Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
File: UXJQgtvnpOkAQ6MxcjoX81exBek.mft (raw, json)
Hash identifier: D7YoNVAwcuyd7Q2+BeIHpwMr1SDR7GONe1bCwIG5AnE=
Subject key identifier: EB:A0:54:E7:01:6D:B4:57:E3:0E:4C:48:27:9A:9A:03:D9:CE:F1:7A
Authority key identifier: 51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
Certificate issuer: /CN=51725082dbe7a4e90043a331723a17f357b105e9
Certificate serial: 019F81FABFD593FDCF11E786A3DA72896320
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
Manifest number: 38
Signing time: Tue 21 Jul 2026 00:02:01 +0000
Manifest this update: Tue 21 Jul 2026 00:02:01 +0000
Manifest next update: Wed 22 Jul 2026 00:02:01 +0000
Files and hashes: 1: UXJQgtvnpOkAQ6MxcjoX81exBek.crl (hash: KddgtP1PLplXE46cwmNEMKO0MsNllae3GKhdoBlX82o=)
2: yGc1olHbdu0re5cga7zmsztnd84.roa (hash: rPgsDnlPhqj34gq4l/H+82O5x4qAi6GfxZrdQ2oMAVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 00:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:81:fa:bf:d5:93:fd:cf:11:e7:86:a3:da:72:89:63:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51725082dbe7a4e90043a331723a17f357b105e9
Validity
Not Before: Jul 21 00:02:01 2026 GMT
Not After : Jul 22 00:02:01 2026 GMT
Subject: CN=eba054e7016db457e30e4c48279a9a03d9cef17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a5:c7:77:51:71:a6:21:cc:8f:42:90:aa:d8:
35:7d:43:69:94:7f:1b:35:92:b3:87:40:a6:c4:d0:
6b:68:f4:4d:d5:8a:95:1b:32:b4:9a:76:b5:4c:83:
1d:d3:71:15:04:5a:a8:23:d6:56:30:87:55:1c:e0:
b8:cc:c8:e1:58:ec:b9:d7:39:93:d7:25:12:bb:e9:
eb:d8:5e:af:d2:95:cb:34:65:02:f9:70:ff:dc:d3:
26:d9:96:b9:3d:eb:ca:ad:ec:7d:f8:88:ce:45:51:
1b:e3:b7:7f:3d:af:8e:dd:18:fa:f1:6c:5c:5e:53:
65:af:8d:6f:5e:e3:3e:bd:94:31:a6:08:ae:f4:16:
eb:df:09:ab:f6:d5:f1:c2:bb:06:0d:1d:14:ee:26:
21:0e:12:ba:09:e2:59:87:e4:d6:01:c9:9f:2e:29:
8a:96:c9:28:f7:9d:50:7f:80:1a:82:d3:23:ff:2e:
24:4b:0e:92:d7:03:91:18:bf:93:ee:7b:2b:4a:9b:
c8:82:b6:a1:12:23:9a:4a:3e:ae:f7:5e:f1:42:27:
75:76:5a:d2:45:a7:25:39:60:fe:fb:93:f1:3e:75:
5e:2b:cd:e4:80:56:57:8d:b3:c6:ca:9b:b4:19:1b:
6c:25:fd:d1:3c:e0:72:3a:6a:aa:17:bb:f2:74:87:
16:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A0:54:E7:01:6D:B4:57:E3:0E:4C:48:27:9A:9A:03:D9:CE:F1:7A
X509v3 Authority Key Identifier:
keyid:51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:b5:ae:4e:d3:ee:d9:64:7e:a3:d5:6f:c4:c5:a7:59:90:8c:
23:39:9f:6b:04:e2:29:47:e7:8b:da:e0:a2:db:f0:f0:9c:7b:
48:5a:88:9d:01:e6:54:7b:3c:c3:55:e1:a6:f8:00:bd:be:d1:
46:e6:e8:c6:1d:89:2b:cf:38:fc:d9:8c:a2:82:b0:9a:1e:33:
f5:cc:3f:5b:d1:67:dc:d0:36:c7:65:f2:75:3f:b3:f4:2b:44:
88:35:47:d1:3b:71:6e:e7:44:02:86:6d:3b:dc:84:e0:0d:28:
50:46:9e:ff:15:13:b2:5a:dd:44:2e:a8:5e:24:0a:a6:d6:33:
41:3e:ea:7b:a0:09:9e:b3:bf:2b:ee:47:60:19:20:88:ca:82:
59:55:db:97:63:92:7b:ec:7a:25:d4:90:47:3e:a0:9d:5a:e2:
9e:2d:3e:79:0f:c8:86:36:84:1b:e3:c0:8a:d3:c3:2e:ab:a8:
e1:99:ce:bc:72:12:0a:85:e3:02:7e:f7:3f:7a:b7:1a:86:4b:
23:93:0f:65:91:80:04:fe:3d:01:e8:db:af:a7:2e:f5:e7:3e:
48:82:e0:40:a4:58:0d:30:54:79:0b:3d:3a:a0:a3:3e:45:b9:
c6:f9:41:f8:7d:50:28:e5:0f:d8:df:d4:2d:fe:75:18:cc:6c:
cb:91:c2:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+B+r/Vk/3PEeeGo9pyiWMgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxNzI1MDgyZGJlN2E0ZTkwMDQzYTMzMTcyM2ExN2YzNTdi
MTA1ZTkwHhcNMjYwNzIxMDAwMjAxWhcNMjYwNzIyMDAwMjAxWjAzMTEwLwYDVQQD
EyhlYmEwNTRlNzAxNmRiNDU3ZTMwZTRjNDgyNzlhOWEwM2Q5Y2VmMTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKXHd1FxpiHMj0KQqtg1fUNplH8b
NZKzh0CmxNBraPRN1YqVGzK0mna1TIMd03EVBFqoI9ZWMIdVHOC4zMjhWOy51zmT
1yUSu+nr2F6v0pXLNGUC+XD/3NMm2Za5PevKrex9+IjORVEb47d/Pa+O3Rj68Wxc
XlNlr41vXuM+vZQxpgiu9Bbr3wmr9tXxwrsGDR0U7iYhDhK6CeJZh+TWAcmfLimK
lsko951Qf4AagtMj/y4kSw6S1wORGL+T7nsrSpvIgrahEiOaSj6u917xQid1dlrS
RaclOWD++5PxPnVeK83kgFZXjbPGypu0GRtsJf3RPOByOmqqF7vydIcWLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOugVOcBbbRX4w5MSCeamgPZzvF6MB8GA1UdIwQY
MBaAFFFyUILb56TpAEOjMXI6F/NXsQXpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVVhKUWd0dm5wT2tBUTZNeGNqb1g4MWV4QmVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS85OWFmZWMtZDQxOC00NmYzLTk3ODIt
YTNiZGE0ZDg2Y2M3LzEvVVhKUWd0dm5wT2tBUTZNeGNqb1g4MWV4QmVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS85OWFmZWMtZDQxOC00NmYzLTk3ODItYTNiZGE0ZDg2Y2M3
LzEvVVhKUWd0dm5wT2tBUTZNeGNqb1g4MWV4QmVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGLWuTtPu
2WR+o9VvxMWnWZCMIzmfawTiKUfni9rgotvw8Jx7SFqInQHmVHs8w1XhpvgAvb7R
Ruboxh2JK884/NmMooKwmh4z9cw/W9Fn3NA2x2XydT+z9CtEiDVH0TtxbudEAoZt
O9yE4A0oUEae/xUTslrdRC6oXiQKptYzQT7qe6AJnrO/K+5HYBkgiMqCWVXbl2OS
e+x6JdSQRz6gnVrini0+eQ/IhjaEG+PAitPDLquo4ZnOvHISCoXjAn73P3q3GoZL
I5MPZZGABP49Aejbr6cu9ec+SILgQKRYDTBUeQs9OqCjPkW5xvlB+H1QKOUP2N/U
Lf51GMxsy5HCMw==
-----END CERTIFICATE-----
Generated at Tue Jul 21 10:06:15 2026 by rpki-client