Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
File: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft (raw, json)
Hash identifier: SUgQt0LCXxyLb/tP04QXGRpHeBCz+FtCjeRTbO5kM30=
Subject key identifier: 18:4E:6D:14:05:DC:25:3E:53:1B:9C:D9:7B:55:A5:F0:68:04:CF:60
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 019FA116BE91B94B488D011CD0E7C9C0A3F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
Manifest number: 49
Signing time: Mon 27 Jul 2026 01:00:49 +0000
Manifest this update: Mon 27 Jul 2026 01:00:49 +0000
Manifest next update: Tue 28 Jul 2026 01:00:49 +0000
Files and hashes: 1: aHiGs_kfVS1DoiuEnfjlUZrGV7M.roa (hash: FlQ4woD6r87CTo56VrPgZyPlvImZWFoOO8xKo56dALc=)
2: aKvA2sGDcrQ9MX1z85xud2IcwQ0.roa (hash: K4dwopOx/n4SNP6oBK4GBq75QTWYS4KcSRrgSdwWp/I=)
3: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl (hash: VXEAajLJheFQYwlk7UtPxNSMbG3VRj7wf1zA2bl6caw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:16:be:91:b9:4b:48:8d:01:1c:d0:e7:c9:c0:a3:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Jul 27 01:00:49 2026 GMT
Not After : Jul 28 01:00:49 2026 GMT
Subject: CN=184e6d1405dc253e531b9cd97b55a5f06804cf60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:f0:55:07:e4:73:92:16:4e:1c:2c:28:74:97:
12:79:12:04:55:c1:1a:2f:b6:b2:68:a5:9e:e1:f5:
fe:e1:ff:29:bc:8f:85:cc:c8:ac:5a:5f:b1:54:ea:
49:82:34:a9:b5:22:45:8b:e1:32:d1:52:6c:88:e1:
9e:9a:19:3f:de:23:15:ea:ac:3b:8a:9f:cc:29:05:
af:69:4d:0d:7e:9e:36:3b:d4:9b:8f:f1:17:b5:d8:
d6:bd:ff:1e:72:bd:a4:26:96:c4:f6:64:a6:29:f5:
4a:f5:a8:07:f1:7f:1e:96:8b:97:e1:dc:af:30:07:
86:22:13:4e:cf:ba:23:44:b7:2a:ad:ec:e3:93:4e:
5d:0f:94:46:10:9a:24:47:c7:aa:fc:2f:84:3c:ae:
f5:51:1a:52:f1:5a:e4:03:65:42:c3:18:62:8e:0d:
36:34:ab:a4:14:90:33:22:8b:60:43:ac:05:fb:95:
1e:94:da:4c:6f:49:62:c4:9d:93:19:0f:0b:c3:d3:
55:a3:2e:5d:8b:9e:78:2b:a8:38:8b:e7:b0:af:82:
82:cd:be:02:ca:78:33:14:f6:0a:4d:2f:78:49:ea:
35:95:be:86:88:f7:8d:95:b4:65:8a:61:8e:b9:89:
ae:33:3e:a6:de:79:97:24:e4:41:8b:b2:2d:b8:f9:
f7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:4E:6D:14:05:DC:25:3E:53:1B:9C:D9:7B:55:A5:F0:68:04:CF:60
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:41:f0:eb:8e:85:8f:3e:ee:96:d8:8e:c7:98:5a:8a:9f:15:
a3:f6:02:24:c4:37:2e:ef:b0:a3:a1:1b:93:95:d9:d2:9b:d2:
a7:f8:ce:26:15:77:ac:3f:96:30:95:b2:b5:81:d1:1a:f1:fc:
27:a0:0f:b5:95:d3:96:fd:ad:9f:74:19:61:7b:95:9f:50:f6:
98:ab:7c:bf:ea:3f:b5:0a:76:0e:ca:03:41:1d:dc:77:d0:a2:
40:f9:0b:cd:8b:bf:93:04:a5:4a:8c:ad:56:65:4a:e4:dc:fe:
07:78:6c:1a:99:c5:4a:4f:42:e6:1e:13:d2:06:e7:85:b5:71:
c8:5f:f7:48:12:c4:d3:72:a9:52:b8:f5:c8:e8:e2:eb:a0:6f:
9f:28:ad:e5:58:95:25:c5:f0:fc:88:52:85:bc:b9:49:2f:74:
07:6a:c6:9c:b2:ee:ac:05:9a:a9:14:a7:9c:90:56:09:19:f3:
0b:8e:f7:f2:ce:a0:77:ac:4b:4b:bb:a5:65:59:d1:cf:cb:a4:
3e:16:db:5c:a4:14:51:21:c4:fd:0d:25:c2:22:89:9e:5c:32:
18:79:b4:dd:9b:e4:b4:8a:f0:fa:71:1a:13:1b:85:b8:a1:cd:
98:e3:2e:c9:f4:ad:e2:e2:14:b5:d4:33:dc:f3:07:42:37:16:
d3:45:2f:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 08:57:03 2026 by rpki-client