Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
File: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft (raw, json)
Hash identifier: VFa6gqlC8RiTIZno35sNxACWwIgDsYTO93CFDnQlRK0=
Subject key identifier: 7F:C6:2D:EB:A8:36:D7:61:5B:D4:A5:5C:1F:49:3D:FC:AD:FE:AA:7C
Authority key identifier: 52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
Certificate issuer: /CN=52302a45d0568486051a7ec466f03108c320b4c4
Certificate serial: 019F36AA778BF61E3AB9ACB6FE9E6DB2B0CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
Manifest number: 1848
Signing time: Mon 06 Jul 2026 09:02:49 +0000
Manifest this update: Mon 06 Jul 2026 09:02:49 +0000
Manifest next update: Tue 07 Jul 2026 09:02:49 +0000
Files and hashes: 1: UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl (hash: DMafstR9Klol/gS7M4f75X1QeehRAbN/YBqFVVo5teo=)
2: tPGHq-xonUhjbc0GPXfgpubi7fg.roa (hash: enO+XevnxDfW0eM48CipaEGSZTkfKHUjYqxFWFDkOZ4=)
3: wRc3Z7cAWkuH8qIX0DCtlZppJxw.roa (hash: LxXQG3jteUBxRZiT3TEKB78O1uWlhGbpoLQr0jkRBdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 09:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:aa:77:8b:f6:1e:3a:b9:ac:b6:fe:9e:6d:b2:b0:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52302a45d0568486051a7ec466f03108c320b4c4
Validity
Not Before: Jul 6 09:02:49 2026 GMT
Not After : Jul 7 09:02:49 2026 GMT
Subject: CN=7fc62deba836d7615bd4a55c1f493dfcadfeaa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:2e:b9:1b:4c:0f:49:6c:84:e0:db:a6:b2:f1:
16:97:f3:63:e7:97:75:f1:24:96:31:95:26:47:62:
c5:c7:ff:4b:87:56:9d:a5:3b:af:41:42:0c:83:07:
cc:60:5b:f3:c7:1f:e9:6b:45:fc:e8:c3:59:7b:a7:
97:e3:fd:38:ec:1e:da:31:30:f1:b8:78:21:8b:5f:
f3:31:fc:a8:ca:a9:ba:9a:b0:1b:20:c9:e2:06:8c:
a1:17:f2:da:52:0a:d5:24:05:28:c3:d5:7f:c7:c5:
de:2f:96:88:d4:4c:76:b6:5f:64:0b:e8:0b:ef:64:
cc:2d:15:7c:9a:ac:1f:14:e0:c9:13:89:c0:62:27:
a5:76:1e:7e:10:b4:13:96:01:2d:d5:ae:71:2d:a2:
69:d6:1f:c3:8b:01:28:aa:61:f3:dc:04:f3:ba:bf:
d9:82:0e:0c:af:89:25:cc:d1:db:98:fe:5b:af:ed:
48:02:36:37:5e:ce:65:86:10:98:48:3a:e2:4f:be:
b4:e4:27:0d:fa:c1:e6:51:43:58:06:6c:83:8c:fa:
cd:b8:5b:66:5a:a4:d0:e8:db:cb:c7:8e:38:8a:00:
1d:55:72:63:55:5b:c3:e5:1d:84:eb:68:2d:e9:da:
99:d8:b0:8c:d9:ae:93:34:8e:e1:00:49:7c:9b:49:
39:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:2D:EB:A8:36:D7:61:5B:D4:A5:5C:1F:49:3D:FC:AD:FE:AA:7C
X509v3 Authority Key Identifier:
keyid:52:30:2A:45:D0:56:84:86:05:1A:7E:C4:66:F0:31:08:C3:20:B4:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/75ba72-d7b2-4283-9f0b-e3e5fa36bb2f/1/UjAqRdBWhIYFGn7EZvAxCMMgtMQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:5f:41:cc:04:94:f3:0b:11:27:03:aa:f0:e9:02:28:87:d1:
59:1d:c0:dc:6f:dd:f6:e1:7f:cf:35:48:f0:c9:25:3d:c3:0f:
ef:04:81:fb:5d:9f:c1:92:f6:cd:f8:82:3d:fa:52:b1:92:52:
5f:9d:0d:af:c3:cb:49:5d:06:a7:8a:f5:42:d6:9a:27:eb:85:
4f:40:35:6a:eb:88:80:a0:53:30:11:e8:5b:8e:16:64:8e:d9:
6f:75:72:8f:ed:ed:c6:b8:aa:d3:ba:0d:da:49:e8:e7:91:15:
6d:13:fa:99:ae:67:c7:31:13:a5:76:ad:61:e1:69:e8:8d:f8:
b1:0b:a8:a2:55:74:32:37:1d:c0:60:8e:ea:c4:7a:62:06:5c:
36:8a:1e:2a:20:a9:8e:21:2a:d8:b5:86:4a:35:00:61:c3:86:
c9:d6:6e:72:b9:83:e0:9b:fc:a7:36:f5:0c:4e:85:1b:1f:a8:
ec:3a:08:a6:44:46:0c:d5:ed:8b:ed:81:64:b4:c7:72:6f:44:
02:64:a8:24:c7:ad:8f:ca:4a:0f:67:b4:51:e0:0f:ae:da:c3:
4b:e8:6f:f4:7a:a4:55:ba:67:73:62:30:97:66:79:a0:22:84:
0c:8c:53:62:96:02:77:17:c9:cb:70:f5:bb:7b:a6:52:cc:8c:
17:d5:17:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:06:30 2026 by rpki-client