Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: bUSmFWBdbKmXQ3zv9c5939Ld+EvEMnsja71EYDW6psM=
Subject key identifier: CD:3F:85:20:8F:20:03:99:79:3A:B3:49:F9:6B:6B:81:62:8B:F2:72
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 019FAB63365537BF34A0245E696C1E4BEC47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 01:00:33 +0000
Manifest this update: Wed 29 Jul 2026 01:00:33 +0000
Manifest next update: Thu 30 Jul 2026 01:00:33 +0000
Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: +pMl5SfG83RYyqIgY+/e6xf0Yd3qni3sUI7vzKKyOPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:36:55:37:bf:34:a0:24:5e:69:6c:1e:4b:ec:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Jul 29 01:00:33 2026 GMT
Not After : Jul 30 01:00:33 2026 GMT
Subject: CN=cd3f85208f200399793ab349f96b6b81628bf272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:06:c4:98:b0:df:92:bc:56:76:80:22:0f:0b:
e7:36:5d:87:f5:f2:b5:1f:ea:47:e0:63:c7:9d:d7:
93:9b:b5:b6:04:00:77:bf:b9:16:e1:40:a3:6a:bb:
1c:3a:6f:8c:f8:51:0c:89:c8:80:4c:5f:62:7a:f5:
0c:aa:11:d1:2e:5b:eb:30:84:17:49:24:63:a6:db:
a7:9a:97:da:67:ef:48:20:41:6e:c3:b7:3a:87:88:
fa:67:b2:62:5f:da:3c:93:e8:1c:8c:c1:39:f0:28:
db:57:9c:53:b6:b2:9f:64:08:24:2a:17:06:de:80:
ea:b9:50:f8:61:c2:d4:7d:e6:1a:7c:b0:2c:9a:1d:
4d:70:30:0a:41:c5:8e:57:06:57:f7:33:14:11:f3:
d1:9a:4f:73:38:ad:5e:a7:43:89:44:f0:01:3f:4e:
c4:28:24:30:6b:fb:f8:bb:a1:73:cd:a2:ef:7e:bd:
25:8c:2c:06:8c:9b:7d:33:22:e6:6b:bb:54:1d:79:
96:78:0b:ac:4a:6b:c2:ff:56:1d:ad:ac:3c:11:c8:
93:41:38:06:6b:10:2e:32:3b:29:7f:51:73:d6:31:
23:35:fe:15:17:e9:5c:02:68:48:44:9d:0b:b9:13:
ef:44:53:2b:b4:0f:41:22:e0:77:88:b8:3f:85:70:
da:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:3F:85:20:8F:20:03:99:79:3A:B3:49:F9:6B:6B:81:62:8B:F2:72
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:79:52:27:a0:d7:27:a8:ae:86:02:65:c2:0c:1e:3a:fa:cc:
55:cb:36:f1:12:7a:dd:ec:91:13:56:6f:ea:26:0e:4c:bf:20:
6b:cd:85:5f:95:a5:f1:fa:0c:01:25:4a:2f:b2:16:ff:19:2d:
b2:dc:c0:5b:3d:11:5a:df:f2:93:24:28:8d:37:f2:72:d3:86:
55:31:64:2f:9a:f6:92:ff:47:58:7f:34:6e:f6:7f:2b:da:fd:
12:e8:85:d0:20:85:44:d7:5a:da:2c:4c:61:44:bf:46:a4:74:
68:4f:cb:11:1e:b7:54:00:1e:11:a8:90:7e:b5:5b:fb:ee:b0:
99:41:ba:27:c6:22:b5:4f:f7:59:f8:c9:9b:cf:82:28:45:38:
ba:d0:3f:f3:6e:0a:e4:6c:78:dc:30:32:29:6a:dd:40:39:8e:
a1:08:db:9c:5e:3b:4c:40:99:bc:28:18:19:1b:06:06:a8:fa:
cd:2a:59:91:f4:02:a3:22:aa:48:d6:bc:ee:cf:fa:fd:c2:85:
56:90:dd:40:1c:36:30:80:fc:fd:59:d7:ce:c9:ed:2f:f0:55:
be:a1:1f:fc:fb:83:37:12:21:ca:8b:03:f4:f9:b3:81:a0:88:
99:8a:93:f5:c7:c2:16:80:d9:00:51:53:c9:dd:c6:cf:9b:f4:
75:fa:a1:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:33:36 2026 by rpki-client