Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
File: UkPe10WwX0A46YP7nXjt9W8lE0Y.mft (raw, json)
Hash identifier: cOU9udjvxImEKA30DC+/7E3NUElU7hCxuJYyhlm4+9c=
Subject key identifier: A4:5A:74:7A:DC:2E:C2:EA:D0:A2:47:9B:9B:E4:CD:85:B7:3F:C6:52
Authority key identifier: 52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
Certificate issuer: /CN=5243ded745b05f4038e983fb9d78edf56f251346
Certificate serial: 019FA25FF416079CDF29C6D53323BE1D9259
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
Manifest number: 19D0
Signing time: Mon 27 Jul 2026 07:00:25 +0000
Manifest this update: Mon 27 Jul 2026 07:00:25 +0000
Manifest next update: Tue 28 Jul 2026 07:00:25 +0000
Files and hashes: 1: S2VsmEn5XWWuJUei_3StJEoji4c.roa (hash: l0k+krL5329LUL/NKt5yMEGbXxzmoOUQFl1xjcamtdQ=)
2: UkPe10WwX0A46YP7nXjt9W8lE0Y.crl (hash: QTmQDi9R9LmKT3G5pmOvUtgsQA64Gs2cOfRSX0gDyVU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:5f:f4:16:07:9c:df:29:c6:d5:33:23:be:1d:92:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5243ded745b05f4038e983fb9d78edf56f251346
Validity
Not Before: Jul 27 07:00:25 2026 GMT
Not After : Jul 28 07:00:25 2026 GMT
Subject: CN=a45a747adc2ec2ead0a2479b9be4cd85b73fc652
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:41:77:83:a2:a8:35:01:aa:5f:82:05:4a:7f:
59:03:2c:4e:68:a5:68:00:2f:45:13:66:69:20:b4:
c4:fe:52:70:a7:b8:f8:7d:27:e9:c7:e9:e1:7c:0a:
f6:ee:8b:a7:df:4f:5f:73:19:ac:65:d0:23:44:65:
12:17:df:c7:cd:7f:9d:18:7e:51:77:6c:48:34:e5:
f2:86:a9:65:31:cf:d0:a6:9a:17:9a:f8:69:e1:12:
47:8b:cf:05:78:8a:b4:6d:61:71:46:74:c0:32:e6:
14:45:f4:8b:e8:cb:07:96:91:51:61:a1:9f:a9:0f:
09:d7:c5:5f:b7:82:57:8b:c4:59:8f:5f:d6:f3:6e:
16:49:77:68:98:43:ad:38:d8:2a:8c:1e:8d:36:35:
94:16:3d:5d:2e:ae:60:bc:2f:95:42:db:10:ab:68:
17:06:02:f2:b2:42:e8:b7:ee:80:01:e5:04:38:f0:
d3:04:56:e6:65:06:11:52:2e:e8:14:67:88:37:c8:
7b:3f:1f:9e:f0:00:6b:35:c0:8d:f0:8d:6c:65:82:
a2:8b:00:07:c7:f0:54:14:14:92:37:aa:c5:36:36:
b8:c4:71:0a:03:bf:2f:2b:01:82:bd:79:d6:04:29:
28:72:89:3a:b9:38:74:5b:31:2c:94:5d:2c:c7:9c:
b0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:5A:74:7A:DC:2E:C2:EA:D0:A2:47:9B:9B:E4:CD:85:B7:3F:C6:52
X509v3 Authority Key Identifier:
keyid:52:43:DE:D7:45:B0:5F:40:38:E9:83:FB:9D:78:ED:F5:6F:25:13:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkPe10WwX0A46YP7nXjt9W8lE0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/6633d5-8676-4ec4-a3fc-c536df5c274e/1/UkPe10WwX0A46YP7nXjt9W8lE0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:7c:fd:b4:4e:07:15:fa:0e:d5:37:f7:a6:af:0b:a5:77:78:
f9:af:fc:0f:a4:ad:a9:5b:4e:52:eb:40:e1:e8:ec:39:53:66:
ff:75:3e:5c:6c:82:d7:17:42:55:75:c9:b6:70:14:9f:8e:28:
3b:1c:b3:10:5f:a6:3a:51:b1:3f:78:44:a9:7d:a6:4f:da:6a:
21:b0:59:e7:44:c0:41:f8:aa:99:18:46:05:c0:a2:3a:b4:16:
1b:b0:5e:02:06:81:6a:bc:c3:b6:f0:ff:21:0f:13:e8:b2:d7:
d7:5c:be:87:81:63:e5:31:c3:08:12:3a:f8:60:a5:c9:85:62:
b5:d7:5f:8d:f8:84:9a:4e:1b:94:da:b3:56:47:f0:b8:8b:79:
ec:cd:4d:a4:58:43:79:e6:e2:d6:75:53:f5:83:80:d6:db:f5:
5f:e4:3f:c9:43:01:59:a0:aa:4a:9e:03:d4:60:3f:54:68:97:
92:2e:0f:a9:e5:cb:ba:32:61:c6:cb:08:60:97:06:21:90:d9:
67:e9:4d:2a:d7:b5:89:e3:49:84:5e:5b:bc:96:90:e0:bd:24:
f6:44:95:e6:ec:f7:f7:86:50:ea:ca:2c:21:f1:5d:f2:fa:05:
c2:bd:02:4a:51:e8:62:46:95:46:53:fc:b1:99:31:e7:e9:cc:
1b:ee:a3:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:55:44 2026 by rpki-client