Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
File: UJw4zD6qNVb6OaIvMNwbpINv6J8.mft (raw, json)
Hash identifier: Gfj2KbIE/lvDryP1PbpPuuib6qLg463nB6C8Ew1Dscs=
Subject key identifier: B6:17:0C:67:8D:9A:0A:BE:CD:3F:BC:F6:B0:D9:64:CF:89:C1:02:02
Authority key identifier: 50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
Certificate issuer: /CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Certificate serial: 019FA26019F27802901CF6B78254805FD44F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
Manifest number: 19CB
Signing time: Mon 27 Jul 2026 07:00:34 +0000
Manifest this update: Mon 27 Jul 2026 07:00:34 +0000
Manifest next update: Tue 28 Jul 2026 07:00:34 +0000
Files and hashes: 1: UJw4zD6qNVb6OaIvMNwbpINv6J8.crl (hash: 4fxStWiOioTaTH3TUh0+zskuF1fOq9PaxpUJDWDYfeU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:60:19:f2:78:02:90:1c:f6:b7:82:54:80:5f:d4:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c38cc3eaa3556fa39a22f30dc1ba4836fe89f
Validity
Not Before: Jul 27 07:00:34 2026 GMT
Not After : Jul 28 07:00:34 2026 GMT
Subject: CN=b6170c678d9a0abecd3fbcf6b0d964cf89c10202
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:b3:43:58:61:23:cd:fb:99:8c:99:46:96:
81:e0:63:d7:26:bb:37:4e:fa:7d:ad:96:61:03:72:
55:e6:aa:9c:5c:7b:be:65:66:34:92:dc:ad:c0:11:
60:cd:a6:d5:b5:aa:04:f5:4d:fb:dc:7e:4c:00:c2:
be:f7:37:e1:d4:a4:64:21:a4:35:f5:ad:d0:d5:2b:
8b:6c:67:99:3d:c7:76:74:db:e8:81:4c:d1:e5:e6:
c7:17:23:6a:00:7b:0b:ec:ce:63:5f:ab:1e:d6:68:
9a:8f:67:29:80:19:1d:8c:c5:2b:1d:11:33:66:32:
6e:e4:05:5f:1c:d2:ad:bf:a3:ea:e3:d7:64:9c:3d:
c7:c8:0a:aa:aa:11:1f:61:cb:14:06:8b:5b:85:d1:
12:c3:ce:51:e6:c0:35:90:93:4a:2a:0a:b5:ad:75:
be:0e:4f:58:a9:92:c5:14:a3:db:83:c4:ba:4d:98:
c5:61:27:70:e5:83:34:cc:b8:b4:42:cd:62:d0:c1:
9e:6e:43:b9:8a:44:b3:3e:aa:e1:9c:8a:00:4c:a4:
ed:ec:ff:aa:9d:97:63:3e:41:b4:f3:3e:fb:b4:e1:
6b:46:de:c4:84:de:79:9b:ff:0e:26:9d:83:de:42:
79:66:f6:17:04:a6:03:28:f1:a5:2d:49:1c:fc:90:
ca:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:17:0C:67:8D:9A:0A:BE:CD:3F:BC:F6:B0:D9:64:CF:89:C1:02:02
X509v3 Authority Key Identifier:
keyid:50:9C:38:CC:3E:AA:35:56:FA:39:A2:2F:30:DC:1B:A4:83:6F:E8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJw4zD6qNVb6OaIvMNwbpINv6J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/fb00ec-babd-4172-8d4d-2a64f99baf5f/1/UJw4zD6qNVb6OaIvMNwbpINv6J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:03:c4:bd:f9:87:45:79:be:cb:23:92:39:a8:e9:2a:89:7f:
1d:27:07:5e:64:df:29:05:bb:0c:cf:17:6b:7d:fb:5f:6f:b5:
73:9b:80:1b:6b:dd:45:42:49:62:45:2e:1f:2e:b6:77:8a:a6:
36:34:19:0c:87:65:11:37:95:03:2c:d8:8a:1c:7a:51:a5:88:
1c:e7:81:8d:8d:d6:50:ee:9f:ec:88:6a:0b:71:f8:35:2b:36:
11:53:0d:49:06:33:5f:f0:79:a5:e8:a1:4d:65:2f:af:60:fa:
b5:93:3b:f8:63:c0:37:33:e4:06:33:5b:d6:4c:9f:3a:a0:2c:
8d:be:35:b2:e7:29:6f:02:c2:84:7c:a6:ce:ca:8d:b6:8a:1e:
49:c4:52:49:d6:51:ff:b3:60:2e:57:a7:fd:6c:c4:b9:14:ea:
a2:01:34:41:8c:18:02:b1:ff:bc:37:c4:83:b6:6a:f8:a3:84:
ba:96:4a:83:fc:c5:5d:80:29:dd:7a:e9:90:ee:af:fb:42:c9:
7e:94:0c:53:6d:71:94:ef:19:81:57:38:d1:8c:02:c0:ad:a2:
20:1e:ac:75:46:38:b6:28:50:6b:a2:43:55:be:84:29:44:9e:
07:65:1f:3a:36:79:fa:4c:80:de:77:1b:f7:ee:cd:f7:c8:be:
3c:67:5b:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:47:08 2026 by rpki-client