Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: LcW4JqwKfW2OrUcrnVbRkvsn4vjJJbUXZNuuiV0SYCI=
Subject key identifier: 68:61:CD:5B:12:E1:8B:F4:43:A7:4E:51:FE:22:B5:7D:15:E8:1C:37
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 019F88A00E2CE206E365DAB89A7D79B150AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 19C6
Signing time: Wed 22 Jul 2026 07:00:18 +0000
Manifest this update: Wed 22 Jul 2026 07:00:18 +0000
Manifest next update: Thu 23 Jul 2026 07:00:18 +0000
Files and hashes: 1: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: U9xgbgVQ+aB0IcxGQY/cu4aYclz3Z4K+3OlwJpu6tuQ=)
2: dvjppw9s6JficbBL1JualOvAVhI.roa (hash: cPS5/nVNCYfyW3AOLG3yzdZLV0ipLTe96hQ2jMLs1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:88:a0:0e:2c:e2:06:e3:65:da:b8:9a:7d:79:b1:50:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Jul 22 07:00:18 2026 GMT
Not After : Jul 23 07:00:18 2026 GMT
Subject: CN=6861cd5b12e18bf443a74e51fe22b57d15e81c37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:13:fb:fd:c0:83:54:6f:e1:37:31:a8:d9:1c:
7d:b1:ba:b0:1b:bd:f2:3a:00:21:7f:04:bc:dc:a8:
2a:b5:f5:30:e3:a5:6e:ed:e1:21:0e:84:5f:a9:53:
27:9d:9f:ae:73:25:97:62:21:f8:f2:ed:73:77:8e:
8c:d5:8d:fa:34:61:74:39:da:f6:eb:ba:e8:ad:f5:
d6:5a:84:46:58:00:68:be:44:92:e4:6a:4e:34:d6:
18:54:ad:e7:8b:56:be:fd:42:17:03:4d:79:cb:53:
55:82:e9:51:45:7c:93:a9:fd:c5:32:a5:ef:a1:49:
bb:f2:c9:7e:f3:7e:ed:f1:81:00:1a:95:70:80:c2:
65:50:01:d7:88:13:73:ae:17:7b:f6:6c:e2:5c:a3:
5a:d1:07:da:c5:62:d9:63:a8:aa:d7:d7:ae:32:78:
aa:47:c6:93:71:a1:33:e2:4e:a7:24:2e:0e:73:31:
5b:5b:55:45:60:5f:46:ab:91:c5:34:6b:df:b7:8c:
b9:08:60:f4:a6:33:bd:cb:0c:30:55:ef:41:b7:cd:
1d:7a:d6:e0:76:29:82:6b:c7:68:23:a1:48:03:82:
13:3d:00:30:c5:f8:dd:e2:e5:58:84:45:a6:4b:08:
e2:c1:a3:e9:49:a0:b9:da:a4:98:4b:0a:05:40:fb:
f6:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:61:CD:5B:12:E1:8B:F4:43:A7:4E:51:FE:22:B5:7D:15:E8:1C:37
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:91:fc:16:41:78:23:26:37:14:ef:7b:52:6f:c6:c8:e3:3f:
bf:18:bf:74:20:1e:aa:6f:10:b4:22:cc:6b:cf:e9:32:2f:75:
dc:d5:dc:1c:7c:da:cd:54:b7:56:5f:ee:fe:44:17:84:37:58:
00:8a:39:ca:a1:2c:d3:a6:c2:ab:41:04:1a:24:be:69:2e:1a:
0c:c8:8f:ff:bd:82:d9:44:28:33:cf:6a:38:d8:e6:22:6b:3f:
ce:ba:9b:1c:60:cc:54:42:1f:cd:7d:00:b6:c9:09:63:c5:24:
6b:4f:3e:58:e2:2a:ca:18:21:92:05:a3:77:bc:ce:e2:fd:39:
f6:c9:12:5d:ac:37:53:6a:ed:d4:5f:8e:8d:f9:7d:31:84:24:
e4:f8:64:1d:0e:1e:5d:0e:8a:5a:f0:fd:a1:19:35:58:e9:6d:
a8:40:58:4b:ef:30:bb:ad:13:d0:a8:d1:2d:f5:e1:b5:76:53:
b4:b4:ee:92:c4:dd:b7:dd:52:d2:16:cb:e5:59:59:45:68:1f:
fa:71:5e:83:34:73:99:36:98:b3:7d:7b:3a:b1:3c:5f:ab:9b:
cc:64:3a:5a:45:2f:30:b8:a3:3a:2d:97:f0:d5:81:8f:ef:5d:
08:19:91:6c:a7:9c:f6:1b:2f:c3:15:af:1f:3a:36:c8:2a:42:
70:8f:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 08:36:15 2026 by rpki-client