Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
File: UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft (raw, json)
Hash identifier: C1ZzpqroNEXvchr5xcPOH2766CFk7+j3v9nB5xWeBIE=
Subject key identifier: 89:19:DB:48:B1:D2:FB:77:CF:EB:D0:B0:95:A7:E0:7A:C3:EF:47:11
Authority key identifier: 50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
Certificate issuer: /CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Certificate serial: 019F8379F4CFDEAD7100F6CC3D15093F844C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
Manifest number: 08F5
Signing time: Tue 21 Jul 2026 07:00:35 +0000
Manifest this update: Tue 21 Jul 2026 07:00:35 +0000
Manifest next update: Wed 22 Jul 2026 07:00:35 +0000
Files and hashes: 1: K1qLnnrsBytcCd672tmGsMqXxYM.roa (hash: chgkC32Z3UMGB9mkkwLQsJIKs1LFl1ohHwqbg9qIaPw=)
2: UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl (hash: BxRB/M/34TI7EbLnq2coG01u1bCMzoLATShJuImlf8I=)
3: X9lVyI85cWemgsO6nj6KNiyvWhg.roa (hash: fAtsDmjcFGxCPbNfuOqgmjuDJEqjBeXCafa+9VtJFx4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:79:f4:cf:de:ad:71:00:f6:cc:3d:15:09:3f:84:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=502c37e7ecb59b667fa82ecf093e5ed87661a8e2
Validity
Not Before: Jul 21 07:00:35 2026 GMT
Not After : Jul 22 07:00:35 2026 GMT
Subject: CN=8919db48b1d2fb77cfebd0b095a7e07ac3ef4711
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:de:41:b7:e5:32:fa:c7:f0:ea:97:da:0b:4a:
c4:9c:c5:bf:d5:d8:c0:1a:4a:1b:6e:23:86:01:51:
30:ea:90:a6:ed:2b:7d:d6:d4:ac:aa:fb:75:b5:07:
5e:7d:4d:17:96:3a:2e:1c:62:2e:8f:bc:50:3d:ce:
e6:67:48:6b:f5:a3:ed:02:f8:ff:3c:fc:d5:87:4d:
8f:5a:dd:cd:e9:67:1f:cf:77:de:2e:ee:16:54:38:
4e:cc:3e:9c:6c:4e:ab:cb:7c:b0:e1:38:be:30:ab:
03:6c:22:2d:3a:66:1e:1e:a0:3d:2a:32:0e:fa:83:
38:8a:cf:ab:2d:3a:df:a7:a2:5d:9f:b2:74:76:78:
05:15:0b:93:45:62:05:ac:1b:85:15:20:72:03:b5:
bd:63:e8:24:35:27:74:f6:f6:3b:29:e0:1b:1b:96:
18:bf:ca:76:5f:fc:71:fc:66:86:36:73:6b:87:e0:
33:e9:20:bd:0b:14:4b:e0:33:f7:2c:82:91:0c:84:
ab:da:f4:e3:ce:ac:6e:09:be:e6:56:6d:5b:f7:b3:
2c:1d:c0:94:e4:a4:cc:2f:06:76:bb:89:77:b2:0c:
fb:14:c9:fe:e4:82:e7:57:82:cf:33:57:c9:e0:9d:
61:3f:7f:94:13:1d:56:94:43:e7:48:b3:c9:ea:b4:
8e:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:19:DB:48:B1:D2:FB:77:CF:EB:D0:B0:95:A7:E0:7A:C3:EF:47:11
X509v3 Authority Key Identifier:
keyid:50:2C:37:E7:EC:B5:9B:66:7F:A8:2E:CF:09:3E:5E:D8:76:61:A8:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UCw35-y1m2Z_qC7PCT5e2HZhqOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/b5f6af-3c83-4cb5-b5eb-ba14843c549c/1/UCw35-y1m2Z_qC7PCT5e2HZhqOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:1e:5e:02:fd:fe:70:ac:f0:57:62:08:49:5a:49:11:95:5b:
6f:a3:7a:19:f1:78:e8:a3:0e:9d:b7:75:cd:65:11:55:35:8e:
a6:07:ea:33:06:3a:48:43:19:7e:7d:7e:6f:1c:70:d8:83:db:
b9:56:b9:25:e0:0b:a8:40:24:d0:b8:8b:ad:44:1f:54:35:b7:
e8:6b:97:1e:5a:17:b7:e6:11:3e:6a:1c:fc:86:9f:af:b8:92:
3d:3a:89:0f:ef:18:32:98:2d:fb:50:5b:73:b7:f2:3f:ae:f5:
0c:80:0e:04:a2:bc:74:fb:43:fa:e9:46:c2:d8:13:bd:aa:60:
ab:e5:27:36:ba:34:a7:7b:31:d1:94:ff:79:fd:b7:ee:70:91:
e7:21:8f:71:72:6f:ba:16:09:3f:4b:38:2b:a0:06:31:d1:83:
33:31:02:a5:d0:14:02:a6:60:64:76:a6:5d:a9:f4:f3:98:69:
9a:11:da:5a:c9:ae:bd:25:41:98:9f:04:3d:be:17:8b:e1:6d:
03:34:c2:5d:d7:08:ae:31:44:85:8c:7e:a3:8c:a5:4a:6c:a7:
35:82:16:a9:03:d4:2a:d0:af:c4:9f:05:c3:96:58:ff:5a:46:
06:7b:d8:57:e3:86:3d:8b:77:7e:96:cd:57:a5:5e:0c:96:4e:
f7:a1:87:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:05:03 2026 by rpki-client