Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
File: UmTy3QuYerdeN5-Bd6QXajCGAGg.mft (raw, json)
Hash identifier: R+UvWSmd+ud5qVQ58S0AHY93diyHoOl7AK3cvqq6PZ4=
Subject key identifier: 7C:A5:DB:00:C9:A3:4C:D0:D7:9E:E6:85:64:57:AD:8B:87:52:43:BF
Authority key identifier: 52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
Certificate issuer: /CN=5264f2dd0b987ab75e379f8177a4176a30860068
Certificate serial: 019F9E15E455533987110E4D9250211BD036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
Manifest number: 0609
Signing time: Sun 26 Jul 2026 11:01:02 +0000
Manifest this update: Sun 26 Jul 2026 11:01:02 +0000
Manifest next update: Mon 27 Jul 2026 11:01:02 +0000
Files and hashes: 1: UmTy3QuYerdeN5-Bd6QXajCGAGg.crl (hash: QEQ4hLyAfiovFBhoPnwQ3VXXhLVxO6/7HL90uKC7Xgg=)
2: h7aUOqQIAGVx29wKcHsmI73SdWI.roa (hash: nXej1/AfJF2/TdKlqz14CbVM6VY7sIDvsNtbQhZWQmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 11:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:15:e4:55:53:39:87:11:0e:4d:92:50:21:1b:d0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5264f2dd0b987ab75e379f8177a4176a30860068
Validity
Not Before: Jul 26 11:01:02 2026 GMT
Not After : Jul 27 11:01:02 2026 GMT
Subject: CN=7ca5db00c9a34cd0d79ee6856457ad8b875243bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d2:3b:34:e8:89:bb:00:af:61:8d:e8:8f:58:
9c:d9:45:45:a4:91:57:43:53:75:10:5b:ba:2a:8a:
a4:6b:82:ae:56:ed:91:98:d0:72:9e:5b:90:04:7a:
11:09:47:9f:2c:21:30:9f:39:78:b3:da:c6:8e:45:
98:ea:3f:18:ee:c0:5b:38:43:68:a0:82:f5:2e:3e:
be:d5:5b:80:77:ad:bb:e7:97:df:55:c2:fb:06:b4:
f1:fe:37:df:92:70:33:f8:69:1e:6e:79:c7:20:0c:
42:43:a7:7b:d6:c0:da:3f:8e:0a:77:b5:33:d4:cf:
80:84:fe:cb:d6:dd:0d:4b:24:12:62:a7:8a:04:f7:
1b:3c:4e:b9:a7:08:d9:ef:69:94:2e:68:e2:ad:64:
6d:a6:4a:58:12:76:ba:74:48:f9:b4:13:f5:3e:d2:
8c:05:be:05:0b:0c:42:fe:d0:a7:dd:3d:6a:75:42:
e7:72:1f:4e:0a:c5:91:fe:5c:06:13:16:e3:d0:e8:
12:25:e0:71:e9:72:6f:0a:44:b6:e6:01:7b:ef:71:
47:7f:86:69:4b:f8:9d:56:81:d3:24:07:2a:9b:1c:
e5:71:17:68:e4:8d:83:a8:fe:f7:77:0d:72:3b:b2:
27:05:57:d6:11:d9:dc:43:89:52:b6:67:80:10:93:
cb:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A5:DB:00:C9:A3:4C:D0:D7:9E:E6:85:64:57:AD:8B:87:52:43:BF
X509v3 Authority Key Identifier:
keyid:52:64:F2:DD:0B:98:7A:B7:5E:37:9F:81:77:A4:17:6A:30:86:00:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UmTy3QuYerdeN5-Bd6QXajCGAGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/5c10ef-6d3c-45e4-8ef9-9d794ee14dd0/1/UmTy3QuYerdeN5-Bd6QXajCGAGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:81:90:dc:ff:ee:27:a6:75:f0:dc:4f:b7:84:a7:a1:37:0e:
dd:a4:09:a6:ce:06:2b:a5:0e:38:cf:f1:ae:c2:49:23:2e:09:
0b:8c:23:0f:fb:7b:c1:df:2e:1a:95:fd:ea:7c:5c:c6:52:71:
41:aa:1f:45:b8:7c:4b:f4:b4:12:8d:7f:5d:9f:49:43:68:16:
13:0f:af:93:56:8f:eb:51:e1:4f:65:63:bd:94:21:68:79:cc:
92:35:0a:18:6f:73:9c:67:f8:c3:db:b0:0e:7b:8e:4d:11:cc:
5f:76:e9:3f:7e:e9:a6:ae:05:f3:b3:7d:71:e4:12:9c:af:76:
bf:60:13:a2:19:89:ab:02:e6:75:42:38:6c:68:19:98:93:b6:
59:a1:ec:d1:35:e5:a0:1e:bb:a1:2a:20:a7:6b:a8:81:3b:02:
3f:8e:2f:8a:28:83:67:d5:6e:43:a4:ba:37:04:60:8d:41:9e:
50:fc:30:b6:7d:d1:54:b2:f1:da:44:dc:c8:9c:f9:e1:f8:87:
03:b9:f7:b7:a6:0f:d2:62:3f:d4:ec:4b:74:f2:c2:ba:58:cb:
ad:cf:b5:ce:df:29:f7:2d:77:62:29:5b:e3:cd:ce:d2:61:42:
98:7f:fb:86:1e:85:e4:b0:19:8d:cc:a7:81:0d:9c:ee:e2:9e:
16:51:e0:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:32:42 2026 by rpki-client