Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: O2j3cRp2VXT0uQmca3ijbK01Z51uKdQLG0Dfa5Bp1/0=
Subject key identifier: BD:78:1F:4C:1E:04:DC:E1:EF:41:44:AA:DF:DD:FE:CC:E5:7B:48:FC
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 019FA03B2A85B39E2CB34E72D03E4CB29633
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 171C
Signing time: Sun 26 Jul 2026 21:00:59 +0000
Manifest this update: Sun 26 Jul 2026 21:00:59 +0000
Manifest next update: Mon 27 Jul 2026 21:00:59 +0000
Files and hashes: 1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: GHsoHrl+5s1FW/r7sItBzQtE7TmLVLRZszwDXAiLgV4=)
2: Xn8q_66t7wzhb4v1l5kcWKBFQNs.roa (hash: 6vO+ulMoF82yem5grlAhBfA3FaHkdUHzR33O3qHwMWk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:2a:85:b3:9e:2c:b3:4e:72:d0:3e:4c:b2:96:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Jul 26 21:00:59 2026 GMT
Not After : Jul 27 21:00:59 2026 GMT
Subject: CN=bd781f4c1e04dce1ef4144aadfddfecce57b48fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:25:18:13:8d:52:91:16:08:eb:92:e8:06:af:
ec:5b:62:ac:b3:c8:9f:a3:b4:b9:60:40:81:75:a2:
a0:48:2f:ef:ad:0b:7d:04:49:1f:c9:d0:10:34:6d:
a9:2e:91:57:66:ad:23:8b:22:a8:c8:b8:54:bb:be:
25:4c:bd:c7:0e:28:e7:89:41:df:22:9b:7e:3e:bd:
17:96:af:dd:2c:6a:d5:fb:66:77:f4:7c:8a:b0:01:
16:2d:fc:98:93:a8:d2:02:48:7c:7f:13:93:dc:d6:
13:e3:54:71:97:d1:f3:a1:fa:2d:83:dc:04:f9:bd:
39:b3:9a:9a:40:40:98:75:e1:87:37:79:3d:e7:e7:
4f:38:36:5c:a3:42:6c:99:87:12:a8:3a:b8:c1:c9:
d3:16:0b:44:16:62:cf:73:70:7e:f6:89:97:30:2d:
63:d6:b8:d3:70:c9:d6:cd:a3:79:73:4e:6f:6b:52:
88:8b:a5:8f:75:69:c2:ee:6f:9e:47:76:b9:eb:06:
ff:49:c0:81:69:9f:84:03:62:6c:cb:11:7d:6d:22:
16:ca:d1:c2:64:99:6b:68:67:88:d9:25:57:fc:9c:
ed:3f:0c:89:9f:b4:13:73:52:0f:c6:b2:62:de:66:
4c:a7:a7:31:f7:a4:aa:aa:62:60:8d:56:6b:80:0d:
b9:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:78:1F:4C:1E:04:DC:E1:EF:41:44:AA:DF:DD:FE:CC:E5:7B:48:FC
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:50:cd:19:2e:65:68:64:78:a5:b0:29:0b:23:26:b1:f8:15:
28:85:29:86:4c:bd:c3:1f:85:17:95:a9:3f:ad:e5:15:01:4b:
e6:48:be:2e:5a:30:cd:53:cb:64:9d:0c:a2:c5:01:9e:5a:d7:
0a:fa:23:7a:26:4c:78:f9:42:a6:e2:a7:ba:f3:c1:30:9b:eb:
d9:4d:eb:03:4f:2e:7a:71:80:72:ed:2b:65:a0:63:93:01:ed:
07:42:26:de:96:f1:2e:4b:f0:b8:00:fd:08:89:43:3f:5f:1a:
b1:fa:ca:75:5b:95:27:9c:37:e2:f3:a8:62:7f:aa:57:2e:68:
cd:86:75:0d:78:4d:c1:a6:bc:94:c0:04:02:76:11:39:6b:8d:
c4:5d:1d:33:73:0f:1e:47:d7:fc:47:c2:1f:31:a7:36:39:ce:
b7:de:88:81:f6:7c:64:37:fb:75:58:a1:d9:67:b1:85:01:9b:
e5:f4:fd:19:02:8b:cc:f2:cf:08:7e:c9:e6:06:47:9b:ed:dd:
fd:a0:4b:db:00:73:ef:bc:88:54:31:05:c7:b9:a4:e7:4a:10:
85:de:4e:06:c7:43:d1:3a:8a:6f:b4:eb:44:15:a6:f6:70:9d:
63:94:19:8e:55:d0:62:59:1d:54:df:0b:85:97:a5:6a:3f:73:
ab:64:62:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:51:17 2026 by rpki-client