Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
File: uNI7HmwH5iry0ufrbeCJOwkRmrs.mft (raw, json)
Hash identifier: yZZgo8LKg/1P+cx05sRK8kbYa6fayhwo6fu/BME9So8=
Subject key identifier: 3B:13:B4:72:FE:06:94:A3:15:2D:83:21:AD:C7:A3:AC:0E:31:73:6C
Authority key identifier: B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
Certificate issuer: /CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Certificate serial: 019E1E35A4114D4C66F7710C06F2F53BD42A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
Manifest number: 18CC
Signing time: Tue 12 May 2026 22:01:32 +0000
Manifest this update: Tue 12 May 2026 22:01:32 +0000
Manifest next update: Wed 13 May 2026 22:01:32 +0000
Files and hashes: 1: 4vljd6eS7xs98V4vbQdU27KIRbo.roa (hash: p9Wr9nNkj4z/XeaCt1WGEIqENx+18d7M1y0DLvifYF0=)
2: uNI7HmwH5iry0ufrbeCJOwkRmrs.crl (hash: MMwdMhIYgsMukBpaZRJ/S8z+NzJJJkQfO6QL1B0e8Vc=)
3: uUX1xSwp1T9nuxxoEoS7mJ4ylKQ.asa (hash: ARnmi9JFKrZP1rcaarKtNChdLdy0XQtmO2iQxRYVYjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:35:a4:11:4d:4c:66:f7:71:0c:06:f2:f5:3b:d4:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d23b1e6c07e62af2d2e7eb6de0893b09119abb
Validity
Not Before: May 12 22:01:32 2026 GMT
Not After : May 13 22:01:32 2026 GMT
Subject: CN=3b13b472fe0694a3152d8321adc7a3ac0e31736c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:79:ed:ba:1d:ea:ea:39:9f:05:76:34:37:4a:
7e:68:b8:c0:2d:b7:c9:21:2f:77:fa:7a:77:b1:8f:
ec:c1:7c:ea:0c:c3:75:b8:4f:13:a4:ef:a8:8d:0f:
97:22:34:18:61:6c:87:c8:34:da:d9:44:26:7d:d5:
70:b8:9b:96:8a:9e:f6:cd:01:cb:f7:c6:2d:b7:e4:
83:df:92:89:0f:d8:88:2b:d4:2b:7d:d1:02:a8:d5:
42:38:45:6f:20:20:f9:3b:4a:b6:71:21:ca:ce:4c:
76:c5:65:9b:6c:c8:89:13:50:af:20:9a:66:b5:bd:
ee:93:7c:d8:42:2e:18:f8:a6:de:fb:4c:38:75:f1:
b2:ea:5b:58:fa:5a:e8:af:65:7b:87:d6:79:f5:fe:
8f:b3:89:09:e4:2c:ca:89:f6:60:3d:08:4a:3c:36:
81:05:8f:2e:c3:eb:a6:2f:6a:94:e9:c7:4e:52:fe:
7b:9d:95:67:a3:07:95:47:77:6a:77:0d:91:d2:93:
06:06:c8:05:c9:f4:d9:46:be:da:07:50:7f:de:99:
12:97:da:1b:ec:bd:59:2b:5f:c6:73:40:c9:0c:d7:
8b:51:4c:f6:c1:50:1e:72:a6:e7:36:5f:03:d5:2c:
3b:ac:e5:73:7d:0e:05:ce:9b:50:50:81:1e:c0:f9:
46:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:13:B4:72:FE:06:94:A3:15:2D:83:21:AD:C7:A3:AC:0E:31:73:6C
X509v3 Authority Key Identifier:
keyid:B8:D2:3B:1E:6C:07:E6:2A:F2:D2:E7:EB:6D:E0:89:3B:09:11:9A:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNI7HmwH5iry0ufrbeCJOwkRmrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/b74aa2-25e0-4ad5-8cc3-69061ef2c499/1/uNI7HmwH5iry0ufrbeCJOwkRmrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:e6:bb:37:e4:8d:67:11:bb:bd:c9:81:45:0d:ae:7e:de:27:
0e:27:64:a9:58:56:7f:5d:e8:74:d6:4d:8b:1d:2d:38:37:f6:
ef:16:21:d7:81:5d:06:cd:cd:76:c6:77:c9:b0:75:75:54:e5:
d4:c0:c0:e5:4c:20:60:6d:d4:fc:30:2c:4b:f1:1a:9b:c2:7c:
da:72:b6:91:ad:70:e2:b4:f1:0c:fc:84:58:fb:e2:a1:05:30:
ff:97:a7:88:15:99:ec:38:fd:9b:74:36:bb:25:a2:46:a7:19:
2b:7b:a9:3e:27:e4:3e:d7:73:eb:3f:ab:cb:63:78:00:5b:41:
f1:d2:d6:61:ef:dc:a1:11:86:b9:4c:2e:49:18:53:38:50:44:
a8:3d:a5:51:2e:93:43:44:cf:1e:cf:87:98:40:50:1f:6a:eb:
97:09:0e:0d:9e:65:b4:1d:15:e7:b0:13:93:2e:b5:7e:a3:21:
d5:2b:c7:72:85:51:20:4c:15:eb:92:de:3b:7d:04:df:17:63:
96:0d:28:ba:f0:c6:62:6a:78:52:5e:e2:56:e0:f4:30:5b:54:
d4:73:83:1c:d9:2d:95:87:8a:6b:03:6a:2d:cd:64:76:e5:97:
58:6e:86:68:45:26:49:90:a9:66:ac:f4:1d:0a:03:f5:84:75:
9c:7a:88:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:37:38 2026 by rpki-client