Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: WKc3HH8bedj4z5qCId3iV2RNtcnXvyd4qMjFHrndWoo=
Subject key identifier: 5C:B1:4E:1E:D9:7B:EB:39:1E:52:7D:46:16:5C:71:92:2A:47:7D:D0
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 019F3B98A1E5AC7DC548C00121574437AE2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 19A5
Signing time: Tue 07 Jul 2026 08:01:26 +0000
Manifest this update: Tue 07 Jul 2026 08:01:26 +0000
Manifest next update: Wed 08 Jul 2026 08:01:26 +0000
Files and hashes: 1: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: YBteMsgeNz8yLrYjlHYe85a+0qc+yOViTG2B3A3x38Y=)
2: c9MRmnhU7G5UbCBGEHdpLFzsaXY.roa (hash: lmKAJaGimhpXG3IgAt2SCEHhEUBaeY2YUPKf/h17Txk=)
3: y1DTp2rwk07pO-FFEpxBdt4lOAI.roa (hash: RyVjgq9r229KujgssDD8ON6aKi9KzAQn4Dy7pqoxpgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:98:a1:e5:ac:7d:c5:48:c0:01:21:57:44:37:ae:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Jul 7 08:01:26 2026 GMT
Not After : Jul 8 08:01:26 2026 GMT
Subject: CN=5cb14e1ed97beb391e527d46165c71922a477dd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6b:a9:25:4a:1b:c5:85:b4:76:f4:86:41:66:
08:a3:ae:6a:36:30:6b:52:af:2c:e4:83:d2:c2:ee:
73:e2:8c:64:94:e9:01:1d:15:66:a9:76:ba:ea:3e:
95:c1:cf:58:fc:25:7e:72:e3:ab:6b:23:dd:17:38:
c1:bb:32:7c:42:f5:b7:e4:8a:ca:05:4a:bc:32:e3:
a2:37:3c:ec:4e:7d:ac:bf:4a:c4:f2:4d:cd:5e:e6:
1b:ff:37:b8:b2:42:7c:a0:76:ec:89:93:a8:f7:5f:
4a:fe:6c:9c:84:1f:b8:65:1e:94:30:fb:c7:ed:4f:
c9:94:9b:02:98:65:80:b8:76:bb:9e:c9:e0:e7:50:
6e:bb:b6:b0:3d:fa:83:d0:5b:83:bc:d4:07:be:12:
56:d2:c7:21:97:ba:92:48:c9:ae:c7:f9:db:bb:87:
89:f8:e2:2a:81:34:37:02:1d:3a:27:b2:02:fc:3c:
b2:49:d4:80:05:08:2e:24:5e:25:53:e0:4e:1a:2f:
ce:1b:ec:04:47:b3:ab:83:ae:43:70:bc:cc:c6:ce:
a8:89:c5:83:06:84:53:a9:21:52:9c:22:f7:d4:a3:
b7:00:ad:d5:ae:ff:b0:5a:dc:e5:d5:5d:2a:9e:69:
10:de:7c:54:3d:8d:8b:70:eb:1b:9c:a0:de:b7:b2:
5e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:B1:4E:1E:D9:7B:EB:39:1E:52:7D:46:16:5C:71:92:2A:47:7D:D0
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:7d:5b:10:36:58:68:30:11:3e:ae:e5:09:f5:81:8c:a0:76:
5a:3a:15:5a:c6:9b:92:d1:6a:c8:25:f9:85:39:b1:ca:56:f5:
d1:66:17:21:8b:45:b0:fd:6e:c2:94:23:bd:11:f1:a4:d5:48:
a7:6e:2e:4a:5f:94:f7:9a:40:10:b9:cc:78:c5:5b:21:b3:3c:
7b:67:7e:f8:74:86:0d:56:c9:e7:33:f9:52:d7:67:21:01:2d:
4b:41:f1:33:40:97:c1:f9:6c:03:0b:5d:c2:8a:e8:59:e0:c2:
53:27:56:83:c5:d6:72:af:43:f3:63:c1:81:6c:e8:ea:78:53:
9c:21:f6:b2:ba:84:6c:9e:86:0b:ff:ef:31:f6:f4:76:23:fd:
a3:01:9c:11:b6:1e:e1:42:28:c6:4d:9f:fb:c3:04:63:26:d3:
13:11:bd:a9:9b:9c:77:ed:1f:ca:14:f3:bf:bc:8a:bb:f2:a7:
cf:4f:97:d1:8b:31:c5:99:48:21:2e:be:f2:4f:c1:5c:d9:82:
13:33:e3:12:5c:7e:9d:32:c0:7d:d6:52:a0:53:9c:a7:74:57:
95:ec:cb:c7:ad:29:88:40:07:aa:d7:bd:4c:8b:f1:8d:42:df:
7e:75:53:10:66:c0:d2:05:d4:41:9b:ed:07:df:82:3d:2d:ff:
94:eb:49:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 14:44:41 2026 by rpki-client