Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: gz87eNPs79120vZ6+VDktbo3RWD22G1U+BGJ2isqDBY=
Subject key identifier: 47:07:BD:F4:7B:EA:4E:23:7D:F4:C4:21:B3:0E:51:C2:86:5F:F6:2D
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019FA0A86EF560FBD56E7C1B92411E8A1FBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 122F
Signing time: Sun 26 Jul 2026 23:00:20 +0000
Manifest this update: Sun 26 Jul 2026 23:00:20 +0000
Manifest next update: Mon 27 Jul 2026 23:00:20 +0000
Files and hashes: 1: KBKlhWMG0Rouh36bd9hH2_4iw1w.roa (hash: yknxcNHVgc1M1hYYcpZWhF9GZLOrrn9T1pEy+vc2uA0=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: 85GAUJDGOSPo+5EdhJxkVl8091pI/sTWRVlf4zYTt+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:6e:f5:60:fb:d5:6e:7c:1b:92:41:1e:8a:1f:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jul 26 23:00:20 2026 GMT
Not After : Jul 27 23:00:20 2026 GMT
Subject: CN=4707bdf47bea4e237df4c421b30e51c2865ff62d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4c:a3:01:24:50:3e:70:33:90:4b:59:51:7d:
29:36:47:fd:a2:32:33:b5:18:7c:2b:a3:e3:c3:13:
34:52:b5:6e:0d:77:6e:a1:5d:2b:36:4e:4b:f7:7f:
d4:ac:52:a3:f9:3b:6f:13:cf:b4:2d:20:b4:67:9e:
37:f2:c0:b3:49:78:fa:f4:45:bb:80:94:eb:e3:3f:
b9:4c:51:9f:c7:6e:c5:46:dc:97:98:46:83:5d:d7:
c8:ec:bf:8d:f7:4f:39:c0:0a:e8:8f:ac:a1:20:ed:
e5:ef:a8:bc:f2:00:b0:b2:49:a1:60:7f:10:dd:e6:
d3:16:78:e0:e8:2e:a7:16:ce:5e:e0:bf:58:c3:15:
19:d0:13:b4:b0:5f:d3:0e:0f:df:21:9e:b1:09:12:
8f:1c:a4:33:2a:2a:0b:7a:0c:0f:ba:86:f3:b0:76:
58:13:8d:16:1f:1e:ae:08:aa:4e:0d:4f:2c:53:fe:
bf:ed:50:b2:bb:92:48:b5:07:7a:99:79:19:80:2a:
fd:44:24:64:08:65:9a:83:79:9a:6f:12:25:e8:c5:
06:f3:4e:41:5b:2b:ff:16:bc:97:63:52:d4:3d:80:
5f:e2:b5:a8:7a:9a:e3:aa:92:22:d9:fa:09:5d:cb:
1d:b3:3a:58:79:ad:af:5c:de:cf:d3:12:0a:21:4a:
f5:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:07:BD:F4:7B:EA:4E:23:7D:F4:C4:21:B3:0E:51:C2:86:5F:F6:2D
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:56:49:dd:b6:a5:2c:8c:74:7c:51:f2:ca:b0:a7:f7:37:16:
0a:37:86:4c:c6:45:89:3e:ad:a6:97:d2:7c:de:1a:63:74:e8:
03:82:eb:31:3c:f9:fa:a0:d1:52:10:a5:62:f7:21:34:71:09:
3d:98:c1:73:fc:0d:76:ba:d0:50:57:30:15:81:18:05:4e:82:
d9:89:3b:57:74:c7:7f:1d:41:ab:ed:a6:70:a9:c0:35:f0:e1:
6f:bc:de:c3:8e:7b:cb:0f:0f:6f:b1:b3:b1:cc:11:91:14:fe:
dd:03:50:c8:57:67:46:eb:da:5c:b4:a4:a0:a2:90:84:54:59:
48:b9:a0:3b:ac:e2:5c:32:d8:88:4f:d1:23:f2:c6:be:5a:48:
60:08:a3:15:50:f7:91:eb:63:81:bf:94:38:b7:27:09:6e:ae:
f6:fd:9e:b7:27:cc:1e:b6:6d:46:33:94:e8:19:84:ba:04:04:
d2:63:fb:bc:1f:89:c7:9f:95:a0:e4:66:94:70:56:bc:d3:2b:
a0:6f:8f:e8:95:8b:99:32:70:6f:1b:92:ca:ca:df:0f:26:ca:
f5:42:d9:98:9f:22:9c:dc:90:b4:48:08:fb:bb:df:62:90:cc:
ef:8c:9f:b1:b2:49:c1:15:2a:ad:fc:ec:16:70:08:61:e3:ca:
e0:28:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:44 2026 by rpki-client