Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: i9uMnEK6AxYF3q0PpKL5wc1j9eoceeV1ZoDLfwsmqLE=
Subject key identifier: 94:20:C9:70:5F:D2:40:47:42:BB:FE:B6:83:D3:E1:1E:73:31:AD:25
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019FA1841AEE2F770820841689CE84FF4582
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 19CE
Signing time: Mon 27 Jul 2026 03:00:17 +0000
Manifest this update: Mon 27 Jul 2026 03:00:17 +0000
Manifest next update: Tue 28 Jul 2026 03:00:17 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: xb86CdmAN+Lzuiyj24RrJrnbPL4wsLZoirbPIi/Dk4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:1a:ee:2f:77:08:20:84:16:89:ce:84:ff:45:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Jul 27 03:00:17 2026 GMT
Not After : Jul 28 03:00:17 2026 GMT
Subject: CN=9420c9705fd2404742bbfeb683d3e11e7331ad25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:79:44:35:fa:bb:f4:54:c6:48:ee:67:3a:
a8:54:63:1a:8a:e7:80:cf:69:b6:72:13:4a:1f:ef:
4b:76:db:c8:fe:b6:c1:76:7d:c6:6b:03:a2:43:ec:
c0:32:3e:b4:1f:41:fb:d2:35:3a:50:06:22:ed:33:
60:24:d2:24:3b:e2:d0:18:d7:8d:06:8e:25:76:1c:
39:96:ed:6b:2c:53:77:ea:58:29:96:69:e9:a8:3d:
4c:0a:b4:46:f4:8e:74:1f:65:56:12:3f:3b:b3:3a:
00:47:eb:d2:5e:4a:58:e8:64:df:f3:71:65:72:4a:
12:d4:22:4c:ac:bf:82:7d:09:20:f2:11:92:e7:d4:
f0:78:79:8d:e0:a9:6a:5e:25:94:67:44:85:d4:1f:
20:ba:f9:97:be:fe:df:b9:78:07:f5:b8:cb:a9:09:
a1:41:2d:bd:8c:8e:5e:51:df:93:31:75:24:39:66:
f8:77:06:ec:24:86:ab:8c:91:63:ae:f6:10:1a:55:
0f:6d:f2:5d:bd:fd:8c:80:27:8e:e0:c5:79:0b:77:
03:1a:2d:69:f6:99:bd:2d:c8:53:01:7d:0f:78:bc:
e7:3c:57:83:c1:c3:a7:5b:09:f5:a8:01:42:a0:d1:
10:f8:41:1f:d1:8f:b9:b2:35:00:08:4d:e3:61:46:
2e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:20:C9:70:5F:D2:40:47:42:BB:FE:B6:83:D3:E1:1E:73:31:AD:25
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:08:45:b4:8a:e6:35:8c:17:14:9e:6d:7b:12:50:58:0b:ab:
09:62:49:a8:f4:eb:b1:b1:66:89:66:35:aa:1b:6b:6a:cc:00:
63:0f:3f:3a:00:18:bb:99:95:6c:d2:4b:68:00:a4:3f:2a:33:
ed:3c:94:e3:76:1e:ef:c6:ed:b6:34:df:78:1e:9c:d5:27:f8:
ab:b2:36:fc:54:22:18:35:0a:4d:b4:31:cd:ea:60:bd:44:74:
1f:aa:7b:e1:5c:32:8c:69:39:4b:00:03:3f:94:71:66:f1:23:
f2:52:f1:41:d9:27:87:f7:62:b8:d2:01:6a:2a:da:78:71:b9:
9d:ab:19:29:ca:82:cf:b5:45:0c:c2:97:f9:2c:66:e4:e4:ed:
da:78:90:54:b2:7a:4f:ef:13:9e:de:11:9e:7d:a7:49:ff:11:
48:ce:d9:79:52:cc:c8:80:00:df:81:d0:d3:34:46:31:5c:47:
88:d3:e1:a2:29:db:29:7b:c6:02:02:d2:17:2a:d5:0a:55:6d:
91:78:91:bc:a8:6c:5d:4e:94:ed:b2:3b:fc:00:dc:db:2e:d4:
e9:ab:fa:de:25:89:73:b2:94:09:c8:85:8c:9c:b1:2c:50:5e:
c0:aa:42:ab:8a:1c:97:26:bb:57:3c:80:a3:3e:42:9f:e6:e6:
58:bd:e8:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:04:45 2026 by rpki-client