Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: gy1OLZa6Je3kyRv8z1C+7a7c6+wpix4i2oDLclLBa3c=
Subject key identifier: BF:8C:C6:2A:A6:48:8F:E7:D9:00:0F:74:BA:67:7A:59:43:F1:DC:92
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019FA0A8AE952A26CA1D14A6F3711B55A03E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 19D0
Signing time: Sun 26 Jul 2026 23:00:36 +0000
Manifest this update: Sun 26 Jul 2026 23:00:36 +0000
Manifest next update: Mon 27 Jul 2026 23:00:36 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: hfkLa7jngguylNzhRggVWGA8cPvGWnyHoNV2SI5pNo4=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:ae:95:2a:26:ca:1d:14:a6:f3:71:1b:55:a0:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jul 26 23:00:36 2026 GMT
Not After : Jul 27 23:00:36 2026 GMT
Subject: CN=bf8cc62aa6488fe7d9000f74ba677a5943f1dc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:8a:27:a9:2f:da:ae:fd:2e:36:12:73:23:d0:
3b:c9:56:47:71:2a:bd:e6:00:06:6e:9b:8f:10:bf:
fd:be:e9:99:f0:80:72:0f:fb:4d:95:13:ac:2c:cd:
16:92:0d:08:f5:7c:ef:0e:58:ba:1c:6b:5d:d2:58:
50:bb:84:2f:1e:83:7a:06:05:6b:f9:e7:ba:bc:45:
5b:25:21:fd:b5:e5:b9:98:9b:4a:8f:fc:1c:f7:a7:
e1:e6:05:b5:10:fc:88:9a:45:40:9b:96:6a:96:ab:
fb:13:84:e4:ce:d8:11:1d:a4:d8:a0:9f:58:f8:22:
43:e1:2f:ec:b6:b5:6e:e8:02:ed:dd:de:71:65:b5:
b6:24:af:8f:83:68:66:f5:cc:e2:e2:62:2c:6b:87:
e4:e5:0b:87:05:d8:9e:b9:1c:9b:f1:1c:d8:bd:48:
6c:31:6c:61:fd:6e:ed:59:8f:cd:57:ab:48:27:4b:
fd:93:be:7b:c3:7c:a3:e6:eb:a5:d1:b1:25:16:28:
d9:37:ba:b2:e1:bc:df:f0:f7:2a:c4:ef:4b:ae:e4:
a1:bb:f6:7b:66:9c:6b:23:f9:30:68:8b:4c:c2:d4:
64:09:3c:1b:12:ce:0e:24:86:56:0b:d2:7f:82:8b:
19:f2:ee:9c:38:29:8e:83:56:05:13:9a:26:16:9e:
09:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:8C:C6:2A:A6:48:8F:E7:D9:00:0F:74:BA:67:7A:59:43:F1:DC:92
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:24:be:71:af:5d:e8:7c:c5:23:c9:97:4a:d1:d5:4e:cc:5a:
4d:dd:85:88:c9:87:0b:5d:c7:48:2a:63:58:ce:8c:a5:74:a2:
cf:cf:ac:a1:00:60:5a:9e:0c:0a:3a:c9:64:a2:28:54:eb:03:
65:58:5f:56:c1:a9:0c:44:75:ba:11:9d:79:d0:21:ef:d6:33:
a1:43:48:0a:1e:1b:35:53:28:e7:e4:a9:af:c8:e8:54:49:c2:
8c:bf:65:13:ea:55:6d:06:f1:6a:a1:1b:b4:66:c9:bf:61:55:
96:96:48:7d:87:96:4a:f8:c2:73:da:90:58:b2:2f:05:d8:66:
bc:18:fe:3e:e6:63:b3:9c:19:c2:5d:0b:ea:8a:65:8f:09:e9:
86:a6:cf:07:b3:b5:05:1f:02:17:5d:59:d4:90:8a:8d:cc:31:
14:75:75:a7:7b:94:42:81:10:f0:7e:7d:c7:f3:90:d9:24:7d:
51:57:98:3f:9d:b0:f7:ad:53:ff:35:50:fb:92:ba:79:67:47:
9b:6c:d9:77:c1:a8:b2:b9:f8:00:6d:db:8b:05:fa:2d:b6:45:
47:16:f3:b7:40:02:92:17:17:d5:58:d0:e7:a9:d5:7f:d1:25:
5c:b2:79:9b:02:8e:2e:27:2d:97:b9:c3:4c:cd:94:20:a1:b3:
a9:4c:e1:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:02 2026 by rpki-client