Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
File: unuTQCuSGNf2ErT5YmJwpxrmvi0.mft (raw, json)
Hash identifier: bJTNrTMsMzt65/k+y4FLMlQ212rO0P3ioN2Ldi71kiI=
Subject key identifier: 5A:63:02:E6:C2:EE:0B:47:4D:2D:41:7B:8E:6E:24:36:4D:06:D5:2C
Authority key identifier: BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
Certificate issuer: /CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Certificate serial: 019FA03B1CE175B032D4328FD551E1EF8D37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
Manifest number: 19D9
Signing time: Sun 26 Jul 2026 21:00:56 +0000
Manifest this update: Sun 26 Jul 2026 21:00:56 +0000
Manifest next update: Mon 27 Jul 2026 21:00:56 +0000
Files and hashes: 1: unuTQCuSGNf2ErT5YmJwpxrmvi0.crl (hash: Q06ZuCyQADJ6Cl80V566V2RNU021YZvXqtsyxJDXB/U=)
2: wNpTaVnPcvSj1HRi75G4KSOnkgs.roa (hash: Qvayj0OyKoed9w2o0NXQ4JAD5fOZl2wDcqSFJsq9rQg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3b:1c:e1:75:b0:32:d4:32:8f:d5:51:e1:ef:8d:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba7b93402b9218d7f612b4f9626270a71ae6be2d
Validity
Not Before: Jul 26 21:00:56 2026 GMT
Not After : Jul 27 21:00:56 2026 GMT
Subject: CN=5a6302e6c2ee0b474d2d417b8e6e24364d06d52c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:50:ac:77:ec:a1:66:d6:5b:56:ee:2a:a2:f7:
13:24:6b:c1:af:3d:ef:0c:fc:47:d0:72:8e:3e:65:
8a:9d:5f:d2:91:5c:8a:9b:d7:61:c8:3d:ea:4e:1f:
7e:22:a2:c8:51:25:50:6d:c0:2c:4c:08:17:13:67:
f4:90:ef:21:8d:cd:a7:4c:4c:35:f6:cd:97:7b:1e:
0d:47:46:83:e1:0b:d5:1c:6e:a9:e8:9e:89:33:61:
a0:a5:5f:fe:e6:68:f3:19:21:21:6e:c0:9d:fb:89:
fb:90:05:9c:20:3d:eb:bd:47:08:48:5c:47:3f:89:
dc:e1:2b:d7:e1:1a:7c:1d:d4:6b:26:ca:14:57:f0:
9c:38:e0:a4:73:79:ff:a0:62:18:59:de:cf:69:dd:
d6:7a:08:ab:d1:0b:e2:38:97:88:43:00:9d:ac:c9:
2a:72:67:87:66:8a:1b:96:81:7f:ca:8b:c0:6d:ff:
b6:9d:91:98:90:b0:95:66:17:a4:9a:87:cc:6e:67:
21:e2:d6:6c:94:d0:0f:c2:98:ac:12:3d:86:32:20:
17:17:c2:9a:e8:bc:e1:c1:ea:25:b3:e5:e3:7d:2c:
9f:96:5b:ba:ca:97:8a:50:70:ea:56:62:c3:4a:a5:
fb:30:42:3b:6f:e1:8d:15:a5:a2:12:f3:e8:97:ec:
6a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:63:02:E6:C2:EE:0B:47:4D:2D:41:7B:8E:6E:24:36:4D:06:D5:2C
X509v3 Authority Key Identifier:
keyid:BA:7B:93:40:2B:92:18:D7:F6:12:B4:F9:62:62:70:A7:1A:E6:BE:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unuTQCuSGNf2ErT5YmJwpxrmvi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/d68a35-b191-4197-ab78-f4c93601c859/1/unuTQCuSGNf2ErT5YmJwpxrmvi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:ae:d7:75:48:91:c4:a6:01:82:1a:9b:25:17:6d:ee:66:05:
dc:9f:c9:f1:59:6e:5e:9d:37:d2:54:30:49:52:23:92:ed:02:
5b:2b:03:cd:9a:6c:96:39:e9:28:56:e2:aa:4c:2f:e0:bc:86:
47:1e:da:5c:8f:73:a2:bc:33:89:92:55:d0:13:89:f9:41:df:
b5:4b:ce:42:d6:9a:77:20:5d:ef:b9:c9:ea:cb:32:c5:51:70:
bc:e9:55:e7:1b:f3:4d:0a:61:9a:ac:c8:fa:48:b8:b4:87:d7:
21:4c:7f:83:48:5a:c7:39:ce:96:76:1f:16:be:80:18:6f:32:
89:86:df:13:fe:39:f3:48:6e:e1:ff:0e:73:65:23:5a:44:42:
71:ba:40:08:33:29:8f:b3:aa:14:c1:d2:35:db:35:11:30:72:
fb:7c:b4:68:df:5a:d9:5d:a2:b4:2a:a6:9e:0f:69:28:4e:85:
ed:5f:46:9c:7e:3d:f9:7c:a7:55:69:81:d0:65:77:e7:f6:5e:
86:20:a8:07:4c:3c:b0:99:d6:f4:30:5e:3c:d3:03:e7:29:13:
ac:dd:aa:a7:c3:49:0f:71:aa:47:8b:39:04:d5:e1:bc:cd:15:
51:f7:e6:0e:1c:02:ff:8d:66:0c:ee:11:53:3f:89:d2:62:a4:
68:f0:02:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+gOxzhdbAy1DKP1VHh7403MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhN2I5MzQwMmI5MjE4ZDdmNjEyYjRmOTYyNjI3MGE3MWFl
NmJlMmQwHhcNMjYwNzI2MjEwMDU2WhcNMjYwNzI3MjEwMDU2WjAzMTEwLwYDVQQD
Eyg1YTYzMDJlNmMyZWUwYjQ3NGQyZDQxN2I4ZTZlMjQzNjRkMDZkNTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlCsd+yhZtZbVu4qovcTJGvBrz3v
DPxH0HKOPmWKnV/SkVyKm9dhyD3qTh9+IqLIUSVQbcAsTAgXE2f0kO8hjc2nTEw1
9s2Xex4NR0aD4QvVHG6p6J6JM2GgpV/+5mjzGSEhbsCd+4n7kAWcID3rvUcISFxH
P4nc4SvX4Rp8HdRrJsoUV/CcOOCkc3n/oGIYWd7Pad3Wegir0QviOJeIQwCdrMkq
cmeHZoobloF/yovAbf+2nZGYkLCVZhekmofMbmch4tZslNAPwpisEj2GMiAXF8Ka
6Lzhweols+XjfSyfllu6ypeKUHDqVmLDSqX7MEI7b+GNFaWiEvPol+xqeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpjAubC7gtHTS1Be45uJDZNBtUsMB8GA1UdIwQY
MBaAFLp7k0ArkhjX9hK0+WJicKca5r4tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgt
ZjRjOTM2MDFjODU5LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9kNjhhMzUtYjE5MS00MTk3LWFiNzgtZjRjOTM2MDFjODU5
LzEvdW51VFFDdVNHTmYyRXJUNVltSndweHJtdmkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALK7XdUiR
xKYBghqbJRdt7mYF3J/J8VluXp030lQwSVIjku0CWysDzZpsljnpKFbiqkwv4LyG
Rx7aXI9zorwziZJV0BOJ+UHftUvOQtaadyBd77nJ6ssyxVFwvOlV5xvzTQphmqzI
+ki4tIfXIUx/g0haxznOlnYfFr6AGG8yiYbfE/4580hu4f8Oc2UjWkRCcbpACDMp
j7OqFMHSNds1ETBy+3y0aN9a2V2itCqmng9pKE6F7V9GnH49+XynVWmB0GV35/Ze
hiCoB0w8sJnW9DBePNMD5ykTrN2qp8NJD3GqR4s5BNXhvM0VUffmDhwC/41mDO4R
Uz+J0mKkaPACOg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:50:12 2026 by rpki-client