Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
File: UHDcUgTez3q-pQcNdfoFjIrAE9U.mft (raw, json)
Hash identifier: yOj0+Nw6OPJtB3BvABlJ8eQ+XQVWZz8ZgmCwdWtd2ow=
Subject key identifier: 13:B9:4E:97:F2:53:BD:6F:82:53:83:48:C2:F9:7E:35:78:13:31:F5
Authority key identifier: 50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
Certificate issuer: /CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Certificate serial: 019F913608C81ADBC1D6D06C62976E5008AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
Manifest number: 16E8
Signing time: Thu 23 Jul 2026 23:01:05 +0000
Manifest this update: Thu 23 Jul 2026 23:01:05 +0000
Manifest next update: Fri 24 Jul 2026 23:01:05 +0000
Files and hashes: 1: 8MHx6pFnKDbOJZCL45Uqeu0OuEw.roa (hash: WqOpKbFAaR3JLKnMgyYQifvHuuro/dU0rsdqEF+6ZxA=)
2: UHDcUgTez3q-pQcNdfoFjIrAE9U.crl (hash: d+7bd2JyqU4GOdEgibA12S5DNq1r4+KJ5VvPuZcHu6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:36:08:c8:1a:db:c1:d6:d0:6c:62:97:6e:50:08:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5070dc5204decf7abea5070d75fa058c8ac013d5
Validity
Not Before: Jul 23 23:01:05 2026 GMT
Not After : Jul 24 23:01:05 2026 GMT
Subject: CN=13b94e97f253bd6f82538348c2f97e35781331f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a7:25:d0:2d:3b:0a:8f:4a:94:7b:b1:3a:b5:
56:ab:3c:ca:ea:6f:04:3f:cb:5f:8c:e8:b6:90:e7:
53:eb:ed:62:ca:a4:97:a8:93:ff:82:13:a6:ce:c4:
18:65:52:b2:cd:45:d3:45:c6:4a:11:56:d0:49:d0:
3c:6c:c1:91:14:e3:e7:81:b3:1e:b8:14:9a:90:a5:
90:7f:29:8d:c9:27:5b:d7:d8:f4:d7:08:51:dc:9c:
e1:7f:3a:c4:28:2e:68:fa:c6:bd:fe:ba:ef:a0:fa:
a3:cf:b2:56:f4:f6:80:3e:cd:d5:15:61:b5:c3:69:
3a:36:8b:72:84:10:60:5e:c5:83:24:81:75:01:57:
f0:c2:1d:81:49:bd:8d:b9:f3:8a:ee:98:14:a8:78:
5a:34:bf:5d:33:1f:b7:ea:08:74:a9:1d:12:76:ab:
2c:d3:27:39:ff:88:cc:f8:2d:d2:4d:6c:3f:d0:cf:
7a:9f:f2:b9:30:05:02:82:95:90:0e:46:85:4f:50:
dd:ce:df:88:11:6d:33:d9:c2:e5:e1:1b:d3:7c:49:
ee:2c:6c:74:da:92:81:9e:e0:dc:50:49:de:40:56:
3b:64:f2:99:97:45:1c:5c:a6:00:b4:0c:16:26:b6:
7d:ca:03:87:89:d4:65:2a:2d:24:d9:15:c9:ad:bb:
12:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:B9:4E:97:F2:53:BD:6F:82:53:83:48:C2:F9:7E:35:78:13:31:F5
X509v3 Authority Key Identifier:
keyid:50:70:DC:52:04:DE:CF:7A:BE:A5:07:0D:75:FA:05:8C:8A:C0:13:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHDcUgTez3q-pQcNdfoFjIrAE9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a28b5c-88d7-4ad4-9e1d-8ac17e9c40db/1/UHDcUgTez3q-pQcNdfoFjIrAE9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:db:2b:ad:f9:43:17:44:2c:54:1e:d9:b3:ce:42:b2:23:f3:
91:38:ac:4a:db:80:5d:65:e9:06:61:11:18:ba:1b:b3:7f:dd:
bf:0e:1f:f6:a6:ab:5b:b7:ee:d1:e2:65:4e:ab:6c:91:eb:80:
4a:92:c3:ca:e2:af:06:16:e6:7a:4b:59:b5:fb:36:fb:9b:83:
65:3c:59:f7:f7:1f:d7:ae:78:7c:27:41:b5:6b:56:16:6f:91:
ed:59:59:8c:73:72:11:d5:82:d5:a5:f2:d3:06:e5:33:3c:1e:
a6:82:55:b6:74:9e:a4:6c:81:75:5c:60:3f:4d:01:60:98:09:
3d:bb:a2:ac:da:1b:6a:6e:cc:70:42:94:e7:1a:ae:c3:1c:fb:
48:12:d1:f6:3e:ce:b2:ad:fc:dd:79:d8:bb:5c:78:71:89:e0:
b4:60:3e:2c:3f:72:9d:5c:2b:e6:b4:90:5f:38:d9:82:54:b5:
95:86:9a:c8:bb:4a:a2:ca:45:e0:db:dc:f7:ad:02:62:dd:db:
bd:30:80:65:78:6e:a5:3a:cf:e7:3f:71:13:00:a1:e7:b3:37:
9a:d8:42:c9:f2:80:16:d7:b4:58:7c:d1:75:57:b4:94:95:f4:
e0:59:ca:32:34:61:a9:25:6c:b4:b3:13:9c:b5:3a:02:ba:49:
c9:cd:3d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:42:15 2026 by rpki-client