Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: Ec1Z7Lv/3HQpL2b7EbwP8NmLIeSjOwSPdHSiDISnACM=
Subject key identifier: 76:5D:23:C8:96:EF:55:26:46:00:8C:CC:56:E5:F8:60:A5:13:58:F9
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 019F93FF62DD66EB104DCCAB499C854095DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 16E7
Signing time: Fri 24 Jul 2026 12:00:15 +0000
Manifest this update: Fri 24 Jul 2026 12:00:15 +0000
Manifest next update: Sat 25 Jul 2026 12:00:15 +0000
Files and hashes: 1: AWxzzyNyiEe96JGpfTTltwTSHS0.roa (hash: e990mLN/bBQ15JQILJpMpdVXqqpNaInRtBdXK82dx1E=)
2: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: yAszE4ZTpc4JRb6zG/3cj9DwcN0wLS12rDDc2xKrGmc=)
3: yHLToeByeR5LXnQLDh6oCy31RMM.roa (hash: JH11seY61l0JGKEmVY9l0Ssg5gMsTcO0W459L08nH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:62:dd:66:eb:10:4d:cc:ab:49:9c:85:40:95:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Jul 24 12:00:15 2026 GMT
Not After : Jul 25 12:00:15 2026 GMT
Subject: CN=765d23c896ef552646008ccc56e5f860a51358f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ab:57:2a:d1:2a:7e:58:2a:11:49:e3:dc:4b:
99:9a:0e:8a:5d:08:52:20:94:8b:31:d9:d8:4a:9d:
29:43:62:a8:6b:39:ff:7a:a6:ac:5a:7a:60:c6:fc:
97:c5:db:ee:b4:3f:f5:8c:7d:16:15:51:89:2e:73:
a5:db:ac:d8:9d:8f:22:e2:71:89:e3:ba:70:fc:8a:
95:85:ef:c0:53:34:d6:b1:ac:ab:5c:dc:58:af:a8:
06:c1:44:df:99:01:e6:34:1b:19:8c:9c:7a:93:a8:
ec:97:9a:4d:b7:c3:55:68:4c:e6:1b:7d:cc:8d:a4:
1c:2c:53:48:c1:d1:f4:f8:4f:8b:c5:f6:e2:9e:f1:
3d:fe:1e:ea:ab:65:fd:bf:40:eb:2b:9c:0a:13:be:
a3:e7:70:dc:58:04:fd:97:ea:72:bd:49:9b:66:78:
65:15:32:c0:3a:84:cd:fc:ec:a0:1f:64:1c:44:c4:
06:1f:93:5a:25:80:aa:99:4c:e2:ba:7a:36:b2:0c:
30:e6:27:05:33:8d:2d:11:87:b9:f9:1f:33:84:0b:
5b:78:14:ff:db:ac:f9:be:91:68:0f:58:09:db:82:
6d:e9:91:71:21:46:e8:4e:2d:87:9a:6d:c3:72:de:
ec:8a:f5:55:bd:d5:10:ce:5f:b6:1b:30:ee:c3:11:
fb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:5D:23:C8:96:EF:55:26:46:00:8C:CC:56:E5:F8:60:A5:13:58:F9
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:2c:da:75:93:e6:17:c5:1e:ea:8d:93:90:02:20:91:e6:cd:
87:1e:20:df:d5:02:86:e3:ee:f1:48:7f:29:0b:39:62:05:6c:
d5:b1:e9:5c:4e:78:9f:3c:9a:23:e3:3a:e0:60:61:0d:b3:ae:
56:19:60:ee:29:3d:a5:d3:81:44:ad:77:04:65:5d:ce:aa:79:
9d:f3:c8:48:92:07:59:50:eb:87:25:05:ca:88:0f:d3:ab:a0:
4e:a0:5a:87:4f:95:e6:84:08:3c:43:68:c9:7a:69:3a:1e:98:
47:56:0d:ba:e7:b0:0e:e3:22:70:c2:0d:f0:93:3d:4a:08:9b:
ab:93:1e:20:a3:32:7a:e3:4f:40:fd:b9:27:a1:11:70:5e:ea:
8a:a5:ae:24:e1:b3:3d:c7:43:0f:67:78:ee:42:85:ea:7d:bf:
bd:19:ae:d1:50:2a:86:92:8b:34:6b:b7:ff:d8:e2:c4:64:9a:
5b:4e:18:bb:7b:81:67:02:ca:d5:73:9b:ce:97:bb:bf:9b:80:
3c:6e:a3:6d:f6:11:7b:b0:49:35:19:61:48:39:66:ec:ff:e2:
30:c8:cc:8d:65:b8:dd:72:f5:12:d3:3a:e4:e7:d0:3b:57:b5:
f5:d9:f6:e3:fe:3e:0b:7a:cd:2a:48:6c:53:98:08:c3:b7:f2:
62:63:ef:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:45:50 2026 by rpki-client