Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
File: UeFdozln1BRwqW1hQcg0DyJAWBw.mft (raw, json)
Hash identifier: gKxbdeAYn4nlC0Dri2D09rGeWGyy3x7klr3MIU679D0=
Subject key identifier: BA:EF:70:52:67:2F:C0:EE:94:BC:4C:36:C1:8E:EC:04:93:E6:FF:AF
Authority key identifier: 51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
Certificate issuer: /CN=51e15da33967d41470a96d6141c8340f2240581c
Certificate serial: 019FACAD60E3370A127097A53A0F22D3AD5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
Manifest number: 19D5
Signing time: Wed 29 Jul 2026 07:01:11 +0000
Manifest this update: Wed 29 Jul 2026 07:01:11 +0000
Manifest next update: Thu 30 Jul 2026 07:01:11 +0000
Files and hashes: 1: 81cJ_EIt-PStE8ZvP9c7d9zPO5Y.roa (hash: VoEIe6W6A/UJnNjd89XKoAD4I+DEvz9ksYBB+LiWpIU=)
2: UeFdozln1BRwqW1hQcg0DyJAWBw.crl (hash: Nbq9cRpF0PzhE/9+88bALy6EC5+aWnciRFFdT3zGs1o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:60:e3:37:0a:12:70:97:a5:3a:0f:22:d3:ad:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e15da33967d41470a96d6141c8340f2240581c
Validity
Not Before: Jul 29 07:01:11 2026 GMT
Not After : Jul 30 07:01:11 2026 GMT
Subject: CN=baef7052672fc0ee94bc4c36c18eec0493e6ffaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:77:47:64:4e:2e:8d:34:25:90:05:43:e9:05:
8f:97:4c:2d:a2:4e:05:ae:68:5c:21:b0:c4:8f:c4:
db:80:9a:4e:03:03:d3:17:20:82:54:8d:a5:37:40:
0a:24:53:78:cb:84:45:98:77:ae:78:75:75:39:8c:
33:cf:0c:0a:c5:02:90:13:6d:5d:dd:6d:da:c5:e2:
07:84:4d:ed:88:12:54:5f:44:ee:d9:b8:b6:7d:18:
8d:7c:53:d6:e8:bc:0e:27:a7:68:0d:9e:bc:4f:05:
76:41:4b:15:54:2d:b2:8a:57:0b:a0:9e:cb:2f:06:
c0:20:42:31:30:c8:8f:db:d6:58:a8:c0:b9:79:37:
df:ce:74:7a:bb:ef:96:4a:f1:e7:9c:37:35:f6:9f:
3d:3a:d3:85:cf:df:f1:ff:72:e7:fe:49:6a:29:d8:
d1:ee:4c:7f:e6:df:db:20:cd:72:40:2c:23:5e:54:
c4:0c:cb:91:7b:0f:81:24:e3:cd:d6:74:b1:ae:a0:
b8:cf:9f:50:d3:55:a6:7b:f1:48:4a:c2:17:7f:9f:
5c:e0:d4:a4:eb:55:68:21:5a:c6:5f:d2:a0:25:3a:
8d:5f:ce:52:a2:9a:e5:b9:e6:61:75:5f:85:76:c1:
97:78:69:97:29:52:19:3c:8d:aa:2a:60:a5:6c:ad:
74:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:EF:70:52:67:2F:C0:EE:94:BC:4C:36:C1:8E:EC:04:93:E6:FF:AF
X509v3 Authority Key Identifier:
keyid:51:E1:5D:A3:39:67:D4:14:70:A9:6D:61:41:C8:34:0F:22:40:58:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeFdozln1BRwqW1hQcg0DyJAWBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/23d5c1-ac66-461f-900f-380885740d4a/1/UeFdozln1BRwqW1hQcg0DyJAWBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f3:aa:29:e6:f5:dd:f7:48:d1:0c:30:b2:c8:90:a1:f6:40:
1a:cf:96:28:4d:0c:d3:84:e9:ee:95:4c:78:50:8f:5b:5d:e6:
e4:73:a0:30:bc:a5:32:78:93:d3:3c:a8:cf:ec:e3:ee:0c:02:
ae:b7:8d:38:93:b6:14:27:01:ba:a3:aa:10:b9:1f:33:7b:4b:
7d:89:5f:99:5a:c4:1b:bc:f2:c7:43:a9:f6:62:07:02:5a:c4:
80:1d:8e:6a:1a:3e:d5:6e:84:a3:25:65:5e:a9:c5:61:c6:ae:
88:c4:ad:6c:ed:0e:31:57:7f:b2:3e:25:64:de:09:5b:dd:6d:
b1:0d:e4:89:83:7e:ec:f3:70:d9:98:e0:a6:96:67:55:ee:bf:
cc:36:2e:3b:2b:d5:54:03:f4:a7:35:f1:47:8e:8e:84:dd:f7:
08:38:05:5e:fb:7a:3f:5e:44:36:04:91:47:41:0d:23:52:07:
50:2f:88:b7:7a:b1:be:17:aa:03:61:20:2c:e9:78:38:a7:f3:
08:d8:41:55:ef:6b:af:a7:3e:8e:df:60:45:4d:e3:a0:1b:82:
f5:6b:8f:aa:e9:04:1c:a6:8b:bf:db:f1:c0:50:86:42:97:33:
bc:72:65:9d:a5:5b:b7:01:f6:f9:4f:08:c8:90:eb:0d:e8:60:
0a:38:5f:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:02:49 2026 by rpki-client