Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
File: UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft (raw, json)
Hash identifier: uAvcSenj0cHI4DKQ0elU7zh3U2kXUgJhgRimvI4MWXc=
Subject key identifier: A0:6C:D6:0E:F8:C5:37:44:A3:6F:A5:96:EE:D6:E8:1B:63:6B:30:C5
Authority key identifier: 51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
Certificate issuer: /CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Certificate serial: 019F85D5EC1A7B7E59BFCA3081A4A7BD719D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
Manifest number: 1127
Signing time: Tue 21 Jul 2026 18:00:17 +0000
Manifest this update: Tue 21 Jul 2026 18:00:17 +0000
Manifest next update: Wed 22 Jul 2026 18:00:17 +0000
Files and hashes: 1: UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl (hash: nOyZEvYZFFKI7Dok10RA6H9nDU92+0ubpt5ZuBqCnbY=)
2: WrNQoDwnfoyel6qkeQLmIfknMe4.roa (hash: Zl9GWfOo6FfCVlawFyOWUS5iFXY5ABm6XsSvvOB7V1M=)
3: idlOCTZeLer70Tvy8HG_eFHIj_A.roa (hash: OxjINEWNa+j5OovsQN+Iq8z65GnsnPtmn9axTiZoZlM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d5:ec:1a:7b:7e:59:bf:ca:30:81:a4:a7:bd:71:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51326fabb1256fa02277e5ee034b7991ff3185a5
Validity
Not Before: Jul 21 18:00:17 2026 GMT
Not After : Jul 22 18:00:17 2026 GMT
Subject: CN=a06cd60ef8c53744a36fa596eed6e81b636b30c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:53:7c:ad:e0:f6:c2:c1:7c:e0:c0:db:7e:6b:
cb:75:6c:de:8e:fe:de:d0:26:04:9d:53:f0:63:27:
bc:41:62:94:82:36:a2:12:dc:65:52:24:07:0a:85:
c5:fa:2e:d8:39:2d:80:3b:d6:17:2c:fd:8f:a9:64:
4f:b6:30:7e:d6:f9:de:14:86:67:f0:1f:54:55:a0:
d4:05:8a:e1:06:c3:bc:68:e6:91:45:c1:0a:1a:3d:
ce:3a:79:ec:83:86:78:78:2d:22:9e:5b:44:39:cc:
1a:88:1c:05:16:ab:05:84:fb:cb:a6:ef:96:2e:b5:
1f:b0:21:8d:1e:42:53:5f:90:c9:1c:24:df:63:7e:
4d:00:23:9f:af:47:c6:ea:e1:4c:93:5b:26:c0:e9:
7a:8e:fa:11:18:69:d5:05:50:57:75:1d:66:01:62:
59:6a:fc:ce:48:12:19:4c:09:40:71:be:04:a5:0a:
ae:46:69:a5:a2:46:64:0a:8c:1e:a5:0a:96:21:a1:
58:c3:21:73:63:09:24:a4:00:c9:f5:aa:7f:78:ad:
8b:f7:72:cd:21:c9:64:20:aa:4c:79:8c:0c:e4:21:
f8:9e:09:92:99:ee:71:d5:32:ef:8d:69:56:44:56:
aa:c9:c4:27:57:1c:04:01:81:93:31:9c:23:e5:00:
6a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:6C:D6:0E:F8:C5:37:44:A3:6F:A5:96:EE:D6:E8:1B:63:6B:30:C5
X509v3 Authority Key Identifier:
keyid:51:32:6F:AB:B1:25:6F:A0:22:77:E5:EE:03:4B:79:91:FF:31:85:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UTJvq7Elb6Aid-XuA0t5kf8xhaU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/bd6f18-ea7d-43c4-9c85-87a3f3b31150/1/UTJvq7Elb6Aid-XuA0t5kf8xhaU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:64:3c:b5:d8:74:9d:00:01:f4:63:fb:5e:78:c3:b2:4c:60:
a7:d2:be:f9:94:c3:3f:0e:a6:dd:29:0a:54:16:48:23:e4:9b:
26:69:53:37:29:9e:9f:f9:ab:d5:2b:cb:8f:8e:89:c2:be:e1:
20:ef:a4:f0:85:b2:30:d1:95:b2:f6:30:4e:82:2b:7a:fe:12:
c2:27:da:e0:78:78:ec:05:fc:62:6a:5b:6c:84:92:5f:0e:4b:
a1:13:be:45:3a:fb:c5:83:d9:e2:04:c6:99:e3:f6:55:5e:49:
81:33:98:89:6a:1d:2d:6b:17:5c:25:f5:d0:be:ae:77:04:48:
01:6c:42:af:07:77:5b:76:1d:03:28:92:35:52:0f:77:b4:1c:
1c:0e:fb:cd:a4:70:a6:7c:34:e4:ab:46:1e:be:f7:12:dc:45:
c7:d1:5a:10:9c:cf:20:7d:9a:2d:aa:9f:a8:c2:a2:1b:64:bc:
c6:d0:f4:3d:dc:65:78:be:66:7b:f6:56:1a:c3:71:f7:7d:2f:
7d:4f:fd:06:8a:31:0b:47:29:51:20:20:e3:64:7d:12:c7:49:
6e:d8:aa:06:5a:c5:ed:2d:1f:ee:96:10:a6:81:68:6b:26:4a:
0c:e9:ed:ef:e3:24:a1:74:0f:3d:bd:fd:e1:0b:4e:17:6d:06:
55:fd:8d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:22:32 2026 by rpki-client