Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: E/bZ4cE92VIBuGWX7CUWCcWhkobWdnKzdpKcnZ30/tM=
Subject key identifier: 7B:BE:55:73:BA:F2:52:94:FA:05:0B:2B:11:CC:54:EF:12:93:AF:D8
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019E20C862948BAE7E851DE433F634A46C76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 1912
Signing time: Wed 13 May 2026 10:01:03 +0000
Manifest this update: Wed 13 May 2026 10:01:03 +0000
Manifest next update: Thu 14 May 2026 10:01:03 +0000
Files and hashes: 1: WNLhBYjUN1zR5TVBXJo2aiV1U8c.roa (hash: xQP0Y6M+gzCsFwp7Dj6SvIC/NirJv1r5eTiIaCjYVtw=)
2: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: lv86eVMWzLnjkEAfIvcmtBwo34xsxOGEdyYiVMZnLeE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:62:94:8b:ae:7e:85:1d:e4:33:f6:34:a4:6c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: May 13 10:01:03 2026 GMT
Not After : May 14 10:01:03 2026 GMT
Subject: CN=7bbe5573baf25294fa050b2b11cc54ef1293afd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:87:8a:f5:bc:02:ec:e9:c0:ff:d1:e2:6b:
24:da:57:e5:a1:e9:1b:e4:16:c0:15:63:14:93:98:
07:3b:81:bf:e3:9a:59:ae:c0:97:4e:90:3e:72:79:
1c:e1:09:af:6f:d5:cd:9a:6c:a3:ea:a7:dc:91:fa:
d7:44:f0:ec:30:df:c3:27:a3:f5:6a:37:a7:7c:4d:
55:4a:1d:4c:77:1a:e2:30:e0:13:35:9e:66:ca:fb:
c7:6d:3c:54:a0:2c:12:2c:78:af:51:a4:cc:7a:78:
29:1d:da:a1:a2:cf:e8:c6:64:cd:d2:00:41:55:01:
be:13:db:41:d2:1b:c9:b6:30:46:e7:bf:f8:cb:46:
91:89:fc:e6:85:65:90:03:78:1f:87:5b:be:ef:8c:
f9:98:7e:27:93:41:ee:ff:cc:eb:83:8f:df:d5:08:
87:5a:77:e8:1d:a6:3c:74:15:11:9c:53:ad:3c:67:
dd:32:e4:2b:2a:bb:a2:32:1a:40:9b:d7:d6:26:04:
fc:17:46:27:7f:3e:7f:8f:7e:0f:5c:b6:56:51:46:
8d:8a:e1:21:f0:44:50:94:63:b7:02:58:c6:9a:b7:
3d:be:64:7a:de:f9:bc:12:0b:6a:d9:fc:77:67:15:
72:00:a0:68:8f:5f:64:d6:8e:e9:a7:40:c5:b2:dc:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:BE:55:73:BA:F2:52:94:FA:05:0B:2B:11:CC:54:EF:12:93:AF:D8
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:b3:67:97:b8:0c:84:84:fc:0b:8b:e9:44:ef:56:0a:dc:4e:
44:4f:c8:18:17:80:2c:19:4b:57:39:2e:67:2d:76:a1:6b:9e:
9f:6d:52:7b:1b:02:22:79:9b:59:f1:2a:8a:f4:a8:ff:ff:0c:
14:dd:39:7d:cb:00:6e:fb:30:a2:67:dd:06:2e:24:56:3a:d8:
c2:e9:04:1f:8f:0a:e5:a3:81:ed:0c:a9:f8:f1:14:53:8f:4b:
6d:b2:81:15:f1:29:1f:5e:ad:54:24:e1:2b:7a:12:b3:39:4b:
60:2a:c8:bd:0d:02:06:12:be:d8:b3:75:b6:bf:77:14:bf:ea:
5f:0c:ff:ce:ad:15:18:ff:76:27:f2:3a:c1:97:89:a4:77:5b:
65:71:b3:ba:46:45:4c:c3:a6:40:4b:32:c7:3e:ae:7e:86:1d:
52:b5:7e:52:91:00:1e:53:15:76:bc:25:60:31:79:f5:0e:5b:
8f:5c:0f:39:55:b3:f3:b6:cd:94:d0:6b:a5:61:45:aa:7d:c4:
2b:cf:52:41:d3:5d:1b:ba:3b:49:5a:e7:8c:45:a9:92:92:46:
b6:1a:3f:45:62:5e:63:24:8a:6f:e6:61:d9:dd:19:10:31:45:
bd:f5:19:21:b2:4a:02:ed:94:87:67:20:7c:ad:f0:f5:cb:d8:
7b:96:da:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:22:19 2026 by rpki-client