Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
File: uhzvb56e3EXjzSjvQCUZeVLUYOk.mft (raw, json)
Hash identifier: hW9BDkALfiOjrkwoOT6A162PgbJ3OLFujKpgPpCgL2E=
Subject key identifier: C8:12:1E:43:C8:B4:63:F9:44:1B:C6:AB:41:E7:34:D5:C6:55:AB:A2
Authority key identifier: BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
Certificate issuer: /CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Certificate serial: 019F92B63D151FA7B6D0594A3B0E1CA6FBBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
Manifest number: 0FF8
Signing time: Fri 24 Jul 2026 06:00:44 +0000
Manifest this update: Fri 24 Jul 2026 06:00:44 +0000
Manifest next update: Sat 25 Jul 2026 06:00:44 +0000
Files and hashes: 1: sQXNrRfabqEAqxGuf8P5f2NecXw.roa (hash: 2PpXo8MephsPJxKEGzhYMR57A346BOGMuHA13iu9pZo=)
2: uhzvb56e3EXjzSjvQCUZeVLUYOk.crl (hash: K/yLErPK6MXEbzri/Ho1tuR5WHqJsdslBJbGB2UI/Pw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:b6:3d:15:1f:a7:b6:d0:59:4a:3b:0e:1c:a6:fb:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba1cef6f9e9edc45e3cd28ef4025197952d460e9
Validity
Not Before: Jul 24 06:00:44 2026 GMT
Not After : Jul 25 06:00:44 2026 GMT
Subject: CN=c8121e43c8b463f9441bc6ab41e734d5c655aba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cf:6f:53:ab:86:f3:4a:a7:6b:b6:c0:0a:78:
c9:d6:f2:72:dd:b1:2b:0f:c3:61:57:58:4a:10:d6:
39:e0:3d:fe:a0:8e:ed:87:7a:7a:37:de:87:d1:42:
1e:58:bb:86:29:43:43:79:2c:b9:4d:85:b0:51:0f:
fb:84:ab:48:e4:91:12:82:d4:c9:ea:10:f9:cc:94:
1a:bf:df:3b:d0:15:15:53:d9:55:14:6b:83:16:c4:
26:82:71:61:a4:08:19:8d:8c:9a:d6:56:e4:13:5d:
3c:2e:76:f3:39:20:41:fc:db:ab:5d:46:7e:79:43:
c0:0e:72:3a:a1:38:52:34:3e:62:82:23:5c:a5:ca:
79:b5:ab:37:fe:bb:84:6d:17:b8:4b:4d:15:d1:bb:
2c:bb:1d:0d:64:f0:37:1b:b8:25:0c:c7:03:e2:fc:
31:b7:6e:9a:23:a4:ae:66:c8:82:e9:67:c8:54:22:
02:b1:87:72:08:cd:e3:c9:68:74:27:4c:2c:9d:f5:
80:a7:12:5b:8e:87:12:90:3f:2a:93:fe:7f:7f:f3:
26:45:83:c5:33:db:8a:33:ca:a8:51:83:16:6c:bc:
f7:9d:ee:67:5f:3b:df:77:78:a8:50:07:5f:78:7b:
40:3a:41:61:61:12:aa:2f:d5:a3:e1:2a:f6:af:19:
a8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:12:1E:43:C8:B4:63:F9:44:1B:C6:AB:41:E7:34:D5:C6:55:AB:A2
X509v3 Authority Key Identifier:
keyid:BA:1C:EF:6F:9E:9E:DC:45:E3:CD:28:EF:40:25:19:79:52:D4:60:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhzvb56e3EXjzSjvQCUZeVLUYOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/21d663-6874-489c-ab9e-d9ca03e66ffb/1/uhzvb56e3EXjzSjvQCUZeVLUYOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:79:08:0d:16:d8:f5:93:3b:36:3f:37:bb:ef:d9:23:00:fd:
e0:fc:00:48:b5:9c:ea:44:c2:f1:fc:73:f7:6e:5a:19:64:b0:
e5:4f:86:0c:2e:ec:5c:e9:6b:e7:5c:f2:b2:43:4e:94:06:f4:
55:91:0d:35:e7:f1:1d:cb:c7:38:14:a9:ca:73:b0:f7:5e:ad:
54:78:ae:68:fc:b4:2a:41:da:4e:bd:6e:7b:47:ad:02:ee:63:
89:1a:34:c8:f8:5e:81:f4:2b:ea:6b:50:51:85:29:a5:89:e7:
fe:af:a5:f6:f2:77:07:c9:c5:05:14:6c:c0:05:c4:5b:e4:99:
bf:6b:f5:df:df:d3:3e:11:ad:99:7b:c3:4b:6c:87:98:0c:09:
c9:3b:1a:d6:05:3f:0e:f1:0d:89:73:b2:13:15:88:c9:9f:09:
ff:c0:14:79:bf:9c:eb:e5:aa:94:ed:ff:d1:24:1c:fa:a0:18:
47:68:ae:41:4b:37:de:ed:3f:44:58:1a:b5:91:f5:7f:e5:d4:
35:0a:2b:2a:23:88:51:a3:4a:0b:77:97:75:b3:0f:30:5a:eb:
b2:c6:c8:aa:84:83:b6:aa:08:2a:5d:27:9e:ea:a6:04:ab:df:
f0:98:ee:04:e6:63:2e:21:c7:14:f1:43:6a:5d:f0:1d:78:83:
2c:d7:00:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:56:37 2026 by rpki-client