Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: hM8SFY14/sP/HMxY9k+96lRqlCA4LsULc+7Vuhaj39I=
Subject key identifier: 2E:39:AB:49:51:4E:14:CF:A7:6F:27:5B:84:EB:A1:42:BB:A0:73:13
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019F826780FCF6FE92778048C71C1E287689
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 04A1
Signing time: Tue 21 Jul 2026 02:00:49 +0000
Manifest this update: Tue 21 Jul 2026 02:00:49 +0000
Manifest next update: Wed 22 Jul 2026 02:00:49 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: GyGQaix4VUn4k6Bs21kBOn8DCpeF85o3GZjTB2vuEVQ=)
3: n5blPzAxj6urB6U69h-1_6oKGxM.roa (hash: wVHabnnbMu4awX0MmEHsebkGh6JiyzOhJKMjTxirSzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:67:80:fc:f6:fe:92:77:80:48:c7:1c:1e:28:76:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Jul 21 02:00:49 2026 GMT
Not After : Jul 22 02:00:49 2026 GMT
Subject: CN=2e39ab49514e14cfa76f275b84eba142bba07313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:10:5a:ec:00:76:52:f2:89:f9:d4:03:1c:fe:
53:8b:5b:be:aa:65:b3:80:76:14:ff:47:e2:87:17:
2e:5a:ed:d6:df:2b:dd:96:58:8a:6e:e2:b4:43:2a:
41:a2:3f:96:0a:de:8e:89:7a:87:97:2f:11:64:71:
fa:8c:58:c9:20:3f:80:d8:00:91:58:bb:07:ee:6e:
71:8d:9e:f4:f7:d3:c4:12:48:49:39:15:7b:5b:0c:
52:84:dc:e1:0c:cb:4e:88:91:83:5c:c4:a1:b0:55:
5e:63:f8:dc:54:6e:17:43:85:12:f7:13:6c:bc:a8:
ea:be:eb:2a:aa:1b:5b:f9:f4:b6:87:89:ff:30:51:
a7:d0:8b:50:b1:51:be:bc:eb:20:f2:d1:c4:4e:2e:
30:21:ed:65:88:3b:8d:ad:7c:24:bc:23:df:c6:bf:
8c:65:7b:64:47:78:30:b5:9e:b0:64:1e:06:ad:6d:
d4:71:13:3e:2c:73:e7:80:7c:ef:31:2b:02:51:42:
1a:bd:e1:9c:f4:5f:cb:fe:bd:6b:9e:ba:22:f1:cf:
58:bd:ca:e0:d3:b0:ef:10:e0:10:a7:de:fe:92:95:
f2:da:37:0b:c4:b8:eb:50:7e:b4:df:32:80:30:96:
a5:65:74:b0:4c:70:1a:2e:da:bf:bd:d3:b2:ae:32:
bd:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:39:AB:49:51:4E:14:CF:A7:6F:27:5B:84:EB:A1:42:BB:A0:73:13
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:06:34:57:ff:38:ff:ac:cf:b7:ba:3d:de:81:1c:e6:f2:c4:
9f:63:23:1e:50:36:2d:45:4d:14:2f:a2:17:dc:5c:b3:cc:72:
79:26:59:86:0f:e0:be:e0:a7:e2:30:08:3a:95:c6:48:8e:54:
1c:6e:15:31:f7:90:4c:fb:af:bf:56:34:2e:23:ff:bf:ce:b0:
98:a6:de:0c:67:d0:ea:a0:6f:e0:f0:3f:75:b1:95:88:97:d2:
8a:c8:1b:54:2d:91:f7:39:74:2d:2a:1c:6d:1c:3a:11:ef:d1:
d1:0a:b5:9f:cf:53:aa:0d:f7:c9:62:25:c9:f7:23:af:5c:43:
19:2a:d7:99:a4:48:99:dc:7a:2f:d7:48:cb:04:10:c8:70:8b:
ee:82:14:94:6c:87:17:12:8e:d6:b5:f8:91:a1:78:d5:d5:fd:
d2:c2:8b:95:1d:61:e1:eb:14:ec:a0:b0:67:3a:4c:ab:30:cd:
c4:06:3c:ad:80:38:f6:28:61:b6:29:23:7a:57:5d:ff:16:d5:
f0:99:b8:a8:67:a6:3f:ec:05:38:27:81:c4:9f:37:26:93:92:
9c:89:14:1c:53:61:80:bf:f2:ab:b2:33:ff:d3:97:63:0b:f0:
c6:04:ae:3c:78:4e:4b:7d:d7:03:63:7f:9d:1e:9b:e2:c3:6a:
64:e8:fb:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:50:42 2026 by rpki-client