Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: gv11yC4UMxGRhQwI0MuHU5uTkCoeLolFrkFV6aSVw2E=
Subject key identifier: 39:83:92:1E:11:49:CA:C3:6B:F3:CF:DF:C1:8C:6B:C5:01:1E:2D:92
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 019FA1BBC4FE227060C04FE0F8CCC3943F2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 04:01:05 +0000
Manifest this update: Mon 27 Jul 2026 04:01:05 +0000
Manifest next update: Tue 28 Jul 2026 04:01:05 +0000
Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: uiWhAtUl/hnqbgjn6B0oVfCJdldOKRw9HRePz/jFs1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 04:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:bb:c4:fe:22:70:60:c0:4f:e0:f8:cc:c3:94:3f:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Jul 27 04:01:05 2026 GMT
Not After : Jul 28 04:01:05 2026 GMT
Subject: CN=3983921e1149cac36bf3cfdfc18c6bc5011e2d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:e7:7b:7a:08:0e:bd:aa:59:18:62:c9:5b:cf:
5f:bb:93:b4:45:ed:85:6e:2b:54:88:9c:1f:c0:6d:
05:f1:ce:01:a9:dc:66:91:ba:c8:11:1f:4d:46:bb:
35:92:7a:45:47:e8:a5:aa:24:b2:ef:45:ce:45:99:
f7:d4:4f:c9:a3:5c:97:fa:96:f8:c6:e2:ee:7f:2f:
68:cd:b2:35:2f:bb:39:99:37:d7:27:38:80:36:cd:
18:44:1d:5a:fb:7b:d7:5a:94:30:17:88:59:65:f6:
52:20:2b:82:ee:98:27:a4:80:18:1b:7f:fb:ea:80:
c5:26:fd:55:c3:a0:57:c7:b6:a3:64:2a:cc:2f:94:
d3:d4:c5:90:7c:c9:13:ff:0e:d0:e8:53:48:d1:40:
8c:c1:fc:b0:a5:14:dd:ad:e3:cb:02:cb:e2:91:e2:
32:d1:1d:03:7f:4a:9f:7c:a1:87:3a:92:1f:06:e4:
5a:13:83:32:db:3a:dd:6b:38:f9:b5:9c:5c:e1:45:
7e:93:97:97:fd:1c:25:b2:b4:b9:a6:a3:5a:53:1b:
29:a1:4a:24:e6:aa:a1:c1:13:e8:89:12:76:d3:43:
7b:92:ef:df:89:7b:cc:3e:9d:2b:d6:57:65:6a:7c:
99:40:6b:bb:41:9d:f3:dd:de:3d:31:76:e3:c1:14:
57:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:83:92:1E:11:49:CA:C3:6B:F3:CF:DF:C1:8C:6B:C5:01:1E:2D:92
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:56:1a:32:2c:f1:70:20:f8:f7:71:bc:fc:56:a7:b9:7c:10:
9e:55:6d:26:d0:3d:f3:d4:d0:98:e4:29:25:05:06:42:6e:a4:
94:a3:36:e9:6e:38:d5:7c:57:77:2d:df:ca:fa:22:3e:4b:d7:
37:a1:72:08:b9:ce:a0:25:a4:0a:28:4b:15:21:b9:f9:b3:27:
93:bf:9a:89:49:c9:06:58:9a:9b:6c:8b:13:91:e7:cf:17:4c:
23:78:8e:54:5f:69:f0:bc:82:35:43:b5:f6:fe:fa:69:c7:f5:
e4:a2:64:e1:2f:b3:6d:b8:60:ba:86:71:41:17:b6:a7:07:24:
cf:30:f5:70:a8:bd:0b:31:1f:d1:d8:97:f8:50:f4:f8:bc:ed:
90:5a:ac:67:99:df:3d:bf:5c:30:83:94:57:f7:a0:82:fa:e8:
62:d2:d4:46:c6:65:83:0e:29:46:b1:7f:38:38:1d:64:b3:67:
ed:8f:b6:55:77:4a:11:93:51:3d:47:f1:e7:0f:52:b7:fc:32:
a7:19:41:c3:ce:cc:0e:e4:75:5d:4e:0f:39:da:a5:ed:44:89:
83:09:fa:dd:cb:8a:59:4f:2d:73:5c:ce:67:3d:d7:04:dc:cc:
57:92:97:8f:0c:f3:cb:89:21:80:cf:26:7d:92:74:14:23:05:
98:3e:58:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:18:39 2026 by rpki-client