Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: zpxvE9jQYbAvw3c/h+KWk+btbdRK7+RnE5hfpZDXosw=
Subject key identifier: 32:B4:C9:0D:33:DD:3F:1F:2C:86:1F:51:0F:DB:4C:EA:DC:55:2A:1C
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 019F1BD66DE74FF6733F85BDE83CEDC8F068
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 198A
Signing time: Wed 01 Jul 2026 04:01:05 +0000
Manifest this update: Wed 01 Jul 2026 04:01:05 +0000
Manifest next update: Thu 02 Jul 2026 04:01:05 +0000
Files and hashes: 1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: 22pJxe7IxpEH9FsuETaMkexEdIzCHvPbElgZG61Kd/U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1b:d6:6d:e7:4f:f6:73:3f:85:bd:e8:3c:ed:c8:f0:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Jul 1 04:01:05 2026 GMT
Not After : Jul 2 04:01:05 2026 GMT
Subject: CN=32b4c90d33dd3f1f2c861f510fdb4ceadc552a1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:74:a7:48:17:20:eb:bc:fe:37:f0:ab:82:2f:
6a:bd:5f:41:4f:0b:0d:58:e3:63:91:39:99:a8:be:
37:34:aa:28:50:c2:01:43:05:71:70:92:cf:1d:80:
c1:36:b4:04:21:07:67:85:63:66:6b:54:df:9e:30:
46:30:fd:a4:d3:f8:e1:5a:a8:b1:73:67:4b:c8:a7:
4f:2c:cc:95:20:19:21:48:3b:9c:4b:7d:50:17:5d:
e7:67:92:ec:a8:62:84:e7:80:11:c0:14:2d:54:fd:
20:36:9a:b5:c7:6a:16:75:49:b7:84:d2:3f:af:35:
54:59:fe:30:fc:29:5f:1f:b7:ff:8a:04:5a:1c:b4:
3e:f6:6d:83:88:c6:2e:c2:05:16:8c:ed:6c:60:d3:
d3:04:ed:c0:07:4e:00:f8:85:20:79:e1:f0:df:0e:
96:bd:f2:cc:37:a0:ba:e8:1b:3e:d8:fb:93:d4:68:
d8:29:f9:7e:2d:86:28:ed:98:89:bf:71:e1:56:2b:
f1:bd:a4:2a:6a:b3:b9:c8:98:24:e0:b2:f0:60:91:
92:cd:09:0b:c7:1b:21:bb:89:95:7b:99:de:c6:9e:
b2:2d:d4:6d:7d:d5:0b:a3:58:46:7a:0f:cf:58:c8:
a1:bb:da:b5:4f:d9:c8:74:a8:11:52:d2:72:d8:76:
4c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B4:C9:0D:33:DD:3F:1F:2C:86:1F:51:0F:DB:4C:EA:DC:55:2A:1C
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:8e:6a:37:99:b6:e8:d8:26:d2:f4:4c:bf:e9:db:e2:6d:fa:
e7:3c:9c:bb:48:60:7a:4a:6d:22:cb:81:d8:b0:36:d1:bc:72:
1c:7f:d7:d0:4f:fe:fc:ab:17:b7:57:e8:b5:27:66:c0:f5:82:
cf:2e:bb:30:c9:b4:79:49:e3:37:ba:d4:27:0e:5a:8d:d5:90:
26:73:c8:9c:18:2e:e7:60:d2:06:70:f4:35:f0:07:44:e1:ee:
bc:4c:e0:cb:65:c1:34:90:87:dc:ec:d6:51:a0:36:9e:48:38:
69:fa:04:3e:52:24:bc:03:6f:fd:57:ca:7c:91:e8:c0:a2:86:
11:db:55:60:cb:26:f6:d3:e9:c8:5d:a5:06:6e:38:18:cc:4b:
47:2a:d8:1d:35:d4:ec:99:45:4c:43:b8:88:ab:36:03:c4:b1:
bb:38:69:83:ab:6d:f6:11:cf:61:f1:20:d9:68:87:e2:7e:85:
4a:50:c2:dc:30:e9:81:1c:0f:c9:80:c7:e6:2b:3a:73:ec:dd:
1e:34:3a:3d:4b:75:8f:50:79:77:d9:ba:66:bb:f2:f2:65:96:
bd:da:11:ec:83:6b:22:55:be:60:ff:9b:58:5b:91:8f:5c:d9:
d2:be:37:d1:48:51:70:8e:17:fd:38:0a:4e:83:08:11:46:64:
78:3b:49:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 09:02:52 2026 by rpki-client