Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: oTWFaqSR+2lMXW8t+CZdSiIoj5M65Wshi4/ArxpFx1A=
Subject key identifier: 1F:7C:8F:85:94:6B:E2:54:72:68:B7:BF:1B:ED:1B:11:BA:9B:A9:02
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019F94A50265F5E6B18C6A6715319AC3628A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0E69
Signing time: Fri 24 Jul 2026 15:01:09 +0000
Manifest this update: Fri 24 Jul 2026 15:01:09 +0000
Manifest next update: Sat 25 Jul 2026 15:01:09 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: UO72bKwpKx7Llx6eszY5Q5hVf7nJnQ7Bx/1vBPfKn00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a5:02:65:f5:e6:b1:8c:6a:67:15:31:9a:c3:62:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Jul 24 15:01:09 2026 GMT
Not After : Jul 25 15:01:09 2026 GMT
Subject: CN=1f7c8f85946be2547268b7bf1bed1b11ba9ba902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ca:9e:ef:80:1c:9d:27:ab:30:9a:fd:54:8f:
80:1a:df:ff:48:19:4a:21:11:7b:d9:ab:05:33:d1:
f5:81:83:3f:36:5c:57:bf:3a:37:a5:a6:b6:86:cd:
f7:9c:ac:f9:af:3f:b9:b2:9d:44:a3:00:3c:aa:11:
38:e8:17:1a:80:38:0f:11:b9:b6:14:f6:f8:ae:04:
39:85:6f:1b:3a:b7:d8:a0:05:55:ab:e4:82:db:62:
f9:26:05:1c:21:d3:1d:6e:f2:27:07:4e:81:ad:1d:
d0:01:f5:bf:1c:99:6d:de:23:94:d3:58:ca:3e:23:
5d:82:6b:43:0f:f4:be:6d:7a:56:a4:fa:4d:75:5b:
bf:fe:f2:14:58:3b:3f:7b:d1:5a:b3:81:fe:72:ff:
43:a2:e5:90:5a:3a:1d:99:50:6a:d8:f0:4f:43:3d:
ef:c4:7b:d0:c1:f1:41:b1:fe:d5:1c:17:23:4e:92:
2e:72:d5:61:20:13:5d:d5:eb:5a:32:ae:30:90:ba:
8a:02:58:68:c0:82:af:a8:0b:62:b0:c9:8e:47:29:
89:f5:a9:54:31:3a:17:dd:56:8c:cf:0f:0a:d2:54:
05:cf:9b:80:00:eb:7c:bf:d5:a7:1b:ea:9e:7f:ee:
db:9f:d5:31:86:d6:c7:6b:1c:bb:de:a6:99:98:06:
53:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:8F:85:94:6B:E2:54:72:68:B7:BF:1B:ED:1B:11:BA:9B:A9:02
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:73:53:41:63:c7:6e:94:07:bc:3c:55:a1:ac:b5:ca:3d:60:
36:e3:84:fa:74:9c:b1:f1:bf:ff:e0:5c:85:c3:7b:e2:3e:35:
3a:c9:e6:68:ca:33:99:fe:1a:fe:b2:eb:99:ef:45:94:3d:f7:
78:cf:2d:bf:0c:80:f6:89:16:d6:a8:33:30:f1:da:94:29:19:
26:86:97:30:f8:21:29:99:84:65:41:35:dd:ce:e2:a8:8d:ef:
73:8c:cd:09:09:90:ea:87:e5:28:c4:36:b1:43:82:44:19:a7:
7c:21:fe:8b:89:7a:7a:dc:a9:34:c7:61:82:2a:86:91:b1:77:
82:f7:a3:2f:3e:5a:24:1d:ab:69:95:04:8c:71:c7:9f:b9:e3:
75:20:32:b6:61:f3:0f:ba:68:a8:5b:fc:0a:ef:85:64:3d:55:
84:b9:ce:97:59:de:66:b4:41:c8:ba:ef:e5:95:e7:53:80:52:
8a:b1:28:99:0c:f7:6f:7a:82:19:3c:ae:d0:ec:30:e1:b3:95:
ca:97:b1:4b:3a:80:2b:eb:fd:75:2b:41:ee:ec:09:ef:76:bb:
7f:84:ae:39:8c:60:5b:85:56:72:77:72:a8:9b:19:99:bb:16:
7a:59:0c:0f:6a:4f:7b:10:f3:ea:c1:6d:e6:19:44:68:c7:4d:
db:17:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:46:59 2026 by rpki-client