Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: 72UXSdyjJz1+uHUV4lGYST/Q6tCwSm3rHTKS87rdE0Q=
Subject key identifier: A5:1E:3F:D3:25:55:86:75:27:BB:B4:43:1F:92:50:E2:5F:7D:94:41
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019FAC3EDEB6FA549FAB4B85F2F8155E6FBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 19D6
Signing time: Wed 29 Jul 2026 05:00:29 +0000
Manifest this update: Wed 29 Jul 2026 05:00:29 +0000
Manifest next update: Thu 30 Jul 2026 05:00:29 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: bijFNLbixraX48CRg+fTtoSshgaEB5pVXeWPystvllw=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:de:b6:fa:54:9f:ab:4b:85:f2:f8:15:5e:6f:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jul 29 05:00:29 2026 GMT
Not After : Jul 30 05:00:29 2026 GMT
Subject: CN=a51e3fd32555867527bbb4431f9250e25f7d9441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:11:6e:10:ef:c1:ef:e7:eb:d1:25:06:69:41:
0a:10:63:a7:c5:a0:cb:5e:5f:58:e7:c6:5b:b9:d9:
5f:e6:23:55:c5:ee:82:28:5b:ca:f8:20:61:c5:05:
b4:fd:38:73:e0:81:3f:c2:a2:32:e2:56:27:27:0a:
df:f7:d8:c0:07:c7:db:d7:c1:79:a0:68:ee:ce:63:
f9:5d:12:af:35:79:06:2d:c0:1b:45:d5:a1:42:d8:
5f:c1:f2:39:2c:4b:d0:d3:81:7b:78:c1:14:e8:4c:
65:0d:9c:d2:bc:24:5e:08:eb:57:57:86:01:cb:26:
57:08:5e:28:c3:e1:6b:00:e9:93:a4:e7:85:1d:d8:
64:1e:50:77:d9:80:88:2a:1d:3b:47:e2:28:d5:01:
d0:1c:7d:ce:ee:a4:2b:df:f0:bd:ac:ac:f9:ea:a8:
e9:9f:cf:1d:bc:e9:f9:ac:15:35:16:af:de:88:8d:
bd:a8:c2:67:c5:ed:f2:34:c7:84:20:eb:57:6a:74:
3e:20:36:24:92:10:8e:c1:93:7e:ae:b2:ce:db:31:
1f:98:90:3d:2c:16:16:78:23:0e:7c:60:8f:89:aa:
65:03:2f:de:56:02:56:84:08:64:3d:3e:6f:87:ee:
06:dd:1a:d1:e9:5c:7c:e6:5e:4f:c9:16:3e:0b:47:
8d:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:1E:3F:D3:25:55:86:75:27:BB:B4:43:1F:92:50:E2:5F:7D:94:41
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a4:bd:d7:4a:d3:82:bb:3b:b3:52:bb:e4:f4:79:c8:3e:7f:
f8:c7:91:cc:fe:73:d8:94:aa:47:56:1c:45:f6:2c:39:45:87:
51:c3:2b:ac:ed:1d:74:62:d0:9c:3c:2d:4c:fc:b1:09:2e:dc:
71:3e:03:66:e8:ad:02:17:e4:cb:ba:53:58:39:92:e7:4d:a5:
88:0c:62:bc:34:41:ec:c4:a9:36:8f:43:b7:6d:81:65:96:5a:
41:a8:6f:4f:71:cb:5d:c1:de:b9:8e:89:83:5d:c9:e6:22:8a:
98:4c:97:ab:8f:b1:99:80:2a:ab:f6:82:74:14:36:d4:5d:4a:
ba:6d:07:0d:df:4e:20:f5:f7:bf:b8:2a:c0:d8:4a:9a:8a:c9:
0f:59:0d:d8:c9:52:75:50:b3:b2:ef:e8:49:d4:a0:a3:7d:4e:
ec:6f:b2:b6:76:e8:dc:e0:7f:e9:18:ae:82:90:dc:c3:56:3a:
b2:c2:67:c6:e1:9b:1a:fa:40:8f:89:0e:39:cc:e4:a2:a3:a5:
fd:7d:1e:bd:09:db:a7:c8:fc:ab:6e:3f:8a:33:21:04:80:7e:
a8:88:66:9a:9b:03:17:f1:91:36:04:1e:3c:65:bb:8c:1a:e3:
a1:e7:af:6a:3f:cf:87:f5:a9:06:b6:56:08:df:f2:bc:8f:83:
78:36:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:51:55 2026 by rpki-client