Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: 4ozA5Lb6SA6HigKsqz7rz/iEUIsWD96WxNnnjb9q2/U=
Subject key identifier: 1F:E2:2F:C9:A5:AF:19:12:F6:60:C9:0E:20:A6:27:B6:DD:8B:95:9D
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 019F913568A5BBFBCAFB1791B2248D0DBFD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 19C5
Signing time: Thu 23 Jul 2026 23:00:24 +0000
Manifest this update: Thu 23 Jul 2026 23:00:24 +0000
Manifest next update: Fri 24 Jul 2026 23:00:24 +0000
Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: NfERZ+Db95VrvCk26shXhMC5JQeGHCqn97AVXcebNBk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:68:a5:bb:fb:ca:fb:17:91:b2:24:8d:0d:bf:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Jul 23 23:00:24 2026 GMT
Not After : Jul 24 23:00:24 2026 GMT
Subject: CN=1fe22fc9a5af1912f660c90e20a627b6dd8b959d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:81:92:71:be:d9:b7:3d:5a:61:ff:3f:b0:ad:
25:45:64:23:2c:38:6b:fa:2a:26:bd:74:1c:9a:68:
5a:ab:18:7c:89:bc:04:8d:09:fb:53:ee:02:60:27:
aa:d1:b5:8e:a3:5d:9c:42:d7:7f:3b:6a:62:af:87:
b0:30:a9:56:b9:55:88:c8:06:08:db:52:d2:7d:84:
9e:6c:39:78:fa:91:85:14:8d:12:77:15:47:d8:a0:
db:9f:de:dd:b8:7f:fb:db:02:8c:bb:e0:f8:f9:e1:
50:ab:0c:19:6b:d2:06:c7:ed:ec:05:ac:98:84:bc:
b2:87:2d:c4:e6:3c:e2:0a:02:85:25:fd:a3:1a:70:
5f:43:89:6a:5c:6e:c0:ca:4f:cb:83:ce:d3:6f:ee:
e7:d1:a2:37:c8:b9:28:d8:10:4d:e4:56:c1:68:76:
af:e4:5a:b8:fa:9b:63:8c:d8:aa:be:3f:2f:9b:c5:
20:f4:77:b3:bd:0e:c4:80:d5:1d:f8:ec:95:fc:94:
9d:3f:fa:7e:1f:90:94:17:2d:00:b1:90:37:db:84:
c3:ed:a8:81:4e:15:b7:ce:b7:01:fe:fc:f0:c9:40:
25:9c:07:8b:81:2e:ec:34:93:50:19:07:06:26:39:
a3:2f:99:b8:e0:c0:5f:04:57:be:c5:66:ad:a8:0b:
02:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:E2:2F:C9:A5:AF:19:12:F6:60:C9:0E:20:A6:27:B6:DD:8B:95:9D
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d1:c8:ac:db:20:98:33:b0:26:1a:a2:06:59:06:85:c7:14:73:
6e:68:e4:5b:e5:1a:91:6b:d8:bd:d1:dc:de:8b:db:c2:03:71:
4d:08:ba:7f:4f:c9:1a:17:af:ed:b4:cc:60:59:be:c4:d2:71:
73:44:d2:79:8b:99:aa:b3:10:48:41:3a:93:6b:b7:7a:ce:76:
f6:ca:13:38:68:f2:c4:eb:66:f5:af:0d:47:82:07:94:4b:39:
f7:6b:4c:4a:f0:55:9b:a3:ac:5c:77:da:ef:25:e0:9d:11:53:
20:3a:c5:5d:96:16:ee:07:27:18:52:10:d1:40:56:bd:59:ca:
27:49:a0:ad:0c:c3:b1:a9:98:c7:24:15:86:be:74:da:fa:1f:
25:fa:1d:4b:22:ae:f3:51:97:5e:0b:39:48:4d:e5:65:80:10:
ea:5a:2d:5f:e1:32:2a:b9:54:dc:13:87:a6:f0:2b:b1:32:95:
ea:d2:d8:bd:c2:50:91:8a:cf:54:43:fe:09:e4:97:dd:25:a6:
50:4e:7f:98:dc:e9:47:e2:37:cb:a8:53:7a:3c:e4:7a:df:92:
1f:01:58:f4:96:bb:7d:ec:47:7e:02:41:84:93:cd:3a:1f:13:
44:a4:e4:98:cd:93:11:8f:d9:ff:f1:3d:1f:55:35:a7:57:16:
48:d9:ea:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:43:37 2026 by rpki-client