
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: /Y/f7h1eCNL5R35e9ctZ293JNqWjK2Dzq294RS3Tl5g=
Subject key identifier: 04:40:B8:A3:43:37:ED:11:CD:BF:7E:9D:D7:1F:FE:9F:20:68:D4:8C
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 019FA9AB92683BF334C7BECB1881BC191268
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 19D7
Signing time: Tue 28 Jul 2026 17:00:21 +0000
Manifest this update: Tue 28 Jul 2026 17:00:21 +0000
Manifest next update: Wed 29 Jul 2026 17:00:21 +0000
Files and hashes: 1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=)
2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: P5jN5Hrk4YPfh4Eck/gahLgNHAK0et9nhOufYIj1pgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:92:68:3b:f3:34:c7:be:cb:18:81:bc:19:12:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Jul 28 17:00:21 2026 GMT
Not After : Jul 29 17:00:21 2026 GMT
Subject: CN=0440b8a34337ed11cdbf7e9dd71ffe9f2068d48c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f8:ce:df:fe:a4:25:16:f6:e2:65:6c:38:bd:
61:b5:30:f0:51:30:24:ad:e9:97:5a:2c:7c:85:27:
0a:8b:a9:65:88:92:84:08:dc:86:5d:73:14:6d:cb:
1c:69:b5:1b:80:04:a6:9f:99:f8:00:8a:a6:b6:45:
39:2d:80:21:54:14:87:0f:fc:18:dc:bc:f3:3c:67:
4f:09:b9:7a:70:71:53:72:f5:f5:3b:c8:64:db:3d:
5d:29:50:fc:a9:1a:76:77:77:e0:5c:93:36:9d:f3:
60:e7:92:90:ed:43:83:4b:04:67:6d:4f:59:c4:76:
14:83:b4:a7:63:87:89:33:dd:e7:f8:95:fe:8a:8a:
80:90:0e:5b:34:15:8d:06:9f:ef:c7:5a:f1:ff:44:
44:49:ab:59:0f:9e:84:54:30:72:6f:1f:bb:e4:64:
1f:94:6b:cf:4f:8d:f6:17:b0:94:45:27:7e:52:1f:
fc:19:30:49:96:31:2f:47:1b:22:b3:28:7a:ca:55:
36:d4:c2:3e:00:c2:9e:ba:3e:a2:64:2c:60:91:6e:
ca:34:72:7f:e7:88:10:6d:2c:fd:c9:60:7f:a6:d5:
e0:c9:60:da:b4:fe:a9:91:29:b7:e9:2f:d7:5b:6c:
2b:13:ca:4a:18:e5:99:99:85:87:d6:6b:fb:4b:15:
47:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:40:B8:A3:43:37:ED:11:CD:BF:7E:9D:D7:1F:FE:9F:20:68:D4:8C
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:50:a6:c6:fe:fc:97:a6:c0:67:d2:44:ea:fb:37:6b:83:a4:
50:15:3f:c1:91:72:cf:34:ee:f2:35:3e:60:60:db:e8:c1:c5:
ac:4d:dc:41:0e:73:9b:8c:eb:f6:ac:2c:56:13:0f:74:a7:75:
78:dd:1f:13:aa:bf:3b:0c:77:51:22:f4:e4:ea:dd:43:49:01:
52:73:f7:d4:c0:fd:1a:68:df:eb:16:e2:e8:ee:bb:fe:52:8a:
3b:20:56:d5:bf:9c:88:a4:09:2e:33:82:6a:df:32:ad:49:f9:
ac:cb:aa:35:90:12:7c:82:2c:15:9f:c5:55:cc:eb:ac:e8:56:
d8:9d:80:94:db:a3:cc:5f:ce:54:87:b3:b5:f4:33:19:99:ef:
b9:99:65:ba:5a:65:ee:54:57:7f:0b:32:1c:05:62:b8:f6:90:
1f:4b:44:8b:71:a3:31:01:0c:0d:91:e8:f7:16:9a:71:12:75:
4e:dc:be:77:aa:ce:f9:0c:b4:9e:3d:32:7c:34:f4:3f:ea:9d:
b4:ac:f1:d9:0e:97:04:5f:82:88:6b:36:0c:88:41:bb:78:a4:
97:d1:38:b8:7c:ca:d6:8d:36:42:4a:32:0e:6a:31:b1:4e:7e:
3a:d8:1c:f7:72:20:cb:69:9b:bd:be:cb:39:50:58:66:7b:cb:
94:90:88:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:57:14 2026 by rpki-client