Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
File: M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft (raw, json)
Hash identifier: K/P9y9xajIqVTyVu7dpMLPRaV+4X3NFPBJH5R8DcVs8=
Subject key identifier: 22:DC:24:64:EF:A5:98:65:C6:4A:47:EB:D1:3D:43:9C:58:27:7C:8F
Authority key identifier: 33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
Certificate issuer: /CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Certificate serial: 019FA33C499B1C73CCD0A7DAD30FBC1D52C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
Manifest number: 175D
Signing time: Mon 27 Jul 2026 11:01:04 +0000
Manifest this update: Mon 27 Jul 2026 11:01:04 +0000
Manifest next update: Tue 28 Jul 2026 11:01:04 +0000
Files and hashes: 1: G-yw8d4tGfvu1V1RtqHrB0f1A7w.roa (hash: FCGFh2yYxIfN7yEpFKXYoDozhL/55pv9VOGSxlFFrP0=)
2: M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl (hash: VwHYjkJr0UikKYr/Ew5HMkOLl1luw/Sk6ZeWNlbCsxg=)
3: Zy79mWZxVkZBlZ2rnp-zcouMF8Y.roa (hash: 3dKfDLWPx4SPhtrGmyl80Hv9zqYxVlUTJ6doGiqefpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:3c:49:9b:1c:73:cc:d0:a7:da:d3:0f:bc:1d:52:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33f50a8de971f8547f5b56c97c36c287ef54bdb8
Validity
Not Before: Jul 27 11:01:04 2026 GMT
Not After : Jul 28 11:01:04 2026 GMT
Subject: CN=22dc2464efa59865c64a47ebd13d439c58277c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:86:61:2d:2f:06:f9:0b:63:8b:a5:e9:82:61:
00:b2:40:9f:97:97:41:b4:70:d5:a4:b9:c8:c2:05:
54:60:61:ec:14:51:42:26:bf:12:63:1b:fc:bb:58:
67:d5:8e:9d:90:fb:96:e7:9b:e7:23:70:16:23:14:
8c:5c:1c:9b:5a:af:7b:7f:04:f5:37:f0:77:f0:50:
8c:8f:f4:a5:99:ea:20:e8:3a:6e:3a:a8:77:2c:33:
66:98:4a:c2:04:e5:96:3a:7c:94:08:02:91:6b:2f:
49:e1:24:91:47:b9:a9:7b:a6:f5:11:a6:c8:3d:0c:
82:03:86:05:3f:6d:52:19:1e:1d:4e:15:74:06:27:
64:56:24:3c:0d:46:0a:c3:1d:25:8a:26:18:06:53:
36:52:0a:01:8d:67:30:ca:e3:ec:f8:3d:8e:5a:9f:
35:ab:8f:70:96:f8:6b:28:9b:c2:7d:57:ea:2f:37:
63:23:0c:78:a8:3b:92:f4:22:bf:7b:8c:24:a2:e4:
ee:3d:f5:ba:b1:fd:1c:4b:8c:8c:82:9d:0c:64:a4:
7c:59:d4:99:45:aa:99:aa:93:a2:7a:ed:f2:8d:5c:
c5:c9:08:b0:91:4e:13:83:f2:40:69:bb:58:73:99:
35:2b:b8:f6:0b:ac:9c:09:aa:fc:17:b0:68:26:b4:
b5:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:DC:24:64:EF:A5:98:65:C6:4A:47:EB:D1:3D:43:9C:58:27:7C:8F
X509v3 Authority Key Identifier:
keyid:33:F5:0A:8D:E9:71:F8:54:7F:5B:56:C9:7C:36:C2:87:EF:54:BD:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_UKjelx-FR_W1bJfDbCh-9Uvbg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/c8fd07-d5c7-4ed3-8075-274f10a5e1e3/1/M_UKjelx-FR_W1bJfDbCh-9Uvbg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:d8:86:52:5e:ac:f5:96:c8:c3:38:78:cc:66:5d:fe:21:db:
59:37:63:b4:54:53:d2:55:0f:ec:44:c0:cc:b9:1f:fa:92:d2:
40:6b:a7:81:a5:ac:f2:14:0b:11:6d:ac:55:3f:f3:dd:32:fa:
81:37:a4:33:2e:64:2e:f1:cd:11:de:e1:b9:a3:2f:43:cb:80:
4c:1a:76:4f:70:d2:0f:e7:da:c4:67:3e:22:8c:db:d7:8c:a7:
af:34:69:0f:e2:35:48:4c:43:bd:03:ef:e2:1d:61:0c:a1:1b:
eb:c6:e3:7a:32:70:e5:e7:c6:da:70:98:7b:55:f2:2d:4e:87:
3d:f7:78:e7:a8:71:88:05:f3:da:20:1b:2e:34:0e:53:26:d7:
96:c0:77:51:fc:e9:14:0d:94:f2:b4:cb:48:76:01:e8:6f:9e:
ea:15:50:58:17:24:63:c0:4e:39:6c:3a:c4:ec:cb:8f:d7:05:
b3:7c:f9:0c:d4:0b:b0:8d:a6:7e:43:9d:a2:62:cf:41:07:35:
6c:81:5e:d6:6b:69:2c:21:eb:e8:73:c5:48:94:fc:2e:42:ee:
2d:b5:7c:96:51:ae:59:c6:29:d0:ed:f2:9d:3c:20:a4:c4:9d:
19:ca:d9:2e:40:d0:29:d5:50:f4:44:4e:7b:67:7d:b0:44:1d:
67:fe:19:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:01:59 2026 by rpki-client