Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: aV9FRjwhSSx0z1/nedMfgtRjjjHOnpn5puMoAPOBoYo=
Subject key identifier: 9E:FC:52:2B:ED:21:32:67:A2:3D:42:E3:2A:63:2D:AE:5C:4A:6F:B9
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 019FA0721616AA83CAA22E69057D269D33E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0A0E
Signing time: Sun 26 Jul 2026 22:00:59 +0000
Manifest this update: Sun 26 Jul 2026 22:00:59 +0000
Manifest next update: Mon 27 Jul 2026 22:00:59 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: GYkAYH4GlgFxJb3HfEIiU4VdRLs.roa (hash: mPmyrDhwtpph0YzGy8Rd73AkujDJmoGuUoDG6KNajn8=)
3: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: jILxqj0RXdRJuPH8+Nq/NcqQhcTwm82C7OisyJJOGXs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:72:16:16:aa:83:ca:a2:2e:69:05:7d:26:9d:33:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Jul 26 22:00:59 2026 GMT
Not After : Jul 27 22:00:59 2026 GMT
Subject: CN=9efc522bed213267a23d42e32a632dae5c4a6fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:6d:cf:e8:60:82:ae:44:d5:75:b2:cc:31:76:
8e:8d:2c:87:2c:42:b4:2c:94:47:07:ce:37:79:6b:
7d:0f:7f:f8:02:c8:20:c3:c2:08:f8:b1:d7:a3:2e:
42:eb:dd:85:21:dc:f1:c3:82:c2:f4:af:ed:c9:3e:
be:f5:2c:60:db:e2:11:0d:cf:cf:82:2a:59:17:34:
da:e7:f4:b8:df:97:d8:a7:b8:b9:e3:db:14:c7:c8:
93:fa:14:5c:8e:ef:18:9a:6b:ef:c9:42:93:45:88:
cc:05:aa:38:c8:82:45:7d:43:d0:3e:cc:da:bf:0c:
bb:8a:3b:46:97:80:f7:0f:9f:08:ed:b8:56:90:e2:
c8:73:b6:87:44:eb:fa:84:ec:ed:a6:a1:8b:68:f3:
cb:df:7e:d6:ef:9f:25:aa:d5:ee:19:e8:84:7a:79:
a0:8f:22:be:02:4c:26:f2:dc:39:9a:3c:b7:93:90:
e7:83:81:9e:3a:13:ef:2f:d6:57:c3:fa:e8:c4:e6:
a8:98:92:0c:c5:7e:e5:eb:dc:96:31:7a:52:95:8d:
d2:1e:99:04:be:bf:e4:35:12:ab:0b:41:5f:84:77:
1b:80:20:68:d5:40:e1:3a:b4:08:66:b9:a2:43:f9:
2c:22:a8:d5:f1:8f:b2:15:22:94:bd:9e:2b:85:94:
b0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:FC:52:2B:ED:21:32:67:A2:3D:42:E3:2A:63:2D:AE:5C:4A:6F:B9
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:fe:2a:14:4a:7f:79:8b:13:07:b7:9e:c3:98:c2:3a:00:6a:
f6:95:db:08:82:1f:e0:b8:0e:4b:d5:6b:ee:b5:28:8e:93:db:
60:04:3a:2d:45:9a:4d:d2:08:2f:d0:40:1a:19:30:84:92:62:
a5:80:58:b3:79:84:63:38:d0:19:2a:81:16:0d:05:6c:1d:89:
41:95:d9:0e:49:04:e6:e7:80:b3:7c:d9:ca:b4:9b:4f:f5:bb:
5e:e9:6b:3a:52:a7:b4:0e:4c:f6:a6:2b:23:92:82:84:a4:56:
74:13:43:db:8d:89:fd:c3:8e:a8:4f:12:29:d4:21:3c:f5:83:
55:71:65:bb:f2:da:bd:70:79:f5:c5:41:16:0a:cb:7e:a9:a2:
bd:9e:3c:eb:b8:2c:c8:1a:f5:fe:9c:26:44:89:83:b3:f7:95:
ea:dc:9c:07:96:72:39:f3:44:80:83:ec:0f:36:3a:b7:53:9e:
fa:af:a5:b7:a4:21:ba:58:75:ca:5a:42:90:aa:d0:3a:65:d6:
e9:a6:89:7d:d3:c7:45:34:6c:16:d7:bc:57:6f:a6:37:4b:30:
a2:a6:fe:f9:8f:76:1a:bf:7d:53:e0:15:a7:c9:b7:63:2f:43:
3b:6b:ea:60:99:c6:c0:2f:14:97:76:29:33:ff:24:14:74:71:
02:3d:b5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:06:54 2026 by rpki-client