Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
File: U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft (raw, json)
Hash identifier: dUmxttMxTsuoGt7xkPC/s3JSHRWwDy18IMSQf2ImUCI=
Subject key identifier: D6:1D:BC:65:A4:41:6B:F8:0C:29:31:C0:80:2F:2A:FA:89:08:0B:3E
Authority key identifier: 53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
Certificate issuer: /CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Certificate serial: 019FAC765EAE49B844E1073BFDA0B41150AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:01:06 +0000
Manifest this update: Wed 29 Jul 2026 06:01:06 +0000
Manifest next update: Thu 30 Jul 2026 06:01:06 +0000
Files and hashes: 1: Ax_THFqG1ozG9O-Yl_pOS9tBvuY.roa (hash: Ds8FZooitJMNVsAEf1unNJvTN7eQbb92Gpc2ul39w0s=)
2: MHRuqT3ZxWiNPWjx1hFceo5038Q.roa (hash: duJLSAn68SgAgFK46x9nz8RGT1uXEmPsEIzG1iEF5y4=)
3: U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl (hash: IEzz7qXgviQLVhZJXqS40C3fW089+GFVhonKMn2yyVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:5e:ae:49:b8:44:e1:07:3b:fd:a0:b4:11:50:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=536c9852a9f44ca9f847bba1b8c6d0b15cc52662
Validity
Not Before: Jul 29 06:01:06 2026 GMT
Not After : Jul 30 06:01:06 2026 GMT
Subject: CN=d61dbc65a4416bf80c2931c0802f2afa89080b3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0c:8f:b5:5f:ef:e9:b8:69:66:d5:39:c6:80:
6a:a9:85:20:f6:34:10:16:a2:87:9c:0c:ec:e6:64:
4a:38:fa:50:5b:2a:77:a2:a4:b8:78:51:f1:f0:d7:
60:50:ba:17:17:7b:19:b0:f0:fc:c3:57:99:35:95:
cc:eb:95:12:34:9a:5f:9b:0a:ce:91:12:d9:28:66:
b5:bc:97:31:27:8e:16:0f:cf:71:df:ba:d9:73:3c:
a2:30:81:5c:22:8c:c2:1c:1f:28:b2:18:9a:e9:2d:
85:68:47:d9:2e:25:f0:ff:30:10:70:8e:7b:41:b1:
ae:45:fc:ce:d7:26:47:3e:0d:ce:75:7b:32:a2:2d:
57:d2:7b:9c:8d:2a:50:9d:8a:c8:1e:01:0f:a9:e1:
26:d5:a1:ae:25:56:e4:04:2b:ec:f1:6f:e5:04:cc:
d3:a0:80:0b:ec:bd:57:f5:fe:35:e1:9a:fb:c2:fb:
21:19:18:64:23:d2:02:bf:bd:36:d8:04:18:a6:26:
14:48:18:25:04:64:12:7d:fe:81:67:aa:c1:5b:46:
57:93:10:3b:2e:f9:83:08:73:c3:e5:24:5e:46:a1:
d3:81:fd:d7:18:21:46:96:56:b3:ea:2d:b5:50:e5:
e5:e9:6f:f3:8e:e5:cd:1e:10:f8:39:e6:13:45:e0:
a7:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:1D:BC:65:A4:41:6B:F8:0C:29:31:C0:80:2F:2A:FA:89:08:0B:3E
X509v3 Authority Key Identifier:
keyid:53:6C:98:52:A9:F4:4C:A9:F8:47:BB:A1:B8:C6:D0:B1:5C:C5:26:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U2yYUqn0TKn4R7uhuMbQsVzFJmI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e2ee51-1523-436e-ac75-ef6bd26a0305/1/U2yYUqn0TKn4R7uhuMbQsVzFJmI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:3c:19:1a:f7:b5:03:41:a8:23:5e:e4:de:8d:1a:7c:7e:07:
3b:76:97:d5:bb:f3:54:2e:b2:1f:27:89:03:e3:e7:49:97:1f:
47:f5:eb:72:0f:d8:39:1b:20:9e:b9:88:b4:51:ed:37:6a:bd:
cc:9f:4b:4e:ae:45:68:ef:c5:ef:31:c5:be:0d:40:00:fe:1c:
08:80:f8:2e:58:e8:58:65:35:de:09:0a:7b:fc:f5:31:2c:32:
3f:c4:c1:31:d7:60:67:da:4b:1a:af:c2:07:79:fd:5a:86:30:
fc:d0:86:a5:ef:30:4e:90:29:c8:35:48:13:88:62:3d:72:73:
ff:0b:2b:1a:31:2f:a0:68:03:74:af:1d:13:ef:3f:f6:2a:1e:
90:27:d5:f4:06:07:e5:a0:f3:38:2b:9a:2a:a2:8c:92:a9:77:
b7:04:c0:c5:e5:fa:cb:99:eb:d2:1f:a7:40:14:20:09:75:d5:
0e:44:5d:4e:ac:aa:8c:08:44:6f:b4:21:d6:8e:36:bf:fb:82:
58:8b:37:37:9d:31:60:45:5a:9b:7d:26:c1:6e:ae:60:b1:c0:
fe:88:18:7e:d8:e5:c6:e1:42:9a:be:f9:32:2b:d5:3b:d7:19:
4b:20:02:18:04:20:d7:a7:fa:fc:f4:3e:9c:ff:8f:79:44:3a:
d0:4f:81:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:25:11 2026 by rpki-client