Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: BhAq6jiEDed3CtpWXVD/yOKJFy/aZCu/+mNz5S4UiKc=
Subject key identifier: 8B:8F:16:F4:5F:7D:F7:28:2E:E3:C4:2B:17:96:9F:AC:3E:D2:80:5C
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 019E1DFE5798F2516C8706402A0F6880E48C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 0F37
Signing time: Tue 12 May 2026 21:01:08 +0000
Manifest this update: Tue 12 May 2026 21:01:08 +0000
Manifest next update: Wed 13 May 2026 21:01:08 +0000
Files and hashes: 1: sQXNrRfabqEAqxGuf8P5f2NecXw.roa (hash: 2PpXo8MephsPJxKEGzhYMR57A346BOGMuHA13iu9pZo=)
2: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: EaMntgt/gERzDMev8yAE6dqFrsxsGpkdNWJVu4iF/Vk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:57:98:f2:51:6c:87:06:40:2a:0f:68:80:e4:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: May 12 21:01:08 2026 GMT
Not After : May 13 21:01:08 2026 GMT
Subject: CN=8b8f16f45f7df7282ee3c42b17969fac3ed2805c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:97:cc:88:eb:aa:55:34:f6:f5:25:8d:f9:
59:6a:46:87:a5:3b:35:88:dc:69:cc:a5:17:9f:b5:
f1:4d:86:96:5a:99:2b:bf:39:6a:27:ac:24:00:a2:
66:64:d2:2d:66:ea:68:6e:74:73:4b:07:62:8b:08:
8e:95:f1:6d:ba:3d:92:fc:91:cb:24:0f:ee:eb:fa:
b5:11:a4:3e:a4:07:69:20:ee:51:9d:e5:29:3e:4d:
39:a4:a1:df:62:77:7c:9d:e8:39:77:74:6f:a5:bc:
b3:9f:7c:87:ae:8a:03:b2:56:89:56:40:ae:e6:31:
43:fe:9e:9e:13:33:a9:7a:36:21:45:d8:62:d3:8d:
f7:7a:1c:b0:ef:6a:de:83:d0:16:73:17:40:b4:ce:
b5:14:54:82:f0:9f:e2:eb:4f:2b:b7:83:72:be:ce:
20:68:29:88:eb:e7:4d:08:ec:fb:3c:fd:08:9f:69:
a5:83:f8:52:9c:5b:87:a6:0b:b1:5d:93:39:b9:46:
c1:25:05:d8:de:f6:25:94:bc:4a:ac:b9:9f:62:f5:
ff:ff:19:5f:59:9e:d0:59:f6:a0:b0:87:db:f1:74:
6e:1e:36:ee:fa:42:85:f5:0f:79:74:3a:46:6f:5a:
39:be:65:0a:95:01:0a:7b:d9:8b:dc:10:61:d1:31:
93:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8F:16:F4:5F:7D:F7:28:2E:E3:C4:2B:17:96:9F:AC:3E:D2:80:5C
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:2b:31:f5:37:cd:be:3c:b7:6e:cc:6f:a6:26:c8:ae:70:f2:
06:3d:f5:e7:4b:33:fa:cd:ee:1c:b6:ff:42:c0:6c:54:19:94:
3a:04:42:8c:e9:fd:7e:d2:f0:6e:20:13:7c:8e:52:08:38:e9:
ea:7c:f2:83:f1:15:35:bd:0a:18:b8:90:2a:cf:c0:94:a7:74:
ac:3d:e3:9e:45:41:38:81:0c:85:f0:7e:c5:a8:3b:5c:45:05:
6c:51:29:fc:39:03:1d:4f:d2:6e:e3:88:9c:95:83:9f:0a:41:
0b:bf:69:6a:b0:25:59:86:fa:de:d0:9e:23:87:d3:7d:7b:7b:
c7:14:5b:c5:01:7d:b7:ff:ff:f2:cc:b6:23:ae:e4:37:22:62:
96:19:30:00:db:4b:aa:6e:82:10:50:f3:2a:8a:1f:51:2a:6d:
aa:b2:f1:f1:1a:db:9f:be:b0:7c:c9:54:38:be:83:5e:fa:83:
95:06:34:03:e7:9c:6f:e2:1d:09:b2:5a:20:1f:02:6b:32:66:
c6:e9:fd:07:ef:e5:d0:b1:d5:33:e5:c2:d9:ae:f0:07:c6:da:
f8:04:c0:cb:7f:73:11:41:87:1b:90:f4:62:fb:13:75:bb:49:
03:1a:cf:ba:b4:fd:a8:6d:c0:f9:08:a5:1a:7c:79:f8:39:8d:
f2:78:05:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:40:23 2026 by rpki-client