Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
File: U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft (raw, json)
Hash identifier: Br0DF6Wu1hbk2fgKSbwvZy8uolugjYCI7go80PC8vak=
Subject key identifier: 73:00:64:A4:A8:B0:AE:17:16:9D:C8:32:DE:3F:76:B4:6E:D4:94:EC
Authority key identifier: 53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
Certificate issuer: /CN=53529924b233ac563c08e0c313e29213fd969669
Certificate serial: 019FADBFE78F03FFED00B4D23D7EA10276FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
Manifest number: 19D4
Signing time: Wed 29 Jul 2026 12:01:02 +0000
Manifest this update: Wed 29 Jul 2026 12:01:02 +0000
Manifest next update: Thu 30 Jul 2026 12:01:02 +0000
Files and hashes: 1: U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl (hash: MbBSU/4J6APZKBV2b+vbr5m25lY2kRmG8enXa64W9/o=)
2: rAEklKYGXqC0SI7BJUCNbv2v5n8.roa (hash: gLAk6gE4hIpnSsFcX87BRcU/zchBSxQcnSCr86hSo9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:e7:8f:03:ff:ed:00:b4:d2:3d:7e:a1:02:76:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53529924b233ac563c08e0c313e29213fd969669
Validity
Not Before: Jul 29 12:01:02 2026 GMT
Not After : Jul 30 12:01:02 2026 GMT
Subject: CN=730064a4a8b0ae17169dc832de3f76b46ed494ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f4:7a:d7:91:79:42:d9:da:28:55:6e:f7:50:
a6:34:9a:1b:dc:85:99:8c:09:70:19:56:a2:a9:2c:
38:47:e1:4a:3c:07:fe:32:ee:ed:0d:23:1e:eb:58:
a3:d5:cd:ef:13:79:1d:c4:43:18:72:59:a0:5b:db:
4e:ae:9b:38:98:95:e5:0b:39:6b:56:aa:c0:9f:46:
3d:64:7e:0d:97:ae:4a:3a:c9:07:01:94:10:84:e5:
5e:6e:f8:c1:b7:60:02:c5:50:28:1e:49:89:18:48:
58:ef:a4:1d:2d:fc:63:af:d8:58:fd:65:73:89:9b:
c5:8b:9b:34:ce:54:2b:92:a8:ea:45:77:ac:e0:1e:
e7:7a:33:10:ed:1b:55:7f:02:01:3b:f5:32:20:f9:
6a:bb:61:40:64:19:5c:40:da:22:75:62:33:e1:9f:
b7:f3:09:fb:f7:1a:d6:ae:66:8a:26:45:67:e9:55:
6c:ad:4e:a8:ec:1b:0f:7b:b2:ad:e8:ac:20:20:b9:
26:0b:61:80:78:01:59:5d:e0:b1:5f:da:ec:4e:28:
56:fd:db:dc:1b:7d:5b:86:ca:29:b0:eb:77:50:f6:
75:01:0e:df:db:cc:69:0a:c7:9b:f8:ad:49:20:40:
bb:48:a4:17:40:00:ce:b7:fe:fa:79:68:74:08:75:
86:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:00:64:A4:A8:B0:AE:17:16:9D:C8:32:DE:3F:76:B4:6E:D4:94:EC
X509v3 Authority Key Identifier:
keyid:53:52:99:24:B2:33:AC:56:3C:08:E0:C3:13:E2:92:13:FD:96:96:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1KZJLIzrFY8CODDE-KSE_2Wlmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0e2714-9dd6-4fe8-ab24-94415690ddfd/1/U1KZJLIzrFY8CODDE-KSE_2Wlmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:a5:c9:79:e5:b8:ae:ff:17:51:95:e1:1e:f4:95:85:82:d8:
25:bf:be:7e:5a:54:0c:da:5b:e9:27:84:6e:d0:0d:3e:07:b7:
f2:46:cf:e2:4e:7e:97:dc:36:d9:78:54:3c:6d:27:05:25:57:
b3:bc:a2:de:46:42:d9:14:93:3d:9a:c7:9e:f3:da:a7:5d:49:
7c:d7:f6:08:8a:74:a8:93:b4:10:7e:c2:6f:96:7d:93:67:e9:
f8:a8:9c:cf:64:f9:21:e5:d8:61:ad:c3:16:b4:02:df:c1:30:
75:12:34:be:5c:d7:3f:3b:10:8a:3c:4f:db:e6:b5:b9:78:49:
54:3f:ca:a5:3b:e3:c5:bd:78:18:49:8e:62:0f:20:e7:50:c3:
fb:a5:36:3c:1c:54:15:c1:f4:74:d7:67:db:66:fb:c5:30:19:
1f:9d:93:f4:ac:60:b7:3c:37:61:c5:0f:11:76:66:d0:5d:86:
28:45:7c:b6:13:63:66:a9:43:37:1f:21:1f:84:9e:00:dc:d3:
27:6d:36:be:d5:94:bc:51:58:6f:c7:6f:43:1d:ee:fb:19:09:
30:81:ea:35:52:19:cd:d8:79:36:38:72:98:13:d4:b6:74:7e:
55:51:df:3e:3c:67:11:ab:45:cf:f4:5d:7a:94:3c:bf:38:92:
c0:74:22:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:19:47 2026 by rpki-client