Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
File: UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft (raw, json)
Hash identifier: l2C+cSUWMioofhSw3giZtPLDB09rz/ERxJaDQUPHuvw=
Subject key identifier: 7E:CF:98:3C:22:22:85:7B:41:A9:FD:76:65:C7:58:E5:70:10:F6:E9
Authority key identifier: 50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
Certificate issuer: /CN=507e582adc9369da8ae85dd935740123081c7eed
Certificate serial: 019FA0043DAF94245D722F5495095D909A8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
Manifest number: 0C88
Signing time: Sun 26 Jul 2026 20:01:00 +0000
Manifest this update: Sun 26 Jul 2026 20:01:00 +0000
Manifest next update: Mon 27 Jul 2026 20:01:00 +0000
Files and hashes: 1: UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl (hash: ITT4B4eyfUdLONR19vYtwvoimtkSru7CUPyq68ICaWc=)
2: oMiHSOY4UpwwpdYJ-YwzlBrerYo.roa (hash: 4HJuj+rF75MFgy3hHG2f3m8rThIv9PhuU60sXijKG80=)
3: vwvW1Ad1jPnRXRdjbJDp97AR8iQ.roa (hash: rHp1bLQ38wfktmQvruIWIEUStakR7R1FCh+zLkjl1H0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:04:3d:af:94:24:5d:72:2f:54:95:09:5d:90:9a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=507e582adc9369da8ae85dd935740123081c7eed
Validity
Not Before: Jul 26 20:01:00 2026 GMT
Not After : Jul 27 20:01:00 2026 GMT
Subject: CN=7ecf983c2222857b41a9fd7665c758e57010f6e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:26:2d:26:74:59:1d:b6:9b:f4:dd:bc:2c:98:
59:72:57:02:88:96:eb:6e:04:11:02:48:9b:8b:30:
2b:e0:51:c8:20:9f:61:75:93:bd:31:fd:f7:1a:d6:
36:f5:40:1f:d1:07:1c:1c:fb:35:e0:93:ea:11:f4:
28:1f:e1:fb:7a:20:96:bb:7c:36:d0:3a:2e:e5:ed:
4d:ab:fa:41:be:ba:c3:3b:2d:e3:46:d0:4a:99:72:
28:70:d4:af:c3:58:58:6c:cc:5a:95:e2:93:d0:85:
ff:70:07:8a:7c:d3:a9:b2:14:aa:ea:28:f2:9d:d3:
dc:b0:ab:06:f1:d0:eb:46:e3:f5:91:72:6a:47:ae:
48:09:43:03:b4:45:20:60:c4:95:66:1f:f8:38:1f:
9b:a2:dc:a3:8d:6c:4d:8a:77:ee:97:01:01:59:bc:
84:a6:57:5d:bc:a7:5f:06:8a:74:c3:4a:39:4e:c5:
b1:ba:4e:56:d4:bf:fe:bb:2c:3c:07:20:2b:76:a2:
de:0d:0b:39:98:e1:b1:f3:52:87:8f:cb:c8:70:8a:
87:0a:fb:46:bd:96:c8:29:69:39:86:0c:ca:0f:51:
b7:31:15:16:ed:52:19:c4:7f:9f:82:47:c6:48:86:
a7:ba:6a:e4:33:56:63:b2:18:1c:fb:82:71:e7:2f:
c2:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:CF:98:3C:22:22:85:7B:41:A9:FD:76:65:C7:58:E5:70:10:F6:E9
X509v3 Authority Key Identifier:
keyid:50:7E:58:2A:DC:93:69:DA:8A:E8:5D:D9:35:74:01:23:08:1C:7E:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UH5YKtyTadqK6F3ZNXQBIwgcfu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/6ed434-cd51-4152-aa43-056bae27288e/1/UH5YKtyTadqK6F3ZNXQBIwgcfu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:cd:58:4d:0b:b0:93:e5:36:c6:d9:35:e7:42:56:0c:15:f1:
e6:32:a9:77:0b:e1:b7:ed:3e:cb:6e:cc:7d:5f:9d:85:38:40:
b5:d5:ed:ee:77:2a:50:3f:8e:4f:43:30:62:4f:c4:60:c6:1c:
69:5c:6e:23:e9:fe:f4:d8:ba:82:e8:a3:60:e8:81:82:04:99:
1d:d9:d9:d0:4d:19:26:b3:0a:37:c2:70:9a:aa:2c:a6:dd:7a:
a4:e6:d3:0f:e0:23:0a:67:d3:ca:5c:22:18:3b:49:38:12:fc:
6e:bd:ab:4c:8a:dc:66:d8:bc:6e:db:cf:67:b1:fb:79:33:6f:
7e:da:e5:53:36:23:7e:cb:fb:cf:49:e8:3d:3c:e1:a4:4b:3b:
a0:6e:e6:3f:30:79:fd:e5:cf:c7:72:fa:f9:e2:83:24:16:b6:
0a:c3:34:ad:d4:b4:e1:f1:bb:87:93:73:51:33:6c:2d:2d:18:
a2:52:93:a4:f3:33:44:75:5c:99:b7:3d:c8:68:9f:0b:b3:1c:
5c:67:4f:7f:6a:1c:dc:14:87:42:f6:b1:fb:46:57:d3:52:38:
c1:35:3f:e4:a9:35:7e:3e:4c:c3:8d:fc:91:db:05:18:90:67:
94:2b:42:83:71:a8:ae:91:f4:03:13:8d:7c:60:f1:5d:c7:35:
a2:7c:b0:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:33 2026 by rpki-client