Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
File: UZpqm-tS7_KWRGWblDKgpZI3MUw.mft (raw, json)
Hash identifier: Vaem2Pkki7987jFhrMG+SA799SuQxeqw4o0re3X5BRA=
Subject key identifier: AF:FE:71:F1:33:66:62:22:17:B6:1B:1D:55:BD:11:D7:8C:E1:CC:40
Authority key identifier: 51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
Certificate issuer: /CN=519a6a9beb52eff29644659b9432a0a59237314c
Certificate serial: 019FA14DB1027691DBA3256F868785548D28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
Manifest number: 171A
Signing time: Mon 27 Jul 2026 02:00:51 +0000
Manifest this update: Mon 27 Jul 2026 02:00:51 +0000
Manifest next update: Tue 28 Jul 2026 02:00:51 +0000
Files and hashes: 1: UZpqm-tS7_KWRGWblDKgpZI3MUw.crl (hash: Z/jssgrYr8sdxb1S5uXzijwKUouk7GsxFCpLdrX94BQ=)
2: gQeDlAB2b-yz40wa6y4f9jvVDIs.roa (hash: gxyp6+EX2f9gbDwhqzkUqdu0QE4bPoPhIRtQBnEAra0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:b1:02:76:91:db:a3:25:6f:86:87:85:54:8d:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519a6a9beb52eff29644659b9432a0a59237314c
Validity
Not Before: Jul 27 02:00:51 2026 GMT
Not After : Jul 28 02:00:51 2026 GMT
Subject: CN=affe71f13366622217b61b1d55bd11d78ce1cc40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7f:a0:fa:8e:18:32:3f:7b:5d:d9:83:20:c1:
f8:e6:34:ea:57:1a:a0:e6:03:4f:e1:2a:01:94:bb:
a5:d3:5b:1d:43:e6:15:45:de:47:64:6e:0a:76:e5:
ae:c6:f5:d0:64:74:80:e1:46:4d:3a:96:ea:23:94:
ce:3b:6b:33:4a:4f:5a:34:52:2e:a0:0f:75:d3:36:
a1:0d:de:84:31:e6:ae:51:44:a4:dd:fb:a9:dc:00:
5a:8a:86:19:98:22:37:c8:a4:69:70:9d:f2:1e:b4:
93:07:ca:ac:76:0b:04:1f:17:07:22:79:11:f7:52:
34:e6:e3:dd:82:4b:55:47:41:10:92:ef:05:2b:70:
62:ad:c3:e8:04:52:9a:1c:32:81:f1:4e:00:e2:ef:
18:d8:9f:16:bb:42:90:60:bf:66:70:c4:46:76:02:
be:1f:b1:3f:9b:b5:16:b5:39:27:07:9a:2b:69:35:
16:42:bf:c2:58:df:35:f3:3b:fd:fc:c8:9d:ff:88:
bf:21:5f:01:f9:d7:45:b4:ba:5a:f6:9a:19:1d:68:
84:83:6f:2a:0f:0a:48:9b:97:ed:87:16:9c:a4:e5:
90:dd:4f:c4:b4:b6:97:03:24:d6:85:5f:79:86:ef:
15:63:42:ee:41:25:18:c3:0e:cd:3e:a6:02:3b:fb:
7b:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:FE:71:F1:33:66:62:22:17:B6:1B:1D:55:BD:11:D7:8C:E1:CC:40
X509v3 Authority Key Identifier:
keyid:51:9A:6A:9B:EB:52:EF:F2:96:44:65:9B:94:32:A0:A5:92:37:31:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZpqm-tS7_KWRGWblDKgpZI3MUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/86d23e-400a-4adc-80e4-905d9dcf50ae/1/UZpqm-tS7_KWRGWblDKgpZI3MUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:60:20:1e:6b:fe:a3:93:6c:e5:59:1d:ab:b2:2c:4f:21:e0:
f5:da:35:74:2a:c5:88:a9:12:6a:9d:f3:46:6a:d0:cc:1b:d8:
6b:2a:eb:8c:fb:4f:de:29:c8:76:7f:89:29:fc:2a:5f:c9:eb:
b9:ce:d9:48:5e:b9:3f:37:3d:02:1d:f0:6d:e7:77:a6:0c:67:
74:22:21:56:5b:36:7e:17:2a:6c:fe:92:12:22:1d:6e:72:6b:
75:a9:18:d1:ee:6a:19:1d:23:2e:8a:19:3d:b8:29:74:07:ce:
a7:81:3f:8a:8a:09:c1:c3:17:54:65:c6:7b:fc:6f:e2:d8:01:
5c:ed:85:ca:b3:75:5e:96:01:c6:f6:4e:8b:94:35:3d:b1:be:
2e:a0:91:28:50:8f:7d:a8:42:8c:f3:0e:40:1a:f6:d7:b1:e1:
7b:d6:47:46:c1:d2:bd:89:23:71:09:f7:f7:6d:7e:93:2d:69:
16:f1:37:87:fd:04:f5:e9:81:c5:3b:89:5c:cb:7d:5a:c1:e3:
6f:7c:ce:59:68:d9:f2:9f:73:6b:65:52:a3:04:a8:f1:22:38:
df:0b:13:62:38:91:93:e0:1f:01:ac:f4:fb:6f:3f:39:4c:d7:
fc:f5:d5:49:ad:6e:df:63:12:c0:c9:ab:bb:9a:4f:3e:ac:09:
f7:c6:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:41:19 2026 by rpki-client