Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: Yv5K7Jam84LXrLbWkQwi7Hfgk0QUv/9mNxB+AshtRu4=
Subject key identifier: 61:53:AC:79:0A:B6:64:08:63:C1:2F:B9:C8:66:73:AC:07:79:DC:D8
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019DB4A29D4BB7E6C392CE3EE999A154A8D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 072E
Signing time: Wed 22 Apr 2026 10:00:49 +0000
Manifest this update: Wed 22 Apr 2026 10:00:49 +0000
Manifest next update: Thu 23 Apr 2026 10:00:49 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: xKrtnw2i+VHudOohKU0QFiy6JA/coHgi5Zlw2zbBirI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:a2:9d:4b:b7:e6:c3:92:ce:3e:e9:99:a1:54:a8:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Apr 22 10:00:49 2026 GMT
Not After : Apr 23 10:00:49 2026 GMT
Subject: CN=6153ac790ab6640863c12fb9c86673ac0779dcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:16:9b:db:8a:b2:7e:87:c2:79:41:8d:e2:a6:
7c:2b:f6:67:df:4a:71:2b:c7:58:04:13:48:92:4b:
12:1b:2f:14:09:06:13:ef:17:ac:6a:9b:ba:55:c2:
df:a2:e8:49:ba:65:93:4b:a2:15:ce:6b:57:e5:fa:
67:a8:17:53:5c:87:e8:50:a2:41:47:c1:31:c2:ae:
c6:e7:e8:dd:d2:7a:75:66:70:5c:2a:de:89:d4:02:
01:72:43:b6:dd:6b:8e:ac:34:6e:f4:97:0e:09:6c:
22:87:4f:67:a9:37:87:2e:bb:8c:6a:c2:fd:b4:dc:
ad:17:5b:0a:46:f4:09:22:48:46:cd:15:c3:14:4a:
0c:c1:eb:66:c4:58:21:6d:5d:dc:50:94:db:d6:64:
33:5a:fa:46:50:fa:fa:4b:d5:7b:52:b4:6c:78:a7:
d3:e6:da:e7:c3:9d:1a:cb:90:89:d9:71:da:a0:fe:
52:d9:65:3f:42:c9:08:41:75:b3:7d:25:81:5d:c6:
ed:43:ed:0a:07:12:48:58:f7:72:9d:0a:24:1c:4d:
f3:74:46:7b:de:b2:d6:04:1b:28:3c:23:5e:cc:51:
54:d3:bd:a2:fd:f7:a9:32:5c:19:13:58:bc:e4:1d:
d9:ab:b8:cc:a9:c2:e0:6b:42:81:89:e6:3e:42:c1:
e4:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:53:AC:79:0A:B6:64:08:63:C1:2F:B9:C8:66:73:AC:07:79:DC:D8
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:e3:9d:72:17:84:1e:a7:a6:36:f8:e8:4e:d8:ea:4e:54:51:
d6:3c:06:ab:59:1d:47:e6:49:25:9a:be:77:73:7c:2f:88:f9:
92:1d:f5:9c:39:fd:49:57:08:7a:31:e0:f2:e5:c9:84:45:b6:
8a:2a:62:d8:b2:da:cb:35:9f:75:f2:a9:29:98:d0:16:e8:d5:
53:43:7d:5d:4a:b3:24:f9:d3:22:6d:cd:00:fa:68:94:ca:f5:
05:c8:7a:08:f0:68:bf:34:5f:db:0e:6b:d2:c2:04:86:3f:db:
fc:d6:79:c7:90:db:9e:4d:ef:7b:cd:95:61:10:aa:4c:b0:14:
b1:11:82:ae:34:b4:88:d1:5c:7c:3d:d1:57:58:c3:1b:f9:91:
e6:7d:ba:e3:d9:a1:f3:6c:1e:48:b7:c0:f2:41:9d:81:7b:78:
80:1f:fa:11:25:a1:5e:6f:81:4f:50:47:2b:a8:82:eb:f6:89:
59:e5:21:a7:98:8d:fc:9b:79:f7:a3:46:53:17:2b:fa:5c:06:
01:17:9f:55:46:46:20:09:57:6d:ce:c2:ee:e3:15:0a:01:23:
ca:49:fd:32:54:ed:45:b3:e0:48:6e:6d:fa:42:4d:10:cc:1b:
f7:fc:8b:88:c3:46:fb:5a:db:1d:2f:e4:e6:84:d1:57:b7:f5:
27:f3:b9:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 12:14:02 2026 by rpki-client