Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
File: uMxZ2ZSshg5bJeCVddmflDcOkcs.mft (raw, json)
Hash identifier: EcvNqhkK6+Ji2KwhOHoSO+zZiv1BdEvUg9XE+ZYSRn8=
Subject key identifier: 80:BA:39:82:3D:C4:CA:69:FB:04:AB:B8:DB:6E:CE:D7:1D:23:EE:A4
Authority key identifier: B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
Certificate issuer: /CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Certificate serial: 019F924805AFC9E276ABA9ECB6E17008197A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
Manifest number: 0D70
Signing time: Fri 24 Jul 2026 04:00:21 +0000
Manifest this update: Fri 24 Jul 2026 04:00:21 +0000
Manifest next update: Sat 25 Jul 2026 04:00:21 +0000
Files and hashes: 1: msj-QCorJnXKr4kvj6gncmTacwY.roa (hash: 9SrsATf3LBoprWf5FN/vM5cjeV8i1QEYJtsGy50JnIY=)
2: uMxZ2ZSshg5bJeCVddmflDcOkcs.crl (hash: MZJEav34h6NQZhGVDfHCP7H5giNHqHgf/PCgA0qtZA4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:05:af:c9:e2:76:ab:a9:ec:b6:e1:70:08:19:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8cc59d994ac860e5b25e09575d99f94370e91cb
Validity
Not Before: Jul 24 04:00:21 2026 GMT
Not After : Jul 25 04:00:21 2026 GMT
Subject: CN=80ba39823dc4ca69fb04abb8db6eced71d23eea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:33:ce:42:d5:60:39:0a:ad:aa:79:3c:bf:89:
22:6f:c5:73:3a:be:f3:c6:83:e1:01:cb:72:0d:24:
50:86:9e:b0:69:15:ba:03:12:d9:26:2b:3c:b5:4c:
b9:13:1f:ec:d2:49:71:df:ff:e1:89:c7:9b:e5:14:
c8:3b:11:79:c6:81:6c:0c:f7:de:9c:5d:23:35:64:
8c:ed:ce:15:64:55:ef:99:60:f0:75:b8:de:40:c3:
3b:f9:ef:89:a0:73:d5:4b:7b:e7:1f:d9:04:77:af:
2c:cb:93:86:1e:0b:89:31:bf:23:88:78:3d:6a:83:
ae:78:07:18:14:9c:77:4b:3b:e6:53:59:77:20:ac:
a4:d0:7e:22:b3:26:20:47:cb:45:77:1a:f6:bb:bd:
bf:cd:25:16:6c:cd:16:d6:2a:1f:19:f1:5d:bd:b6:
10:46:cf:ee:d4:06:b2:0e:42:93:21:d5:b7:16:2d:
b1:8d:6e:5f:9e:4a:1b:84:db:3a:a8:18:da:c2:83:
b2:95:c1:60:2c:ab:6d:d4:16:7c:81:d4:b3:7d:8c:
02:7c:61:2f:fe:62:94:83:cd:7c:88:40:f5:f9:b1:
00:77:da:44:04:c3:15:bd:0e:7b:90:d2:d7:cd:8d:
e1:3d:76:f1:2e:4e:2b:1a:23:ae:6e:8b:79:d9:4f:
5c:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:BA:39:82:3D:C4:CA:69:FB:04:AB:B8:DB:6E:CE:D7:1D:23:EE:A4
X509v3 Authority Key Identifier:
keyid:B8:CC:59:D9:94:AC:86:0E:5B:25:E0:95:75:D9:9F:94:37:0E:91:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMxZ2ZSshg5bJeCVddmflDcOkcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/69c880-23ef-49c0-adbf-3d113d39f77b/1/uMxZ2ZSshg5bJeCVddmflDcOkcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:65:10:a1:de:ee:85:95:58:d2:ef:60:5b:e0:df:26:95:cc:
7b:8e:38:44:07:5e:0d:20:8a:8f:88:94:37:11:d4:e4:50:4d:
b4:b2:43:59:94:dd:00:6b:d9:4b:c7:74:d6:a0:51:1a:b2:75:
7f:3b:c1:bd:a0:bf:39:f0:2c:69:8e:79:f7:f9:70:75:25:d7:
40:7e:bc:81:65:9a:6e:c2:0a:03:07:48:3a:ed:78:bf:92:c8:
66:20:cd:0c:a7:01:83:27:9d:a0:b4:6d:11:d6:14:86:40:17:
5a:5c:63:b7:e3:55:c1:0b:b7:e8:ab:4a:89:d0:21:20:f1:8b:
ac:05:32:fd:5b:ee:6d:bf:48:cf:f6:43:84:e6:e1:29:e8:a9:
8b:d5:7c:fb:9d:c4:2d:ea:e6:82:3c:ae:29:50:be:59:8d:b6:
82:2f:3c:b4:8c:ad:29:05:70:61:b8:6f:1f:d2:19:73:e2:c5:
57:7a:d7:e6:e6:68:8c:2e:3f:20:4d:f0:cb:e3:cc:23:ac:e2:
99:cb:92:8e:a6:4c:28:88:a7:07:98:ca:00:27:97:11:a0:a4:
26:76:d2:6d:81:d9:8e:73:89:a7:dc:94:c2:02:5b:91:5a:ab:
e4:42:cb:f1:cc:ae:e8:5e:e4:ce:3d:6a:bf:63:de:dd:b6:66:
5e:48:a9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:17:46 2026 by rpki-client