Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
File: UdoAZhIua6KU0rdHk41Gx06Z-IA.mft (raw, json)
Hash identifier: wsMNjwatx/9o6F/On3vd3UJ9kOiUc3cjVkSySFJHiZ4=
Subject key identifier: 44:4A:94:A6:1A:B8:9F:00:A8:2B:19:F1:D6:EB:C9:30:07:C7:B2:8B
Authority key identifier: 51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
Certificate issuer: /CN=51da0066122e6ba294d2b747938d46c74e99f880
Certificate serial: 019F9FCDA1EDA87DC351CDCAB0DF41069C5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
Manifest number: 0A1B
Signing time: Sun 26 Jul 2026 19:01:21 +0000
Manifest this update: Sun 26 Jul 2026 19:01:21 +0000
Manifest next update: Mon 27 Jul 2026 19:01:21 +0000
Files and hashes: 1: UdoAZhIua6KU0rdHk41Gx06Z-IA.crl (hash: WqT5zuRHMmaq7njAXg/neohm8PCQejRiY1krhi6QjL0=)
2: bBMlqfhZbgU4RFc29xzMS28J5Yc.roa (hash: wmFqb2uW30KLYhFd4JkMsA8poWqQ5oZsDAIy44oWkC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 19:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:cd:a1:ed:a8:7d:c3:51:cd:ca:b0:df:41:06:9c:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51da0066122e6ba294d2b747938d46c74e99f880
Validity
Not Before: Jul 26 19:01:21 2026 GMT
Not After : Jul 27 19:01:21 2026 GMT
Subject: CN=444a94a61ab89f00a82b19f1d6ebc93007c7b28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:68:9d:f9:73:b3:d4:cf:5e:db:7a:23:d3:7c:
3e:cd:4f:51:0e:88:f2:74:62:d6:f9:b0:07:a0:e4:
7f:45:24:a6:fa:54:01:49:55:88:14:66:4f:7b:bc:
bf:b8:5c:f9:d8:6a:87:35:80:dc:bc:69:8f:f8:4f:
86:13:f5:23:51:d6:3d:b5:da:33:32:7c:42:ad:f5:
35:97:2e:19:ca:dc:08:e0:cb:79:71:50:81:db:f3:
6b:f9:a5:69:b5:ca:c4:c0:97:68:da:50:7c:60:2f:
eb:f0:18:47:c5:bc:24:18:89:6e:34:9f:e3:2c:15:
60:27:a5:98:e7:59:f3:f0:42:d4:d4:17:4f:d2:38:
18:14:79:d2:f1:c1:3e:15:a6:35:b7:1d:02:c5:54:
3a:0b:75:d4:cc:ac:2c:40:68:0e:5a:4e:b4:a7:82:
ab:e3:be:cc:3f:e4:29:65:55:ce:1d:58:cf:f1:d1:
21:c7:97:87:b4:4d:55:28:3f:7c:04:06:92:22:6c:
0e:b5:89:e9:d8:8a:4f:41:d6:d4:1a:e3:dc:90:97:
e5:f5:b9:29:69:44:64:18:4a:75:d0:bb:1b:35:ae:
96:3e:33:57:34:85:80:3a:19:00:e5:a0:dd:5d:2b:
ab:e9:b3:f8:e2:98:ee:13:95:71:a2:21:e8:01:f6:
15:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4A:94:A6:1A:B8:9F:00:A8:2B:19:F1:D6:EB:C9:30:07:C7:B2:8B
X509v3 Authority Key Identifier:
keyid:51:DA:00:66:12:2E:6B:A2:94:D2:B7:47:93:8D:46:C7:4E:99:F8:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UdoAZhIua6KU0rdHk41Gx06Z-IA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/f64eb4-26cc-4056-853b-be48b7925478/1/UdoAZhIua6KU0rdHk41Gx06Z-IA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:b9:3f:59:b3:52:ca:be:2b:fd:51:0c:a7:c8:c4:6c:a7:e4:
f2:04:ee:ba:3f:54:99:c4:db:05:5c:09:57:02:ce:e2:25:82:
9e:73:94:e2:b4:97:1e:b0:9c:3a:97:46:61:47:8e:91:cb:d7:
11:27:9a:8e:86:8d:f9:fb:4a:c0:54:95:c3:22:79:ab:37:c2:
dd:94:1d:d4:76:1b:f4:c1:c5:a2:d5:09:c7:7e:4d:ad:06:e9:
41:2b:b5:cb:7c:e2:d4:96:91:f6:1f:0b:f7:8e:4f:7a:34:b6:
fd:64:a4:57:11:d2:bc:fd:65:cd:a0:ee:d9:d7:a1:ac:88:e1:
6e:fb:cf:2d:d7:93:01:2b:6d:9a:53:1e:42:61:3d:f1:b1:0a:
28:42:a3:79:ef:75:07:e0:26:b1:25:ee:49:7c:5a:40:6f:47:
ec:db:dc:07:46:06:07:ad:93:1e:92:0b:83:fa:63:a8:66:4e:
a4:24:a0:bb:ba:93:c4:b3:07:bb:4e:8e:f0:46:54:f4:6d:48:
7a:77:7d:c9:32:8a:a9:ea:8b:2f:eb:68:c2:77:2c:5e:ae:d8:
62:e3:6e:9c:79:b0:09:32:52:a1:8e:96:03:99:4d:87:ca:21:
70:b0:97:0c:a6:47:af:09:66:0a:ca:9d:0e:fc:a5:a1:90:b7:
f4:dc:55:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 03:16:44 2026 by rpki-client