Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
File: UYqkmTdA34rTjZLMDBByNObfoFw.mft (raw, json)
Hash identifier: mTm4uDWoh++V1jHBfy1ojj6BsCgESsxJW7rKM6c7lq8=
Subject key identifier: C3:5A:30:1A:3D:23:C8:87:67:4C:04:FC:09:59:CB:50:2D:46:F1:00
Authority key identifier: 51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
Certificate issuer: /CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Certificate serial: 019FF948DDA28CBDAEB89BA8259D1C5D082D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
Manifest number: 19FA
Signing time: Thu 13 Aug 2026 04:02:09 +0000
Manifest this update: Thu 13 Aug 2026 04:02:09 +0000
Manifest next update: Fri 14 Aug 2026 04:02:09 +0000
Files and hashes: 1: 2i94ZuY5RqzqlX-gSjCu8vj-qbE.asa (hash: gi+NyJlUA+ulIOoyHfXiyv3PvckTspemiq3BV9plHVw=)
2: 8S8fbH48Zt1BGehjiX35Ir6CDR8.roa (hash: QGuQT9cDWohDuhPq0Uc6XDo1ZAygMT/59WjQcx/USTE=)
3: UYqkmTdA34rTjZLMDBByNObfoFw.crl (hash: OZ1+Nb19rrCPWR1oId0comHcf44z9mG9E0Z+zJoCOls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f9:48:dd:a2:8c:bd:ae:b8:9b:a8:25:9d:1c:5d:08:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=518aa4993740df8ad38d92cc0c107234e6dfa05c
Validity
Not Before: Aug 13 04:02:09 2026 GMT
Not After : Aug 14 04:02:09 2026 GMT
Subject: CN=c35a301a3d23c887674c04fc0959cb502d46f100
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:74:7a:46:9d:d9:72:ed:81:af:35:e9:cb:5c:
f6:5c:94:b1:96:37:fc:53:76:29:11:8b:0b:2d:2b:
3b:a0:35:56:c0:9a:34:0d:ad:2f:c7:f5:b8:81:1d:
12:7d:3d:2f:02:84:2f:24:a4:46:68:5b:89:29:0b:
aa:94:57:09:d0:fd:bd:13:9c:67:65:37:76:98:6b:
fa:95:35:77:55:a5:79:60:eb:4b:48:e8:39:a9:3f:
a5:03:c8:6f:07:28:e3:1d:7f:ef:dc:05:bb:47:0a:
1e:54:63:2a:d2:a9:ef:45:21:34:6c:72:26:c6:0f:
d7:e6:61:8f:60:e6:29:ac:e2:ce:4d:5c:c9:e3:33:
c6:81:66:10:99:7a:01:b5:b0:19:e9:aa:9d:b1:7f:
a8:6f:d1:1f:12:a1:d7:29:e3:51:e2:b4:6d:41:46:
03:53:37:06:df:01:11:6c:2b:37:0e:9c:ff:f2:13:
66:a7:33:e4:b5:9d:c6:44:d4:86:d8:f7:1e:cf:d5:
59:e0:13:fb:07:8f:f6:b0:68:0b:33:01:28:d4:37:
27:b6:3e:f5:c0:76:2c:97:c1:50:de:1b:01:cf:ac:
10:90:85:cc:c5:49:e3:a6:cd:54:b3:de:90:3e:c2:
ee:84:9d:06:41:05:b6:13:f5:14:54:2f:58:8b:62:
ec:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5A:30:1A:3D:23:C8:87:67:4C:04:FC:09:59:CB:50:2D:46:F1:00
X509v3 Authority Key Identifier:
keyid:51:8A:A4:99:37:40:DF:8A:D3:8D:92:CC:0C:10:72:34:E6:DF:A0:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYqkmTdA34rTjZLMDBByNObfoFw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1f75cb-c7b9-4529-bdaf-46c7974bd18a/1/UYqkmTdA34rTjZLMDBByNObfoFw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:a2:0c:7d:3e:c5:25:f8:3f:a7:8e:05:f0:50:ae:cb:c6:6a:
73:00:c2:bf:8d:3e:80:1b:0c:e3:e4:c2:a6:eb:4b:ab:98:ed:
3d:8a:b1:b2:19:0c:a5:c1:16:f8:19:09:b9:a8:0a:38:da:1f:
7d:4c:92:6c:2c:94:fc:87:e9:21:63:0e:cc:03:90:25:f5:71:
27:03:b9:d4:9c:c4:67:5a:4e:90:e3:db:31:60:5e:6d:0c:67:
3b:39:d3:28:b2:29:13:af:1f:60:f2:79:2d:59:9e:da:d2:f9:
7c:60:23:e2:3a:d3:1e:7d:fd:09:4f:12:fc:00:38:e5:c1:cd:
7b:00:0f:d2:a9:c8:9c:7e:23:1f:d5:a3:5a:dc:7a:90:fa:fa:
dc:9d:22:fd:32:23:4d:8d:18:63:ed:ec:b1:03:0d:49:b9:1e:
0c:10:a5:1b:aa:5f:fe:64:c4:1a:68:7a:cf:67:e9:ba:fd:2b:
6b:c1:6a:eb:2f:88:51:a2:69:11:07:1c:49:3c:7f:fc:65:79:
c8:8e:a2:c9:c3:d8:a8:16:02:c0:e5:bc:a1:39:67:e1:c4:83:
80:08:d7:6b:a9:b8:82:85:bd:7e:e1:52:67:a8:8d:42:45:36:
73:f4:6d:94:83:b5:51:9b:29:4e:25:b4:3b:bd:8a:2d:96:8b:
c9:17:1d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 09:01:47 2026 by rpki-client