Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File: UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier: kWikYVg2a8TXrMUBnUx7ATx/2q8jU8biXvEMFOnDkA4=
Subject key identifier: 97:5B:56:DD:04:93:94:28:FA:4E:CE:FD:D2:7A:AA:E0:9C:C3:AE:DE
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer: /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial: 019FA0A91EA6F0A1F74CDFFCBDC9A959B772
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number: 0114
Signing time: Sun 26 Jul 2026 23:01:05 +0000
Manifest this update: Sun 26 Jul 2026 23:01:05 +0000
Manifest next update: Mon 27 Jul 2026 23:01:05 +0000
Files and hashes: 1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: XnPFkvHB1tkbbIOH0G6zQYla+/JU6+va/+84xw+GPRk=)
2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a9:1e:a6:f0:a1:f7:4c:df:fc:bd:c9:a9:59:b7:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
Validity
Not Before: Jul 26 23:01:05 2026 GMT
Not After : Jul 27 23:01:05 2026 GMT
Subject: CN=975b56dd04939428fa4ecefdd27aaae09cc3aede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1c:f8:61:73:61:a4:70:06:b2:39:7c:4c:94:
b1:c9:87:15:89:c2:6d:c6:8b:12:10:94:1f:94:0a:
23:e4:45:89:28:f8:2a:2f:ec:ec:7a:58:0a:de:c6:
17:23:b0:82:5f:92:b2:35:80:74:cc:ed:99:be:2b:
c4:7f:65:a1:a9:41:eb:68:ea:00:95:77:a6:fd:80:
e5:1d:31:e5:0a:83:78:b9:aa:0c:7b:db:6e:1d:31:
d9:14:c7:c1:ae:44:15:27:78:76:52:a7:93:fd:97:
09:fe:57:37:33:0f:e7:e3:cc:d3:d1:d0:12:82:7e:
3a:07:17:e7:15:08:45:a0:cb:33:22:5c:06:7e:ab:
38:59:f4:e6:3e:62:6d:45:0e:29:c4:84:a8:3d:ac:
7d:dc:0d:5a:d5:3e:27:df:34:51:38:e2:f3:ed:5d:
bd:c3:e7:ce:37:e8:cd:a2:a0:52:95:67:a5:af:af:
07:1d:0b:2b:99:b4:ba:a7:bd:66:94:d9:60:5f:b9:
bd:c1:22:0c:5b:ea:17:84:ca:dd:15:f1:7b:3d:7f:
ad:ce:2b:1e:ca:e5:9f:eb:18:55:41:e1:5e:e7:cf:
c9:9b:b3:e0:5c:ae:34:6b:1a:d5:cb:28:a0:b7:0c:
59:3f:69:87:1b:62:fb:96:88:bb:5c:ad:ca:75:29:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5B:56:DD:04:93:94:28:FA:4E:CE:FD:D2:7A:AA:E0:9C:C3:AE:DE
X509v3 Authority Key Identifier:
keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0b:8e:db:bd:38:48:39:a5:a8:8e:ee:e2:b0:9b:45:c4:6c:
5a:07:51:5b:48:26:c3:82:af:25:79:f3:b3:74:57:1f:1d:0e:
a9:c6:c4:15:66:3e:06:14:9e:0a:2d:42:25:00:9a:1b:33:5a:
2c:91:bd:9c:ba:4f:c1:24:13:38:ee:ac:dd:4c:7f:bc:d3:9a:
44:c2:c4:5a:c6:45:13:10:17:4b:b4:3c:e8:ed:d9:97:9b:20:
ac:38:11:d3:52:b4:e6:f5:14:69:77:76:b7:70:d0:68:e7:66:
7e:2b:fa:c3:dc:7d:44:23:86:8b:ce:91:f8:9b:20:9b:7d:aa:
9a:3e:09:f4:ae:37:6b:01:24:41:56:1e:74:c7:1b:5b:ca:b2:
30:03:74:4f:82:c9:51:97:79:2b:8a:76:c2:ac:40:70:c2:a6:
e7:df:57:b8:7a:84:af:87:53:1f:63:2b:5d:de:31:c9:45:6d:
34:18:69:51:45:e9:f1:58:57:a8:e3:99:90:2e:af:10:0a:15:
a4:47:db:8f:73:5b:ad:9d:d9:0b:23:5c:9c:a9:60:d4:59:bf:
f2:3b:c9:74:7f:aa:bd:f6:fd:d4:77:1c:c2:4c:9f:3a:e6:b4:
ba:21:97:2b:37:d7:82:03:6c:5c:34:3b:37:4a:5e:d4:9b:dc:
d8:a5:51:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:01:46 2026 by rpki-client