Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: xr7i9wUI+qzrx6oa/XZ4fG0gehNFYOR4X6RzgzE0dls=
Subject key identifier: F9:ED:1E:1F:D1:BD:47:E2:84:A1:9A:07:28:9E:6E:DC:62:3C:C1:EC
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 019F92118191F1C6C299788003DE5C30DC3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0C28
Signing time: Fri 24 Jul 2026 03:00:48 +0000
Manifest this update: Fri 24 Jul 2026 03:00:48 +0000
Manifest next update: Sat 25 Jul 2026 03:00:48 +0000
Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=)
2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: Wed/baK+LhjoEvDRXDSRD0QBGX1sFpSjm7D5ofFFWa0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:81:91:f1:c6:c2:99:78:80:03:de:5c:30:dc:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Jul 24 03:00:48 2026 GMT
Not After : Jul 25 03:00:48 2026 GMT
Subject: CN=f9ed1e1fd1bd47e284a19a07289e6edc623cc1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:e3:20:c1:a6:4b:2e:95:92:41:16:da:96:
27:37:90:da:d9:11:5c:5c:1e:a8:cf:df:bd:1a:be:
92:39:d3:63:34:0d:4f:f0:dd:1d:d7:8a:40:c9:3d:
36:cf:27:37:c0:cb:90:e4:88:83:ef:a7:4c:80:65:
a3:f6:ac:1d:92:ec:6a:67:6c:8e:b2:47:d0:7a:9a:
44:c3:44:e4:2c:cb:8d:98:55:4f:1d:96:c5:8c:dd:
fa:45:fd:88:2b:32:f0:7b:34:6e:69:4e:02:6f:bf:
ca:d7:bc:27:a3:35:8b:f2:47:df:8c:46:97:af:d4:
59:cf:cc:b2:18:dd:cf:73:31:dd:4e:22:f0:89:2a:
e1:fc:8b:34:57:77:3a:e9:fa:f7:ae:5e:60:dc:1c:
f6:1d:aa:24:eb:14:5b:a3:ba:55:70:d0:d0:73:8c:
96:93:da:a2:36:00:21:f6:f2:3a:77:a6:47:a9:2c:
de:83:07:3c:e4:24:8d:22:79:28:8c:62:c2:f1:e4:
5b:50:69:d3:80:c6:23:c2:1b:b0:6e:e2:50:48:ac:
1d:ac:43:61:52:84:dd:47:cc:73:d5:53:25:07:64:
a7:62:dc:2d:d9:4a:f4:00:83:dd:11:c5:09:e5:bd:
84:87:59:c4:4e:17:c5:b8:c8:2b:9d:73:df:41:94:
93:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:ED:1E:1F:D1:BD:47:E2:84:A1:9A:07:28:9E:6E:DC:62:3C:C1:EC
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ae:01:d6:81:7e:c9:55:39:14:70:41:0e:ed:83:27:90:78:
b0:98:6c:4f:21:3d:69:ea:a8:f3:69:2e:56:f6:93:79:23:86:
ae:64:d0:d6:05:1b:ea:37:2d:2f:d5:f6:17:2e:ce:98:7d:ef:
e1:0d:a8:c1:78:6a:29:73:01:b1:e1:49:a2:fe:9d:a3:d1:e9:
ec:c4:c8:93:81:4e:4c:80:f9:e2:ba:29:8f:bb:07:10:67:09:
db:09:31:68:62:dc:bd:8c:d1:63:68:c5:39:26:88:f2:d4:6a:
ae:1e:f8:79:93:c1:31:79:38:8a:1b:c3:8c:f3:e2:e1:32:a3:
df:01:01:29:dd:80:9b:ea:32:d6:84:78:ee:8d:41:1c:8d:8f:
5e:96:95:5c:ee:1a:b7:f2:de:f4:41:f7:3b:25:a2:86:63:a2:
d6:a6:54:c6:ba:f6:9e:db:6b:98:96:3e:a3:dd:c1:f9:bf:92:
ba:2c:d9:13:1a:12:2e:94:62:40:a8:22:70:c3:8c:1b:25:f7:
50:da:a2:50:70:67:ff:46:3e:90:97:83:2c:e9:6f:e1:21:a9:
bd:92:16:ac:f0:6c:fd:a5:4d:1d:0c:d9:37:b0:39:42:84:f5:
c1:50:4a:a7:b2:62:89:46:2a:c7:7f:7c:2f:f2:20:c8:3d:7f:
fa:b6:33:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:46:03 2026 by rpki-client