Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: l4iRk9wjcO9H29NFiM0w6Hq3bqmT2Bk2QdiGcPxKdiI=
Subject key identifier: 71:B1:1C:32:E4:55:1F:01:05:C3:9A:11:01:FE:26:4B:2F:A2:7A:2F
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019FA14D6147A017E03C4B4F37A5506535E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 15F6
Signing time: Mon 27 Jul 2026 02:00:30 +0000
Manifest this update: Mon 27 Jul 2026 02:00:30 +0000
Manifest next update: Tue 28 Jul 2026 02:00:30 +0000
Files and hashes: 1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: 5xdWz7RJVkROe0J8V04Lhoe+zojlKw4IK3xDkvrv5YI=)
2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
3: r-wLcfbrV7gSA_iFZTlD40lbPxI.roa (hash: 9BuizisqfHZcVlGBCcKNw9NkVDpUfvizltmHgaebiwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:61:47:a0:17:e0:3c:4b:4f:37:a5:50:65:35:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jul 27 02:00:30 2026 GMT
Not After : Jul 28 02:00:30 2026 GMT
Subject: CN=71b11c32e4551f0105c39a1101fe264b2fa27a2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:9d:bc:c7:e0:0d:e9:96:cd:94:a3:e3:9a:ce:
ec:d0:e6:0e:7a:d2:d7:c4:fa:9f:ea:aa:16:3e:6e:
dc:3c:aa:22:c7:71:a0:aa:5f:5a:71:f7:83:4f:7a:
9d:b5:57:c4:d9:01:3e:1c:e5:11:28:16:a7:62:68:
5d:2c:bb:e9:fb:78:39:67:85:4b:db:f8:42:b3:5f:
24:23:14:b5:b2:9c:4f:31:8e:e8:47:f7:ef:ff:83:
6e:80:9a:df:12:62:53:f7:12:b6:f6:3d:36:07:36:
a3:40:4c:79:0c:71:38:81:0d:ea:e3:10:4f:73:be:
6f:3e:40:fc:27:03:35:fd:c7:14:77:7a:7d:ef:8b:
d6:3b:59:74:48:94:51:62:57:70:4b:36:cf:94:2a:
56:10:8e:1b:cb:11:0b:6b:0f:f9:2e:f4:8b:39:0e:
46:89:03:83:69:53:04:04:6e:41:41:31:7a:ac:38:
39:68:67:e4:fd:87:e9:5d:a8:b9:f4:4b:2d:46:e6:
f9:fc:2d:1c:30:48:0d:fc:1e:e5:8a:c0:5e:6d:a3:
9d:cb:c7:4e:cf:83:87:98:b3:1b:cf:e5:43:f1:1e:
43:e1:fe:89:99:61:7a:f2:fd:49:fb:97:09:7a:40:
2d:41:3b:15:b6:8b:5d:34:da:34:61:03:bb:54:6d:
f7:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B1:1C:32:E4:55:1F:01:05:C3:9A:11:01:FE:26:4B:2F:A2:7A:2F
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:d3:51:d3:56:e3:85:34:b5:83:74:0c:30:11:7c:ac:c7:cf:
41:78:af:a1:ba:ce:33:85:06:5d:7d:3c:7e:aa:4d:d1:8c:a5:
ee:31:ad:af:8e:4c:af:2e:0b:53:8b:24:61:71:d7:e6:0c:cf:
1d:22:f3:71:55:2b:11:73:e7:af:76:16:d8:b6:bc:9a:36:f7:
f1:c2:12:14:43:40:f2:29:37:92:fe:98:84:b1:33:e8:c1:09:
be:59:c0:91:e8:bc:fc:a1:d3:0f:f1:db:4a:52:a7:79:20:b7:
29:d9:95:2f:77:20:4d:49:6a:3a:93:15:7c:65:fb:10:36:fc:
23:55:70:65:f9:04:af:57:d5:b8:4a:ec:b0:6b:33:c3:6d:22:
ae:44:ae:9f:40:90:46:0a:c5:7b:1c:91:ad:49:2e:a6:d1:da:
a8:a4:d6:3e:d8:4f:f5:36:6e:18:05:18:d8:2e:0e:fe:4d:7b:
e4:a8:d7:6b:7e:7c:97:fc:1b:e0:00:6b:f1:e8:a1:29:38:ca:
df:7b:3c:01:81:b8:e7:18:c4:0c:e9:26:49:d2:d2:14:8e:2c:
f0:e0:fa:de:a7:ac:f9:f2:1b:b2:af:68:74:73:04:64:ea:14:
fc:df:86:c6:87:cb:7b:2d:12:cf:6e:80:69:c5:4a:52:0d:f2:
f6:7d:51:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:27:16 2026 by rpki-client