Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
File: uakKhVIqpjnVeIL_2X2xpN2BELg.mft (raw, json)
Hash identifier: PYQc0u1bgm+jD1T7WODO9bCrzWJU3xUNVGHpwDAiZrY=
Subject key identifier: 0B:94:18:32:32:E7:2D:11:5E:B9:2B:F9:F0:DF:44:50:37:11:5E:8E
Authority key identifier: B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
Certificate issuer: /CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Certificate serial: 019F8FB4DE219F0106B9D43E78FA646C0FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
Manifest number: 0296
Signing time: Thu 23 Jul 2026 16:00:22 +0000
Manifest this update: Thu 23 Jul 2026 16:00:22 +0000
Manifest next update: Fri 24 Jul 2026 16:00:22 +0000
Files and hashes: 1: CsUMxPPZn7BWvRnMzKtwzumQlaI.roa (hash: s5cU5GsIZAY3fgBBTrdExxW/NI8apbM5B4zmDqtjvSE=)
2: q-jGore8m3Vj_5C7Ap3AXDg-4xE.asa (hash: ZNqsv7+pLU9fdFw+/1KeKKfY+X5+aMAfnSdQ+ZxMr4c=)
3: uakKhVIqpjnVeIL_2X2xpN2BELg.crl (hash: YHFnZ8qiU4n5on8k196eXr5UI3V4kNNx3lKRcPXDpRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b4:de:21:9f:01:06:b9:d4:3e:78:fa:64:6c:0f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Validity
Not Before: Jul 23 16:00:22 2026 GMT
Not After : Jul 24 16:00:22 2026 GMT
Subject: CN=0b94183232e72d115eb92bf9f0df445037115e8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:8e:51:3b:36:a9:09:01:63:ec:d1:4a:ae:67:
ca:5f:64:e2:03:a8:06:13:73:1c:0d:0a:c4:a5:2c:
79:4a:b6:a7:e4:d7:5e:a3:81:94:29:b0:6b:12:29:
07:e2:c1:7c:41:e9:86:f4:33:a8:89:9c:bd:1e:10:
a4:b6:8e:39:67:ad:f6:27:1d:f8:e9:43:02:2b:67:
fd:55:7f:a5:db:6b:c2:e1:a2:36:c2:19:43:4d:92:
55:5b:89:ea:d6:a2:e9:ee:1f:d0:6a:a3:1c:7b:5f:
d6:2b:36:53:ef:81:76:bb:ae:8c:9e:f8:5c:a7:0b:
bd:5c:a1:8e:3b:19:22:10:fe:7c:6b:26:79:1b:1f:
4b:a6:58:88:12:47:10:f4:35:ca:fa:cb:63:88:ef:
19:1d:2b:1f:6c:21:95:4c:45:35:24:ee:42:ba:fd:
f1:05:33:97:7d:76:94:d0:50:23:1f:98:3f:74:49:
e6:b5:42:83:55:18:60:10:8f:dc:1a:e7:77:47:8b:
ac:00:98:79:e9:e5:b0:95:3d:31:4c:e2:2b:a7:62:
e7:8c:8f:4e:de:e6:fc:71:37:72:3c:f2:d0:6e:9e:
6c:70:88:82:de:ef:7f:b9:15:98:71:8a:51:e3:5a:
56:a8:5b:e0:52:5f:d7:4a:a7:11:37:7f:51:ad:14:
99:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:94:18:32:32:E7:2D:11:5E:B9:2B:F9:F0:DF:44:50:37:11:5E:8E
X509v3 Authority Key Identifier:
keyid:B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:47:fb:1f:4e:e7:e1:ec:89:2d:d7:52:f1:99:de:37:50:3f:
f8:01:db:8b:6b:43:bd:0e:34:62:bc:cd:83:85:b3:89:08:37:
7e:f0:53:2a:a5:19:20:7e:f1:ba:2c:92:e4:67:8f:6e:3c:5a:
f7:cc:22:1d:bb:f7:eb:62:47:1d:06:7c:db:be:d6:5a:e9:62:
1b:14:be:15:24:81:10:2c:31:be:8d:8e:08:a9:67:d3:b1:9e:
5f:91:1e:99:cb:ab:50:f0:87:3f:c2:e2:83:37:de:a2:76:98:
4c:5e:e1:be:69:c3:70:e1:3d:a9:d2:95:d7:62:8f:30:5a:7e:
28:51:c4:4f:9b:85:ec:eb:6e:62:cf:ec:1b:be:0a:c3:1b:3e:
f2:d4:2b:a4:29:da:4e:b2:70:f4:1b:a1:a3:4f:95:fe:dc:68:
83:36:1f:f3:6e:fd:1d:91:d4:3b:b5:fb:4d:7e:7a:e8:78:5c:
dd:db:bc:06:d8:0d:ca:81:bc:5d:0d:ca:a1:5e:aa:df:1f:3b:
50:76:a7:14:49:f0:34:0c:0b:96:aa:4e:2d:bd:8f:3c:df:85:
17:02:ab:72:89:12:67:a9:2c:21:3a:43:f0:82:f8:09:71:1d:
c2:65:91:4b:67:8a:e8:c3:50:d5:bf:0e:31:ef:a2:20:75:bd:
3b:6c:56:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:10:11 2026 by rpki-client