c1:20:77:0c:c5:1f:
30:f4:1b:09:f5:f7:4f:f7:ac:dc:7f:c9:f4:20:6a:
37:e9:a4:c4:e0:1f:46:35:fb:bb:5e:c9:31:35:ea:
09:d7:b5:28:6a:9d:64:e4:a3:56:8b:e0:91:e9:d9:
fc:1d:34:fd:4b:ce:f1:bf:d9:60:7c:34:11:6a:f8:
b5:1f:d7:cb:15:d5:78:89:c1:2b:0d:ff:07:52:41:
6d:6d:e9:2e:a4:b2:83:fc:13:57:a9:53:b8:62:6a:
cc:db:4c:99:bd:86:bc:b7:ca:e7:52:cb:78:ee:59:
51:8b:e2:32:5a:02:fd:ab:73:ec:6c:5f:65:d2:bf:
48:39:5e:58:5c:c4:4b:91:da:55:81:19:fb:65:c8:
22:54:12:b0:d3:a6:d6:53:ac:ed:e9:90:0f:d1:8e:
c1:d6:e8:69:7f:2c:cf:4f:bc:9b:60:37:fc:af:e7:
a2:0b:71:34:26:d5:96:a7:38:a3:91:3c:fe:69:3f:
be:14:05:9c:94:e2:62:12:87:f2:d3:f6:6c:0a:82:
00:af:8b:5c:a9:36:6a:21:d0:1d:4c:5f:e7:b3:81:
11:80:a3:aa:4a:7a:b3:4e:d1:0a:92:1e:17:6f:f2:
5c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:0E:EE:42:7B:A7:B2:4D:73:01:1B:9B:38:DD:0A:AA:B7:A5:C3:2A
X509v3 Authority Key Identifier:
keyid:BA:2F:1A:11:DE:19:0C:81:C0:B7:75:2C:F5:2B:56:94:25:DC:54:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui8aEd4ZDIHAt3Us9StWlCXcVMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/f96532-d7ff-4538-bccd-2d38e7779348/1/ui8aEd4ZDIHAt3Us9StWlCXcVMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:92:e2:b1:22:65:c3:19:f8:be:b6:63:0f:19:8f:b9:ff:e1:
d1:d5:5d:fb:98:32:41:6a:d6:a3:5d:f5:27:4c:c7:b1:9e:06:
69:e5:b3:e9:83:bc:fb:2f:ea:1b:b1:10:b9:dd:14:cf:c1:93:
4c:10:da:91:cd:09:8a:6a:b8:cb:86:4f:5f:25:58:0f:aa:7b:
80:4e:1d:96:72:37:1b:d9:bf:b0:84:33:7b:2a:59:2b:c5:02:
60:69:c6:55:02:50:5e:87:2b:0b:e8:90:fe:79:88:ad:a5:54:
3d:d9:28:ef:d5:f7:7d:db:2f:ff:68:ac:53:d7:8a:65:4f:1a:
4c:5d:4f:00:51:65:64:19:bf:35:12:d8:0a:ec:50:d5:ed:7c:
40:ce:e4:a0:66:08:4b:fe:fa:49:0a:8a:9d:91:e7:7a:8c:48:
18:4b:8b:50:4a:e6:b7:dd:c4:b0:9e:64:4c:56:a5:90:b1:6d:
c7:73:27:93:ff:dc:8e:c9:56:e7:20:85:42:55:e5:81:73:73:
32:ca:be:b2:df:41:8f:ea:f0:b2:e8:ed:a0:b3:81:94:31:11:
88:43:76:be:24:cf:fd:19:58:ea:43:26:5f:d3:e8:b9:3a:80:
02:c3:d6:46:dc:2d:e2:97:00:24:bf:5c:b2:17:ca:f0:ab:f5:
9b:2f:42:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:22:29 2026 by rpki-client