Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File: UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier: 9rnDCloaWpnk3peAA79D9ND6/kNip+wHF2FnRtBY6/I=
Subject key identifier: E9:D6:05:F3:C6:59:34:6D:F0:1E:00:3E:16:D2:4E:25:2B:29:A8:B4
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer: /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial: 019FAA50CE11B6C6DC85A246C21EC04BF238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number: 0119
Signing time: Tue 28 Jul 2026 20:00:50 +0000
Manifest this update: Tue 28 Jul 2026 20:00:50 +0000
Manifest next update: Wed 29 Jul 2026 20:00:50 +0000
Files and hashes: 1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: oYMJX66bWN3K8DpRrW2YhtjcdOyfX/NRdR+dYqq3nIE=)
2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:ce:11:b6:c6:dc:85:a2:46:c2:1e:c0:4b:f2:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
Validity
Not Before: Jul 28 20:00:50 2026 GMT
Not After : Jul 29 20:00:50 2026 GMT
Subject: CN=e9d605f3c659346df01e003e16d24e252b29a8b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:82:88:9d:75:04:a9:5c:03:ae:b9:cb:65:2d:
4f:0c:4b:06:1f:94:0c:48:0b:b1:5a:83:85:6b:c7:
08:db:a2:a7:33:dc:fb:eb:90:03:44:a8:32:8a:2a:
32:14:4b:2c:69:4a:c8:4e:e1:01:63:fd:10:2b:91:
34:2e:76:b1:8d:f4:68:9f:ef:f5:65:de:d6:94:d1:
d0:e5:ab:b3:60:d4:67:31:4a:ba:ad:95:b5:98:da:
c4:dc:a0:65:91:52:0a:f1:ca:69:94:44:eb:ca:23:
c6:6f:ea:2e:b4:57:b8:87:a9:42:18:52:d5:ae:a1:
f4:50:95:4a:46:26:97:dc:23:38:41:eb:79:f7:e9:
98:87:ce:0b:93:3d:a6:de:42:bb:0e:4b:7b:d3:69:
06:b3:ce:22:8e:e7:1d:9f:65:43:04:da:4f:00:07:
e0:be:93:66:b9:c6:68:77:83:71:01:54:48:85:74:
53:89:eb:44:18:ff:98:ae:94:fe:8c:de:6d:9f:13:
d2:8a:f0:07:81:94:ae:11:41:70:1a:2a:9f:b0:ff:
5f:81:7a:10:86:2b:c2:20:7d:23:ae:47:6a:9d:d9:
4e:76:2f:55:1f:e9:5b:49:85:af:e5:1d:ed:a8:0f:
ed:a1:17:0e:d3:d9:18:a7:77:ef:b1:fa:8b:cb:b4:
85:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:D6:05:F3:C6:59:34:6D:F0:1E:00:3E:16:D2:4E:25:2B:29:A8:B4
X509v3 Authority Key Identifier:
keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:4e:e4:ff:9e:a3:aa:2f:24:76:b8:06:c1:22:9f:63:47:e3:
71:86:bf:e9:8a:db:01:d8:c2:7d:40:a1:e6:54:5f:91:28:0d:
88:ca:1f:c0:09:83:eb:11:fb:23:c1:76:88:b4:77:df:20:72:
aa:5c:15:bf:d2:03:f0:78:03:d5:f6:ca:a0:c7:56:9b:73:75:
4a:86:9c:25:98:7b:9c:c4:50:b8:c7:a7:9d:c2:8d:49:e8:45:
e1:2e:5c:9e:bb:53:2d:4e:ba:38:53:ce:f8:89:10:3b:fa:8a:
e3:09:3c:9f:28:2e:69:09:14:09:4f:93:de:c9:b3:fa:6c:83:
9a:64:0c:9c:97:87:5b:f0:45:46:cf:c4:86:ec:2f:78:96:eb:
0b:22:1c:60:4c:24:c0:e2:4f:93:a0:78:9f:03:d8:17:19:43:
bc:79:8d:fe:b3:f2:c6:9d:7e:ab:bf:ba:75:f6:81:35:4b:33:
ff:8d:ad:b2:fb:7f:f2:11:84:9d:3e:42:be:03:ac:ab:76:e3:
25:d1:4a:19:e0:a4:d8:60:b7:11:21:3b:f0:9e:68:64:53:86:
5a:3d:d8:a3:1f:cf:32:d7:d9:4d:81:9e:0d:e5:19:84:d8:37:
0e:2e:15:36:61:f2:e7:82:88:d1:63:35:a6:9e:4d:23:79:15:
3c:82:d2:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:47:58 2026 by rpki-client