Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
File: UrSmj2r_fgaAtvFUQwzudKUDtmg.mft (raw, json)
Hash identifier: BSPlfLzR/KdF27sG5F2FOaJLYiN+NlL3eyesQot15Qs=
Subject key identifier: E2:FB:96:D5:09:F3:FA:44:79:7E:7B:AB:6A:F6:58:68:72:AA:C9:95
Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Certificate serial: 019FA2297F4838019483381C17026BB91738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
Manifest number: 03FA
Signing time: Mon 27 Jul 2026 06:00:56 +0000
Manifest this update: Mon 27 Jul 2026 06:00:56 +0000
Manifest next update: Tue 28 Jul 2026 06:00:56 +0000
Files and hashes: 1: UrSmj2r_fgaAtvFUQwzudKUDtmg.crl (hash: EU6OPRH7Edd9WuRGq+bnSrKkvhzsIKhiNsb2g50j3yc=)
2: ikhZPuNFB8TYzV9iARQ45_sL-xY.roa (hash: nilbi5jmsnD7f7iYCwJkWEwiH79gM1wBIWzSk6xYrZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:7f:48:38:01:94:83:38:1c:17:02:6b:b9:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Validity
Not Before: Jul 27 06:00:56 2026 GMT
Not After : Jul 28 06:00:56 2026 GMT
Subject: CN=e2fb96d509f3fa44797e7bab6af6586872aac995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:81:b6:db:3a:3f:b7:73:52:32:22:dc:1d:d5:
aa:d9:75:db:a8:e0:ff:38:15:1d:26:31:6f:06:cf:
11:36:79:db:4b:04:60:aa:98:f5:92:cf:de:ce:14:
2e:08:04:f9:a1:e8:79:7d:15:95:4f:95:ee:36:7e:
d6:a7:78:9a:d2:b2:b1:c7:2e:90:de:f0:8e:4a:9b:
84:f2:5b:d6:a8:c6:64:fb:38:2f:39:87:67:80:63:
7d:0e:79:f2:e3:24:5b:93:02:47:68:78:7f:dc:1e:
d6:d3:c3:e1:7a:ab:bf:a9:c6:19:c6:4e:f0:53:31:
97:59:55:80:9d:07:dd:eb:50:d1:c8:13:57:8d:f8:
04:73:7d:f7:db:f5:88:59:cf:b0:97:dc:11:31:0f:
29:0a:ef:b2:eb:84:a4:49:45:0e:b7:e1:af:b2:82:
b1:72:7f:c4:1a:9c:f4:19:c1:8e:c6:dd:a8:93:36:
71:e1:64:9f:fe:05:99:43:bc:b2:18:c7:0a:f9:f3:
74:6c:4a:8c:86:e9:f2:0d:b4:a4:6e:94:af:bd:66:
d6:7f:fa:26:19:5c:f4:4c:0e:ed:2d:89:6a:99:82:
64:2a:f0:65:79:ff:25:b2:b0:bd:a0:5a:34:4c:43:
e0:2c:6a:e6:0e:9d:c3:16:80:cc:62:8b:7e:a7:37:
55:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:FB:96:D5:09:F3:FA:44:79:7E:7B:AB:6A:F6:58:68:72:AA:C9:95
X509v3 Authority Key Identifier:
keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:db:79:f7:2c:5d:e4:dd:fe:c0:1b:74:6f:78:25:eb:3d:
8b:89:d3:7b:f3:08:56:7d:4b:58:c8:98:33:13:4f:0d:5a:f3:
9e:48:f8:6c:6d:5f:df:8d:a4:30:3a:36:f0:02:92:7b:ef:b7:
7a:eb:75:aa:da:e4:06:83:cd:93:fd:9f:d2:f6:fc:85:1d:e6:
31:c7:f6:e4:7d:7a:65:c4:db:d1:c2:f5:db:00:f2:22:48:f2:
6b:f8:e2:87:72:79:e4:cd:9e:b2:7f:aa:81:bd:95:50:9c:3d:
e2:82:ee:a5:3c:8e:f1:73:db:45:46:59:f5:bb:20:0b:fc:53:
fd:7f:4f:67:a6:37:ef:28:3a:40:cc:9c:9a:54:7c:b9:ed:d7:
20:e9:97:06:ec:55:69:66:2f:c9:43:b2:51:5b:87:7b:b2:07:
bc:1e:cb:c4:ca:b9:62:03:6e:8e:19:8f:0d:a8:b7:41:52:b2:
bc:8c:bf:31:66:a9:35:fc:d5:a0:4b:4d:7d:d4:fe:d2:76:21:
2a:4a:07:00:e5:d2:72:65:66:c2:ac:7d:7f:e1:87:9c:4e:d5:
44:f5:59:d8:1b:c5:c4:0c:ae:4f:dc:f7:e1:1d:82:0f:b1:17:
a4:6c:69:91:0c:e8:fa:4a:30:78:ef:8a:b9:fa:56:fc:2c:06:
79:c7:dc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:35:04 2026 by rpki-client