Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: tTh5fbMxfGPPWERapKoNJDujlSRCT2rNiHUcp/tcPkU=
Subject key identifier: 2D:2F:7C:94:75:7C:2A:F5:83:A1:07:DD:1E:9F:23:16:E0:8F:1D:B3
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019F935BB10B159B34AA5758D8CE35673A33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0D9F
Signing time: Fri 24 Jul 2026 09:01:27 +0000
Manifest this update: Fri 24 Jul 2026 09:01:27 +0000
Manifest next update: Sat 25 Jul 2026 09:01:27 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: Z4TG79iXGj+Iq7tvNE/xAGctxwskrb0FL8+CO5re+pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b1:0b:15:9b:34:aa:57:58:d8:ce:35:67:3a:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jul 24 09:01:27 2026 GMT
Not After : Jul 25 09:01:27 2026 GMT
Subject: CN=2d2f7c94757c2af583a107dd1e9f2316e08f1db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d9:37:da:0c:f8:0e:9d:58:30:ee:86:a0:d1:
b1:8c:76:c5:7c:75:5f:4d:da:ff:22:bd:15:cf:e4:
6e:89:ac:83:2f:d0:3a:04:d7:71:a9:6d:a2:1a:e2:
f0:61:4b:d4:42:b2:34:c2:05:c8:9b:2c:ec:3e:7c:
87:93:ac:73:53:e4:b5:1f:b0:a1:0c:9a:01:fc:55:
e4:72:cb:51:53:8d:19:70:d8:d8:e7:4b:c9:92:3c:
77:34:42:d9:db:5b:ad:1d:f6:3c:29:4b:c0:d2:95:
4c:96:35:04:46:75:43:c8:75:98:a9:0e:aa:2b:7f:
42:49:1e:59:71:e8:be:f8:d6:4b:41:5a:01:13:8c:
33:71:8b:6f:6b:ca:57:27:c7:7e:26:4c:0d:df:14:
5d:14:47:71:d2:63:29:2a:bc:d7:6d:a0:99:5d:bb:
24:d4:f9:aa:89:33:be:49:f7:30:64:c1:28:0a:a4:
b0:1d:c3:c2:91:16:6f:51:20:e4:09:41:9b:cd:25:
0b:ef:f0:07:eb:8a:83:13:c3:98:d3:71:f0:0d:e7:
7d:f8:fa:bb:11:9c:9e:d1:fe:79:96:5c:f0:56:62:
d2:33:09:d4:e6:50:82:f8:48:1d:5b:02:6d:eb:ab:
49:9c:e2:71:10:4d:f3:41:2c:e4:b8:18:07:02:d4:
a7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:2F:7C:94:75:7C:2A:F5:83:A1:07:DD:1E:9F:23:16:E0:8F:1D:B3
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e4:a6:04:2e:97:d1:79:17:1c:8b:2d:cc:b5:65:2e:44:d0:
cc:f5:59:ab:62:85:82:f0:55:87:9f:aa:17:1a:db:62:af:db:
df:4b:69:1b:81:1e:b7:e2:f6:60:56:89:2c:c3:80:fe:44:9c:
31:74:d6:4f:02:a7:2b:ac:d0:f6:68:31:76:51:f9:5a:5a:ee:
11:47:6c:ad:fd:61:e1:01:85:2e:f6:1a:63:37:11:ea:b4:4a:
89:12:74:8f:42:fb:96:7d:dd:a6:65:ca:d3:40:b2:be:43:69:
40:a1:a0:91:ac:6c:b8:e7:4d:f6:5c:bf:db:59:e9:62:fd:bc:
36:b6:1e:ae:0c:75:c4:0c:c9:70:06:de:cb:02:a3:3d:90:43:
66:ce:42:dd:a7:e2:20:e0:7e:34:9b:7d:aa:70:ef:85:29:30:
ce:9c:31:a5:00:cf:b0:d1:c8:c2:70:a8:c4:78:a1:6a:67:23:
92:66:5a:64:45:0e:63:81:59:09:c7:0c:ff:89:7d:9f:bf:65:
1a:42:e3:77:42:fb:36:09:94:9f:cb:f7:62:f4:f8:c6:ec:be:
7b:21:c1:ef:ae:80:49:21:a0:63:64:13:09:37:28:9e:08:39:
84:7d:fc:d8:f1:12:76:ad:d0:2d:c1:14:3d:ff:d9:2a:f1:26:
2b:59:f9:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:10:45 2026 by rpki-client