Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
File: uTpR2iBTBE-WJi9jfQycwF1zAEE.mft (raw, json)
Hash identifier: tcWNQsroF3s6xBLH8FaeYDk8TgoJ6AZkQJXRXkwIIwo=
Subject key identifier: C7:2D:1B:33:20:50:06:B0:8F:29:F6:75:3F:B2:8C:C4:C6:40:9F:4C
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 019F91DA91CBBAE0C7A85D31B2BBCCDBCE6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
Manifest number: 0D90
Signing time: Fri 24 Jul 2026 02:00:48 +0000
Manifest this update: Fri 24 Jul 2026 02:00:48 +0000
Manifest next update: Sat 25 Jul 2026 02:00:48 +0000
Files and hashes: 1: _1ONv99BnnmudSRYd6dRqlyZIis.roa (hash: bfQcICbHkAmGOY8DwQBd7z3DHYTS6Nksb+9VqNl7RPs=)
2: _qgjZUprLsuqYsWmj9vP9f6xthk.roa (hash: GM0m9yFuCRSbpKde8jgOPR1V9tzQSRA4/KDcI3DgI1c=)
3: uTpR2iBTBE-WJi9jfQycwF1zAEE.crl (hash: JeJhiGSs+wPJR0WuUDlmC+rmIplW2XmVPXABq0QKujY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:91:cb:ba:e0:c7:a8:5d:31:b2:bb:cc:db:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Jul 24 02:00:48 2026 GMT
Not After : Jul 25 02:00:48 2026 GMT
Subject: CN=c72d1b33205006b08f29f6753fb28cc4c6409f4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:99:9e:b8:15:bb:5c:89:09:cb:35:ae:fe:
82:da:fd:6d:40:86:41:05:4b:e4:e3:ca:f5:07:a0:
70:f4:1d:cf:89:8a:cf:fd:bd:4b:fa:8e:11:1e:e9:
3e:f5:94:91:64:d9:ef:50:97:23:ca:61:0e:e3:f8:
a2:0a:d7:ef:15:d1:fb:79:de:8a:36:f9:25:d3:83:
85:44:dc:c3:88:dd:86:8f:c3:38:2b:fe:d4:eb:5d:
10:65:75:df:66:6e:ab:b0:e0:46:b3:93:b2:08:05:
27:dd:26:2c:74:a7:15:4f:f4:4c:a5:19:c6:c3:b8:
fc:64:48:e2:14:87:3a:e2:bd:9a:9b:07:62:0c:ab:
97:1a:a1:5b:ed:cf:ac:78:eb:b4:2f:5e:32:a8:b8:
0b:f6:dd:62:16:0e:65:09:10:84:c8:c6:25:a0:95:
0d:43:32:90:33:85:b1:5b:65:9d:9c:06:97:61:04:
cf:b1:3c:91:32:c9:15:55:4d:6c:c0:56:9e:61:25:
d7:d4:6c:76:2b:0b:17:ba:94:93:70:c2:52:e0:c4:
52:55:a4:72:19:59:53:dc:3f:f0:9c:26:76:6a:45:
08:05:d3:80:c7:c8:a5:5a:d4:a7:7b:a2:fa:00:36:
8e:75:c9:39:fa:f2:7a:d4:ac:d3:c8:2a:89:49:e3:
73:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:2D:1B:33:20:50:06:B0:8F:29:F6:75:3F:B2:8C:C4:C6:40:9F:4C
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:f4:88:ea:bd:ea:86:f2:03:9f:55:81:94:9c:cd:7e:34:10:
64:48:d1:bb:6e:ba:5f:d1:40:da:0b:08:7e:26:75:c8:86:89:
d7:51:52:72:8c:ec:5b:ec:47:af:11:f3:ee:a9:3d:c5:0f:27:
98:ef:02:ff:67:72:ed:37:e3:a0:b6:b0:b5:29:41:2e:a7:81:
3e:c7:46:db:3e:ed:84:f1:37:23:90:2f:fe:e2:76:05:93:87:
31:6d:a4:d9:75:04:c9:75:10:8b:85:6f:00:d1:bd:81:7b:48:
ad:ca:be:e5:ca:d2:29:3f:41:34:04:cb:19:c7:98:d2:3e:0c:
ab:98:5b:1d:f2:cb:3d:a1:17:9b:7e:4c:ad:40:be:be:9c:3c:
6b:97:19:77:8b:1f:7a:7c:31:6c:08:e1:bc:e6:b8:0b:8a:81:
f8:2d:bd:e2:8d:35:d3:be:c4:28:06:9b:6d:3e:48:b4:49:f9:
59:89:4b:ad:77:2f:64:3d:ba:16:18:b7:a1:22:9b:99:02:9e:
3f:a6:82:9a:68:f6:6d:69:ae:b8:f5:07:2b:73:04:bc:c2:06:
5c:b1:6a:63:62:5e:71:4d:7c:b1:69:6d:1e:48:68:69:0c:c1:
d4:44:67:d0:42:f3:c6:82:69:e6:52:9d:aa:92:ad:9c:dd:e8:
11:32:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:03:49 2026 by rpki-client