Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: 0IzGeUS/M2REZXdIX8XvzAxZD8gMJtG0GeUcyPg0zfQ=
Subject key identifier: B2:3F:0E:B1:33:72:09:BF:66:DA:B3:4B:EC:97:D7:C6:00:2C:81:7E
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 019FA18497E10D36F57657A03AA9389EE19C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 0988
Signing time: Mon 27 Jul 2026 03:00:48 +0000
Manifest this update: Mon 27 Jul 2026 03:00:48 +0000
Manifest next update: Tue 28 Jul 2026 03:00:48 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: yur8CTD36T7oZNcmmztyyuuRkiV1w0e/XeKyOgSKm4A=)
2: _G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa (hash: QsL4Z9FiJsXvXIFlxM7RbhEJzgQ69Cb/qKd+bhG5xng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:97:e1:0d:36:f5:76:57:a0:3a:a9:38:9e:e1:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Jul 27 03:00:48 2026 GMT
Not After : Jul 28 03:00:48 2026 GMT
Subject: CN=b23f0eb1337209bf66dab34bec97d7c6002c817e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:db:cd:7c:78:b9:f2:b9:54:a3:04:95:6e:e5:
f8:86:95:28:86:2c:a7:2a:45:7a:92:9c:b6:3a:82:
b5:b6:d7:88:f1:34:d1:f2:91:91:d9:aa:aa:f1:5c:
92:10:81:62:83:00:c1:19:95:e6:b8:c8:c1:e0:9f:
7e:d7:31:ef:18:08:ad:6e:77:97:a1:de:9e:e1:7d:
26:ff:cc:43:22:18:78:04:e3:a4:13:ac:2c:a3:e7:
42:66:51:23:fa:36:36:ae:6c:4c:11:f9:77:bb:46:
73:b4:68:14:08:d7:f6:78:ba:d5:71:78:99:5d:30:
b4:9c:94:9f:53:63:7e:40:0b:7f:c7:2b:bd:24:fa:
e4:c0:0c:70:d1:46:18:01:88:89:01:3e:8f:da:7a:
92:84:aa:6b:22:99:18:24:96:36:42:98:a1:cd:71:
8d:97:b5:58:5b:3c:65:9a:45:86:e8:08:3a:0b:9b:
eb:be:42:37:9b:70:71:94:74:fd:09:4c:2d:96:43:
7c:89:10:a5:ff:da:0d:41:09:3d:f0:e7:49:1d:2f:
d7:2d:5b:a2:98:f6:ef:77:ee:cb:30:69:b7:92:92:
01:00:ef:08:b7:70:47:15:01:c4:e4:b4:a6:39:af:
a9:81:bc:12:eb:f2:ce:97:ea:37:ce:6c:ee:ba:44:
f8:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:3F:0E:B1:33:72:09:BF:66:DA:B3:4B:EC:97:D7:C6:00:2C:81:7E
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:ad:af:52:03:c1:4b:d2:87:e1:55:76:59:e9:fb:91:44:04:
44:6b:93:3e:43:69:9c:01:ba:ae:24:b4:d9:70:18:a3:d3:24:
5f:56:b9:0a:72:5b:e2:2b:e4:ff:a5:87:a7:81:c7:98:5d:8e:
25:b3:92:7a:b9:85:77:fa:a6:71:f1:39:bb:3d:96:86:0e:03:
9c:30:d5:40:63:57:8f:1b:3c:1b:0d:80:01:b2:c1:83:7f:95:
45:a0:57:b7:cb:4e:2b:9a:2e:db:23:ee:a2:3b:05:19:ad:11:
82:a2:cb:19:30:e8:84:51:55:88:56:71:bd:63:fb:64:9a:4a:
26:fa:2d:8a:bb:7b:af:dd:45:a5:1d:a6:0d:6d:c1:d3:69:33:
98:47:b4:54:7e:48:42:7c:33:65:85:ac:a6:9a:ef:c4:19:38:
15:26:00:f4:07:fd:5f:18:74:dd:26:8c:0e:50:2f:8b:9f:f5:
62:b3:da:6d:53:af:e4:43:22:2f:b0:17:4f:c3:4f:42:6d:19:
05:ab:bc:87:f1:bc:22:38:57:5c:bd:8c:e2:e4:ca:4a:02:12:
18:52:0b:91:e0:24:24:a1:4b:65:f6:a0:fa:1f:05:fe:05:dd:
73:6d:8b:b0:10:17:07:d2:44:99:24:6c:11:5c:49:2f:e4:be:
2a:7a:b7:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:49 2026 by rpki-client