Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
File: sUqqmwhIZPRLrhi6B2smBndU-2I.mft (raw, json)
Hash identifier: ipyBzIX2/wDT3fNEmUEgNVL4YDt/gH7KnedZulyUeNg=
Subject key identifier: 97:79:F0:B5:B6:47:AE:AD:07:56:19:C9:BB:72:91:41:4A:0E:5B:A3
Authority key identifier: B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
Certificate issuer: /CN=b14aaa9b084864f44bae18ba076b26067754fb62
Certificate serial: 019FAB9A2E2BC0DF8E9CB801DD72272ACBD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
Manifest number: 19D3
Signing time: Wed 29 Jul 2026 02:00:36 +0000
Manifest this update: Wed 29 Jul 2026 02:00:36 +0000
Manifest next update: Thu 30 Jul 2026 02:00:36 +0000
Files and hashes: 1: ICjM29Ho5ilzx2CC9UyPCpBHk08.roa (hash: iDThEuTUmWf3SPJoG/mF6aomqM2YAji1cqVmI0Zj0pI=)
2: d6GlurZjrrwt2Mzk129b7bT_DCU.roa (hash: 2ZHYIA1Xr0+oHcfnaFr8fQOS6BVciW3KH+j7gwm8oEg=)
3: sUqqmwhIZPRLrhi6B2smBndU-2I.crl (hash: wTxC0fEN2SoFvhArfI1M8wAPDyrEAEZX4X+Vy6bpujE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:9a:2e:2b:c0:df:8e:9c:b8:01:dd:72:27:2a:cb:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b14aaa9b084864f44bae18ba076b26067754fb62
Validity
Not Before: Jul 29 02:00:36 2026 GMT
Not After : Jul 30 02:00:36 2026 GMT
Subject: CN=9779f0b5b647aead075619c9bb7291414a0e5ba3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:95:9e:d4:3c:1d:f2:d3:33:c6:91:e9:09:ef:
65:32:1d:5a:81:6e:67:4a:98:32:db:03:ec:be:4d:
19:2a:88:52:e4:78:0a:da:51:bf:a1:a3:49:04:7e:
cc:f6:a8:0a:f4:38:72:39:12:af:3d:c7:10:91:99:
91:8e:e5:76:68:fa:16:16:f9:ae:f2:48:b3:2c:a9:
c3:48:14:03:f0:7b:05:6a:b0:99:a0:e0:09:00:b1:
72:46:34:8a:65:12:b0:d8:55:45:3a:97:e1:90:30:
10:a8:4f:6f:bd:2e:e1:6b:16:9a:10:4f:f6:58:29:
f7:b3:b3:17:0a:9a:8d:0a:2e:6a:39:23:c8:e1:5c:
ee:a1:fc:6a:03:97:ba:61:ca:96:b0:67:9f:a4:3e:
50:15:8d:35:62:d9:ff:49:7a:ba:80:1e:a2:75:7e:
39:be:1c:ec:79:01:ac:68:3d:a3:31:9c:ff:7a:fb:
95:0e:55:8a:fc:91:f2:9e:55:c9:27:99:77:3e:89:
ad:cf:28:99:77:5c:ab:5b:1c:38:13:a8:48:d1:b2:
7b:dc:2c:4f:07:ca:11:2d:a7:f9:ab:71:f9:ae:5c:
eb:c3:48:55:56:f0:95:be:5f:43:3f:4a:7c:99:80:
3c:8a:44:8d:84:f3:99:f6:5e:87:48:a9:c5:75:35:
de:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:79:F0:B5:B6:47:AE:AD:07:56:19:C9:BB:72:91:41:4A:0E:5B:A3
X509v3 Authority Key Identifier:
keyid:B1:4A:AA:9B:08:48:64:F4:4B:AE:18:BA:07:6B:26:06:77:54:FB:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sUqqmwhIZPRLrhi6B2smBndU-2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/227afa-ddec-4644-982a-58faa27e5549/1/sUqqmwhIZPRLrhi6B2smBndU-2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c4:44:81:68:b3:af:3a:a0:c1:ae:40:33:6b:7e:8b:54:df:
51:fa:5d:03:c5:df:8b:43:63:54:36:e4:44:68:3c:93:cb:23:
07:51:6a:00:64:bf:f4:72:39:18:97:37:2b:ea:9b:50:02:95:
bd:4d:69:55:c0:70:69:ed:ed:12:33:3e:a1:49:94:46:21:89:
ec:76:bf:fc:4b:ba:1a:b2:90:af:50:41:8d:90:65:6c:17:d5:
08:e3:36:fa:e5:b4:dd:70:60:46:d1:57:59:67:b8:28:47:e4:
bd:cf:3e:f6:9d:55:cb:f7:cd:43:8c:4d:d0:e5:69:40:4a:6a:
17:53:5f:16:95:6b:53:87:b5:e4:7e:48:80:e5:a8:18:bd:8d:
91:58:20:3a:00:b9:21:d7:25:03:8b:8d:5e:f3:62:f3:eb:3e:
03:92:7b:0f:bc:72:45:32:c0:50:04:f5:2c:38:dc:b2:3f:48:
6c:66:90:15:97:07:1d:b6:8a:79:63:04:cf:b5:3c:4e:1c:f5:
3e:a9:c9:8c:b2:19:5e:db:27:da:c1:87:36:c8:97:27:24:b6:
2a:3b:af:10:37:33:64:c9:6e:50:f0:75:c7:a0:92:24:75:44:
17:a8:0d:cc:7a:b8:d8:67:a9:90:fe:40:a3:9e:4e:e6:df:a5:
c4:c4:46:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:52:09 2026 by rpki-client