Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: iZKdQOjsEerPzcTYMxHEFpL0IgP3I3y52k7SeiQEFtM=
Subject key identifier: 7E:35:40:FD:8A:35:64:FE:AB:3B:83:EF:32:ED:41:B2:7E:65:BE:A3
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019E9C609C4558943238E4D1C1117CC0C419
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 07A6
Signing time: Sat 06 Jun 2026 10:00:37 +0000
Manifest this update: Sat 06 Jun 2026 10:00:37 +0000
Manifest next update: Sun 07 Jun 2026 10:00:37 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: V7Lz0aA+IPYrY363VU666/lfTwZIVMuz5i1OA9OYZZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 10:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:60:9c:45:58:94:32:38:e4:d1:c1:11:7c:c0:c4:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Jun 6 10:00:37 2026 GMT
Not After : Jun 7 10:00:37 2026 GMT
Subject: CN=7e3540fd8a3564feab3b83ef32ed41b27e65bea3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:f9:b2:84:b4:aa:0e:8e:6f:87:67:4d:85:af:
23:20:b3:84:38:ba:40:76:f8:24:e2:4a:c4:aa:a1:
73:f4:cf:ca:7c:1c:51:f0:6e:59:94:a5:a0:4b:d2:
23:97:59:05:e5:6f:d3:4c:73:aa:4c:67:ab:71:4f:
6e:84:a2:11:8d:d7:a3:0b:dd:96:fc:c3:19:0d:5d:
8a:91:17:5f:2d:55:a5:b0:33:0b:5a:ec:51:a7:dd:
a5:fb:43:75:23:e9:ab:15:cd:69:d1:62:af:75:b2:
a6:5d:4c:6b:c7:55:e8:10:ff:eb:ef:98:88:fd:d3:
21:44:d8:5c:71:0d:37:cb:46:97:19:89:14:f1:87:
89:d9:ac:b9:a2:bd:b6:18:d1:95:73:aa:cc:5b:de:
6f:3a:8c:27:39:fc:7c:da:0f:6d:ce:58:90:b8:b9:
18:84:23:5b:58:37:ed:86:2e:9d:a2:d9:30:9b:d9:
d9:db:c1:40:37:3f:90:15:5b:3a:07:1a:09:1c:bf:
15:65:7f:ec:bd:85:c4:84:92:e5:a9:3d:c9:ab:02:
51:21:72:76:03:7e:c8:65:1e:cc:69:20:d0:db:ac:
b6:e8:f4:99:1a:65:e1:d8:f8:86:d3:3e:f4:eb:fa:
2f:a0:da:fc:4f:bd:58:b8:d9:f8:81:dc:33:b3:99:
8a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:35:40:FD:8A:35:64:FE:AB:3B:83:EF:32:ED:41:B2:7E:65:BE:A3
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fc:5d:68:32:7a:d4:45:52:75:5a:bd:21:a1:c2:45:29:61:
89:49:4a:b8:69:88:74:4c:04:72:54:96:71:21:b9:4f:6f:e7:
f1:e0:30:ca:a5:0c:bf:a3:98:c7:5f:56:e2:3a:95:d6:68:66:
e5:bc:eb:45:5a:15:4a:4a:7f:cf:2d:17:23:d3:d3:22:c4:04:
a6:bb:4a:1b:10:c9:c6:21:2b:d1:e9:05:73:7c:ee:d7:ae:97:
5b:50:8d:d1:4c:23:2c:cd:26:b9:84:06:12:d1:66:e9:fa:67:
e5:03:05:fc:f4:f5:cb:0f:ec:3e:6c:b9:e6:d2:a4:38:12:77:
99:64:47:80:e5:86:8c:2e:8e:c4:0b:0f:a0:2d:da:9e:97:6e:
59:79:41:14:08:83:78:61:97:db:fa:4b:98:01:05:bb:ae:1c:
c6:a9:08:70:ec:91:5e:a5:34:31:82:cc:b0:0b:a6:86:9a:6c:
07:1c:31:d0:32:18:63:9d:ab:df:2c:37:7a:4a:de:18:5b:94:
34:6b:d2:c3:8e:96:de:e1:5a:ea:7e:6f:82:65:32:bd:50:3e:
3c:1c:52:15:4f:4c:73:ad:0a:5b:13:99:08:47:5f:f7:32:c3:
73:19:53:af:9d:23:d1:62:a2:28:17:95:a4:7b:cd:0f:32:ab:
1a:7c:f2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:23:20 2026 by rpki-client