Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier: AKS17FFZnejcELivC8apJyRFNUW3pqp53NOAZ4C01+0=
Subject key identifier: 50:F6:23:F5:CB:1A:63:DD:69:2E:5B:6E:97:F1:2A:2F:3A:9F:F2:F0
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 019F965BF1E9BC64AF242E0E30A128F0EE2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number: 1999
Signing time: Fri 24 Jul 2026 23:00:35 +0000
Manifest this update: Fri 24 Jul 2026 23:00:35 +0000
Manifest next update: Sat 25 Jul 2026 23:00:35 +0000
Files and hashes: 1: DAVFmZnYiqZx6KzJWbCmA5KUHHM.asa (hash: lwO6KNsDsUK02umvIhUrsPYfieazcxy0SsotATnRRFA=)
2: sxw94R-8dpDBFwr_QuU2x8m1Z70.roa (hash: nGqPu9eVja8tiL5hL0aJIPFGTLc3iJ+u/5CYg63lyAY=)
3: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: iK437zAi3NjKLSgXs+3VWaotkb+hHQCyZyjkFdYNT8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:5b:f1:e9:bc:64:af:24:2e:0e:30:a1:28:f0:ee:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: Jul 24 23:00:35 2026 GMT
Not After : Jul 25 23:00:35 2026 GMT
Subject: CN=50f623f5cb1a63dd692e5b6e97f12a2f3a9ff2f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:75:b8:84:4f:d0:4a:fb:14:35:d7:41:7c:cc:
64:b7:0d:06:8b:9f:88:f8:bc:ac:8b:cf:08:cc:06:
18:03:2a:e8:0b:5a:f8:00:49:80:69:7e:e2:d7:17:
48:fc:92:b6:2f:e7:bb:f1:85:19:31:0d:4f:53:11:
7a:41:50:07:be:f8:47:de:5c:38:e4:3c:04:69:6c:
69:10:cc:ef:b9:51:3a:e2:39:e3:f4:e4:74:c6:af:
5d:8e:63:2a:55:ff:7c:fb:2a:35:d3:63:90:25:c3:
16:bd:7c:29:2f:b6:69:de:07:dd:9f:ab:84:da:b6:
20:15:b8:69:b2:8d:e9:da:bc:26:6e:4c:9c:bf:ea:
38:a2:2d:0b:75:49:d3:cc:d2:5c:49:f9:6b:76:a1:
22:9f:1d:38:9d:a9:3f:76:fc:4c:85:a7:d8:33:1b:
ed:25:ca:ac:ff:df:0e:25:54:5e:9d:a5:02:94:2d:
1b:4f:e6:d5:9e:1b:63:6d:a6:57:b9:68:5e:d3:a9:
98:24:29:91:28:fb:f1:e1:e4:b1:5e:7f:db:03:2c:
36:d1:9a:09:40:f5:e6:21:75:62:a6:0e:bf:a3:6a:
0d:11:91:d6:5a:99:6b:e1:9e:f7:d6:37:3a:c6:9e:
d6:02:8d:7a:a8:4e:bd:d9:95:5e:bd:21:be:47:57:
fc:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:F6:23:F5:CB:1A:63:DD:69:2E:5B:6E:97:F1:2A:2F:3A:9F:F2:F0
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6f:2c:ed:50:41:77:d0:33:51:75:c7:3e:96:20:27:7c:2b:
f4:d2:c1:fd:2b:2c:65:9c:d2:c3:cf:a5:f0:6e:17:37:5b:b4:
d2:03:78:97:c8:c2:9d:b1:24:e1:6a:97:68:81:66:3d:31:71:
e3:e0:0f:49:19:18:33:f1:31:e9:1d:bd:46:8c:6e:3e:9c:7b:
2a:ad:2b:be:a8:85:be:3e:0e:70:f7:a9:74:37:f5:58:41:48:
9c:9c:e0:32:b9:07:e9:62:08:b1:17:ed:da:86:dc:cb:2d:be:
45:c0:a9:25:7a:e8:bf:78:e7:c0:66:3a:76:ba:9d:0e:00:b3:
9c:fa:4c:75:64:c4:eb:e9:ea:9a:49:43:2b:f7:90:89:25:e9:
47:cf:b0:d1:65:fc:09:3f:ad:56:8e:00:5b:64:03:9f:6f:3c:
78:9c:e0:cc:15:9e:4f:25:ca:20:fc:57:35:b0:07:6c:6e:8d:
09:04:0d:4d:0e:e2:0f:78:d3:4f:39:b3:c9:ce:35:7c:b0:73:
cb:b8:b0:60:57:ae:25:2c:89:7c:7d:e8:9b:5c:89:14:2a:55:
bf:57:ae:0f:1a:15:2f:cf:ff:10:22:1e:51:c0:7b:13:f2:bc:
3b:0f:b3:41:11:e7:19:b9:c2:97:2b:3b:97:77:a4:1a:a7:cc:
d4:78:25:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+WW/HpvGSvJC4OMKEo8O4vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4ZmFkYTg3YTc2ZjI5ZjgyZTI1YTMxNzllN2EzOGNmMGM2
YjAzMDAwHhcNMjYwNzI0MjMwMDM1WhcNMjYwNzI1MjMwMDM1WjAzMTEwLwYDVQQD
Eyg1MGY2MjNmNWNiMWE2M2RkNjkyZTViNmU5N2YxMmEyZjNhOWZmMmYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA83W4hE/QSvsUNddBfMxktw0Gi5+I
+Lysi88IzAYYAyroC1r4AEmAaX7i1xdI/JK2L+e78YUZMQ1PUxF6QVAHvvhH3lw4
5DwEaWxpEMzvuVE64jnj9OR0xq9djmMqVf98+yo102OQJcMWvXwpL7Zp3gfdn6uE
2rYgFbhpso3p2rwmbkycv+o4oi0LdUnTzNJcSflrdqEinx04nak/dvxMhafYMxvt
Jcqs/98OJVRenaUClC0bT+bVnhtjbaZXuWhe06mYJCmRKPvx4eSxXn/bAyw20ZoJ
QPXmIXVipg6/o2oNEZHWWplr4Z731jc6xp7WAo16qE692ZVevSG+R1f8yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFD2I/XLGmPdaS5bbpfxKi86n/LwMB8GA1UdIwQY
MBaAFLj62oenbyn4LiWjF556OM8MawMAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9hNTZiMmQtZjc5NS00OTVkLTljNDgt
NmY2N2I2NDc3MjJkLzEvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9hNTZiMmQtZjc5NS00OTVkLTljNDgtNmY2N2I2NDc3MjJk
LzEvdVByYWg2ZHZLZmd1SmFNWG5ubzR6d3hyQXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ28s7VBB
d9AzUXXHPpYgJ3wr9NLB/SssZZzSw8+l8G4XN1u00gN4l8jCnbEk4WqXaIFmPTFx
4+APSRkYM/Ex6R29RoxuPpx7Kq0rvqiFvj4OcPepdDf1WEFInJzgMrkH6WIIsRft
2obcyy2+RcCpJXrov3jnwGY6drqdDgCznPpMdWTE6+nqmklDK/eQiSXpR8+w0WX8
CT+tVo4AW2QDn288eJzgzBWeTyXKIPxXNbAHbG6NCQQNTQ7iD3jTTzmzyc41fLBz
y7iwYFeuJSyJfH3om1yJFCpVv1euDxoVL8//ECIeUcB7E/K8Ow+zQRHnGbnClys7
l3ekGqfM1Hgl0A==
-----END CERTIFICATE-----
Generated at Sat Jul 25 00:49:58 2026 by rpki-client