Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
File: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft (raw, json)
Hash identifier: Oubhbb20FtY0wfNdL5VXJz4zQNn4PKVAkmjJ3LuWiPQ=
Subject key identifier: 17:1B:63:20:F5:76:59:00:DB:66:AF:A0:DE:64:CC:D8:97:D4:24:45
Authority key identifier: 53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
Certificate issuer: /CN=53bf98d53522aa957081fdec28b172084394f112
Certificate serial: 019FAFE4AB21BF1FCB215215834BF02835B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
Manifest number: 11EC
Signing time: Wed 29 Jul 2026 22:00:26 +0000
Manifest this update: Wed 29 Jul 2026 22:00:26 +0000
Manifest next update: Thu 30 Jul 2026 22:00:26 +0000
Files and hashes: 1: U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl (hash: hqoEllBWwu3aH6brbeNTY4E1GOV5t3TWOec/yylibAE=)
2: mK9jBg2iFuywF6JUAww3mxKLxCU.roa (hash: lk8hbAdLVuILHrw42c6HMnMUPa/ZOyLXrol4InQSdq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 21:49:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:e4:ab:21:bf:1f:cb:21:52:15:83:4b:f0:28:35:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bf98d53522aa957081fdec28b172084394f112
Validity
Not Before: Jul 29 22:00:26 2026 GMT
Not After : Jul 30 22:00:26 2026 GMT
Subject: CN=171b6320f5765900db66afa0de64ccd897d42445
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:79:f6:85:1e:b9:36:c2:c9:8f:ea:af:13:39:
a4:5d:3d:d5:5c:43:b8:4e:ee:9c:ff:4d:78:6f:36:
11:76:0f:8c:6c:80:49:4b:cb:fb:25:b3:c9:c9:38:
74:35:74:8a:3a:6c:a9:e3:38:94:03:53:9d:db:33:
b6:8e:68:17:ba:70:d1:d3:ac:01:00:74:2a:39:36:
7c:38:06:e9:88:00:2c:e2:60:f7:57:cd:76:d0:aa:
b6:fd:31:f3:56:5d:33:45:de:64:78:a8:51:ce:c6:
05:ff:59:04:c6:99:c9:95:dd:94:7d:8f:9c:9c:5c:
5a:49:6e:c8:6b:d5:08:b6:a2:2b:c2:04:5e:58:d4:
ef:45:0b:3b:ab:d3:bc:61:ed:87:54:3b:c8:55:50:
82:1b:58:e4:31:74:9f:c8:db:cb:64:3d:de:7f:ce:
d5:38:60:31:d4:2a:78:16:f0:cc:7b:2f:fc:0d:77:
17:e3:8b:89:85:a5:8c:e6:45:89:e1:35:14:2d:1b:
3e:9f:6f:d6:c7:d3:9c:55:e3:37:a7:b3:e3:21:d5:
c8:ea:6b:d1:88:9a:b7:3b:29:98:32:02:a1:43:87:
fd:52:77:b3:6f:81:6b:72:76:61:48:5c:9c:9c:21:
b6:19:32:42:f8:5d:b7:bf:63:e8:df:ef:31:b1:f6:
15:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1B:63:20:F5:76:59:00:DB:66:AF:A0:DE:64:CC:D8:97:D4:24:45
X509v3 Authority Key Identifier:
keyid:53:BF:98:D5:35:22:AA:95:70:81:FD:EC:28:B1:72:08:43:94:F1:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/063b1b-7bde-48cc-b1ac-fad707d9c4f6/1/U7-Y1TUiqpVwgf3sKLFyCEOU8RI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:10:71:78:09:cb:dd:68:36:02:ef:71:a5:51:47:b0:6d:62:
a6:41:a3:d8:54:27:ea:dd:29:09:fd:29:80:bf:e8:13:54:25:
d7:87:78:cc:05:94:ba:fd:75:1e:49:24:d8:c1:d0:fa:20:77:
1f:0b:13:e9:00:7f:a9:95:b6:7e:28:94:6c:96:1a:8a:c4:0f:
09:1a:69:db:ca:76:2c:04:54:aa:b6:62:80:91:ef:14:75:fd:
5b:8a:05:54:4d:2a:d8:94:c4:ab:03:58:d5:c8:d6:47:12:4d:
ff:be:7e:cd:31:8e:1e:20:ef:ec:89:f3:7c:82:34:6a:07:7d:
45:eb:03:fc:ed:fa:01:e9:4c:ce:96:2c:fc:06:0c:f6:90:4f:
cc:dc:2d:88:58:2f:36:05:71:bc:2d:93:8a:d8:3b:fd:fb:10:
ba:d9:ce:ef:88:96:2e:01:aa:21:b8:b5:c3:af:2c:a6:4e:f5:
14:5f:fc:9d:2d:12:69:31:cb:3a:3f:c7:95:78:6c:8f:46:1d:
3b:8d:64:43:4f:a0:8e:4c:f7:b9:e2:b3:e7:95:8a:cd:6a:04:
cf:9c:e0:53:bd:16:b5:9e:ab:e9:a9:a9:aa:01:ec:80:bf:4e:
8d:69:79:2d:a2:d2:c5:00:3a:f3:2b:39:35:dc:8f:c4:e5:ce:
ee:81:ff:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 03:24:31 2026 by rpki-client