
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: 5I2Khqq6fq2uLhNM0hLvPvM7UXxbry4hNz386pibj2Y=
Subject key identifier: E1:94:99:7B:D5:10:B1:9E:E4:96:D0:BB:C2:FF:6D:D6:12:D9:1E:A1
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 019FA305761E649C51862A6EB37C3C5DC0FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 19D6
Signing time: Mon 27 Jul 2026 10:01:11 +0000
Manifest this update: Mon 27 Jul 2026 10:01:11 +0000
Manifest next update: Tue 28 Jul 2026 10:01:11 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: qHELZ3pwqJmebL249Z2TIpQ5Dq6jPxsLEKzdmF+us18=)
2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:76:1e:64:9c:51:86:2a:6e:b3:7c:3c:5d:c0:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jul 27 10:01:11 2026 GMT
Not After : Jul 28 10:01:11 2026 GMT
Subject: CN=e194997bd510b19ee496d0bbc2ff6dd612d91ea1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:69:fe:13:f5:a2:be:79:33:4f:f6:e2:00:90:
ad:ad:09:12:41:39:57:d3:30:fc:29:ea:d6:48:31:
c7:a0:d4:2d:ec:73:64:78:52:e4:38:ee:10:9b:0a:
38:5e:5c:a2:a7:e9:35:a0:35:13:fc:3b:f2:2f:f0:
2e:61:ed:6d:e3:92:d0:ff:15:5d:19:53:98:fc:89:
f0:a8:36:10:6f:15:b2:28:b0:71:48:d0:c6:70:c9:
d0:8a:9c:76:55:b0:e0:18:27:3b:ff:86:59:9f:c4:
f6:3e:31:4e:06:58:7f:fa:e4:ef:33:db:fc:30:59:
50:1d:cd:63:c7:e9:a4:04:8d:81:02:ae:52:c5:88:
aa:34:f1:7b:6f:1b:cb:22:02:82:78:2e:d8:43:9b:
87:4a:4e:a7:19:f7:e8:3a:32:55:41:1d:08:83:90:
1c:f2:62:d8:ac:83:7c:a6:fd:d9:8d:a4:5b:a0:16:
d9:ea:54:7b:bf:68:18:10:cf:7f:68:80:c2:6a:8b:
55:b6:e6:05:06:7b:28:1b:0b:b2:8f:d4:93:fa:5c:
b8:15:55:3c:2a:00:5f:08:90:f0:33:35:b8:2a:04:
b5:e4:ab:a0:bd:0c:19:c4:51:6d:30:a0:3a:5a:c1:
ec:09:aa:6b:99:1d:1f:33:4a:71:c1:a2:10:28:46:
a8:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:94:99:7B:D5:10:B1:9E:E4:96:D0:BB:C2:FF:6D:D6:12:D9:1E:A1
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:3e:20:eb:ba:2a:2c:ae:42:ae:86:a6:d8:90:eb:25:f0:a6:
be:9d:74:94:a6:44:ea:bb:c6:4b:9a:32:ee:f7:93:de:99:c7:
0b:d4:0e:aa:93:16:37:ba:fb:04:0a:0f:cd:3b:c3:a9:71:88:
6d:9e:9a:be:e5:b2:07:a2:7b:19:73:5a:34:68:79:4b:fe:f2:
13:04:06:d7:28:7a:ab:f7:8f:c1:91:80:bb:ee:b0:82:9e:57:
cc:be:bb:d7:50:2d:fa:20:73:6f:4e:b2:bc:fc:04:c7:4e:67:
47:44:99:19:cc:84:82:1a:2e:3d:71:c5:a3:b7:7f:2c:be:50:
a0:ea:32:5e:3c:aa:0e:35:12:b3:37:2b:d1:32:db:12:66:4a:
d3:0d:f9:df:e6:d6:68:14:5e:e9:a5:10:f4:80:c3:66:cd:2e:
97:fe:54:39:98:3f:7f:f7:56:17:e2:aa:64:30:13:23:a0:ac:
61:c3:f6:54:11:03:54:eb:c3:7d:86:0a:13:8c:92:90:15:d2:
55:63:c3:90:8f:f3:da:b9:17:09:1c:61:8f:f3:37:d5:8d:51:
b6:0d:91:d8:2f:9f:5f:1e:9e:41:ee:67:4c:35:a1:52:54:33:
89:aa:57:94:70:3a:77:88:6e:d3:c4:32:ed:07:85:98:64:79:
09:57:0c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:22 2026 by rpki-client