Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: Tn5sJWDuO6723qySbZWZYPpcV6Y9tExFbQoClkA/fZU=
Subject key identifier: DD:E6:C8:06:E5:69:64:48:1E:71:C3:37:E9:DD:4B:93:77:94:AB:30
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 019F927F9F376E11BDB24BE8028F69815F30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 19C7
Signing time: Fri 24 Jul 2026 05:01:04 +0000
Manifest this update: Fri 24 Jul 2026 05:01:04 +0000
Manifest next update: Sat 25 Jul 2026 05:01:04 +0000
Files and hashes: 1: EKN-VhfSh7NqAUTwaEDwo-mbUcg.roa (hash: RURLvfa0vZeEDe5BKC7vJtcjJKvo0nmsNWlb1Fca1bg=)
2: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: ODhPDttd/CnxVzzF9yvIRGOGDx4/OzmrNEowNhzaegM=)
3: z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa (hash: sXhfTVz/7doOZGLXSWgTb9dJ0tx/PZHzsugITkY48mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:9f:37:6e:11:bd:b2:4b:e8:02:8f:69:81:5f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Jul 24 05:01:04 2026 GMT
Not After : Jul 25 05:01:04 2026 GMT
Subject: CN=dde6c806e56964481e71c337e9dd4b937794ab30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:6f:9e:cb:c6:00:65:04:98:5a:66:9a:16:e1:
e4:81:62:0f:4e:7a:a6:36:5c:a3:a0:3e:c1:53:f6:
8b:c1:ca:b2:54:75:95:fa:e0:be:75:be:24:96:5b:
97:a4:6f:f8:16:2c:9a:9f:69:46:ed:ab:af:46:1a:
b2:76:a7:ed:99:4b:78:5a:28:f9:26:19:b4:2b:08:
c4:7b:9b:7a:5d:0c:09:de:36:6a:01:f9:ae:d0:c3:
91:4e:91:8c:c8:1e:ec:8b:59:af:91:91:e3:39:55:
3c:f4:c7:c3:62:ca:70:46:48:a6:69:62:18:92:5e:
56:91:54:e8:15:8f:ce:fb:2e:52:f5:8d:80:08:22:
aa:be:71:63:f7:07:6a:a9:16:c0:fc:e3:1c:d0:07:
47:a9:0f:7b:ca:ab:e9:c9:b2:72:1f:dd:08:89:9b:
65:2e:5c:8b:b6:74:3a:b8:3d:b6:a0:7d:78:09:79:
7b:36:db:0a:be:b3:79:15:70:69:cd:08:24:91:6a:
7c:14:cd:c1:7d:77:42:50:73:0f:4c:1a:3b:25:44:
49:8a:72:b3:1a:06:8c:25:c5:61:4d:f6:37:54:5b:
8b:8f:e5:40:72:75:70:20:86:37:80:8d:4f:4e:d1:
18:92:a6:8e:57:44:61:42:1d:2a:96:71:8f:91:05:
d8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E6:C8:06:E5:69:64:48:1E:71:C3:37:E9:DD:4B:93:77:94:AB:30
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:73:c3:c2:f7:ba:3d:e9:f0:c3:b7:23:e8:26:2c:4f:0d:5b:
48:ed:06:6d:5d:fd:d8:60:cf:5a:58:ea:c5:4a:36:f2:b1:85:
54:ee:36:9f:59:d4:62:47:3c:c9:88:09:8e:de:a5:88:d8:9c:
da:05:99:6a:29:00:22:93:3a:ed:49:28:94:ca:ef:f1:8e:11:
95:5b:85:dd:40:3c:1a:e1:f6:d2:d8:8d:81:39:fc:19:cb:bf:
c6:40:bb:2d:e8:75:f3:21:37:02:21:e3:d0:7d:c7:16:b3:3c:
c6:33:18:89:ec:d8:b2:34:f9:2b:93:bc:a1:47:ce:74:cc:64:
7e:6d:de:7a:c6:a9:a9:eb:cc:88:53:64:dc:a0:98:69:1c:fe:
66:5d:35:56:a4:87:6d:45:d6:36:a5:ff:08:6e:a7:26:ce:9d:
71:c6:4e:25:ae:15:78:d2:59:b5:00:d8:9c:f3:21:73:ed:cb:
38:1b:a9:dc:a5:48:b1:ca:97:b6:7b:ea:e2:75:f1:33:9e:b4:
2b:31:fe:6d:77:bc:e8:6f:91:01:eb:75:c4:98:dd:12:e7:ce:
9d:de:7f:b8:88:7f:00:56:fd:68:8b:d9:9e:87:a0:c7:70:93:
55:92:50:a4:07:7e:b2:3f:68:a6:c1:cd:c0:c5:18:b3:bb:fd:
ee:b8:a5:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Sf583bhG9skvoAo9pgV8wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NjllZTY2MTY0ZDNjYjQxZGJkMmRmNTQxNzgxN2MzMmY0
Y2VhMDUwHhcNMjYwNzI0MDUwMTA0WhcNMjYwNzI1MDUwMTA0WjAzMTEwLwYDVQQD
EyhkZGU2YzgwNmU1Njk2NDQ4MWU3MWMzMzdlOWRkNGI5Mzc3OTRhYjMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2W+ey8YAZQSYWmaaFuHkgWIPTnqm
NlyjoD7BU/aLwcqyVHWV+uC+db4klluXpG/4Fiyan2lG7auvRhqydqftmUt4Wij5
Jhm0KwjEe5t6XQwJ3jZqAfmu0MORTpGMyB7si1mvkZHjOVU89MfDYspwRkimaWIY
kl5WkVToFY/O+y5S9Y2ACCKqvnFj9wdqqRbA/OMc0AdHqQ97yqvpybJyH90IiZtl
LlyLtnQ6uD22oH14CXl7NtsKvrN5FXBpzQgkkWp8FM3BfXdCUHMPTBo7JURJinKz
GgaMJcVhTfY3VFuLj+VAcnVwIIY3gI1PTtEYkqaOV0RhQh0qlnGPkQXYlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3myAblaWRIHnHDN+ndS5N3lKswMB8GA1UdIwQY
MBaAFLhp7mYWTTy0Hb0t9UF4F8MvTOoFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODkt
Y2QxZmE0ODQ0MTFiLzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi8xZDVlZTEtYWNjZi00NzRmLWE1ODktY2QxZmE0ODQ0MTFi
LzEvdUdudVpoWk5QTFFkdlMzMVFYZ1h3eTlNNmdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA33PDwve6
Penww7cj6CYsTw1bSO0GbV392GDPWljqxUo28rGFVO42n1nUYkc8yYgJjt6liNic
2gWZaikAIpM67UkolMrv8Y4RlVuF3UA8GuH20tiNgTn8Gcu/xkC7Leh18yE3AiHj
0H3HFrM8xjMYiezYsjT5K5O8oUfOdMxkfm3eesapqevMiFNk3KCYaRz+Zl01VqSH
bUXWNqX/CG6nJs6dccZOJa4VeNJZtQDYnPMhc+3LOBup3KVIscqXtnvq4nXxM560
KzH+bXe86G+RAet1xJjdEufOnd5/uIh/AFb9aIvZnoegx3CTVZJQpAd+sj9opsHN
wMUYs7v97rilXQ==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:31:51 2026 by rpki-client