Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: ct30laTHRWO1xpyU5uS6Ffgii57bqpwwafTX2jh563U=
Subject key identifier: CE:5D:79:95:8F:A2:DD:FD:C0:CB:C6:B2:91:A0:3A:75:F2:54:B2:EB
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019FAA50D20922A03119004FABFAE1897F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 1234
Signing time: Tue 28 Jul 2026 20:00:51 +0000
Manifest this update: Tue 28 Jul 2026 20:00:51 +0000
Manifest next update: Wed 29 Jul 2026 20:00:51 +0000
Files and hashes: 1: KBKlhWMG0Rouh36bd9hH2_4iw1w.roa (hash: yknxcNHVgc1M1hYYcpZWhF9GZLOrrn9T1pEy+vc2uA0=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: rJfehYXcOwHmi8/pqJ6uc8zX5ywOyO2YxOF0VKeosFQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 20:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:50:d2:09:22:a0:31:19:00:4f:ab:fa:e1:89:7f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jul 28 20:00:51 2026 GMT
Not After : Jul 29 20:00:51 2026 GMT
Subject: CN=ce5d79958fa2ddfdc0cbc6b291a03a75f254b2eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:31:f0:4b:4c:12:f1:6e:d8:17:e9:e9:2d:72:
2b:35:49:de:a4:09:b3:13:5c:52:a7:d6:1b:99:35:
91:c6:88:c8:36:d9:e0:52:d3:1f:8d:eb:d3:03:5f:
c4:23:5b:90:ab:11:c5:9f:ef:e4:f2:6c:66:36:2f:
c1:72:44:8f:b4:03:48:09:7e:81:8c:61:28:6a:36:
c0:a8:7b:a0:b7:38:d2:e0:ed:73:d1:a7:ce:d9:c1:
80:73:2e:cc:76:7b:0d:f5:26:6d:59:a7:f7:55:2a:
62:c3:6a:6d:4e:76:d9:9e:6f:f0:00:79:77:fb:35:
14:7b:39:34:f2:d8:8e:64:94:98:26:8b:e7:ec:d9:
43:ff:e0:22:fc:9d:d1:d4:12:9c:e1:4a:dc:61:a2:
8f:6d:3a:04:da:5a:45:7f:df:23:86:fc:8a:90:99:
3e:29:a5:48:63:aa:1c:0f:7c:3f:ec:54:ac:94:e9:
2d:aa:9a:76:7d:8c:c9:96:b9:bf:74:7b:67:6f:9e:
37:a1:fd:ff:4a:0e:f0:53:7c:43:9b:1c:f6:c8:58:
48:3e:fe:9c:75:5e:b6:d5:f7:dc:34:1b:05:4d:fd:
82:aa:48:2f:bf:8b:c8:08:64:9a:8e:d2:5d:e2:f8:
a9:14:76:61:22:7e:81:e5:66:ed:4b:f1:75:5b:d7:
3b:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:5D:79:95:8F:A2:DD:FD:C0:CB:C6:B2:91:A0:3A:75:F2:54:B2:EB
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:46:fc:c4:d8:1b:af:43:01:18:6c:05:cc:28:d3:64:66:7d:
f4:10:44:38:5d:1c:35:da:80:39:10:c7:cd:9c:4e:bb:03:ad:
a2:85:04:c7:f2:0e:f7:e8:a0:b3:54:9b:61:18:c4:e4:ee:f8:
5d:cd:e6:2f:6b:ce:1b:fa:78:50:6c:4f:fe:4d:6f:ff:35:0d:
48:06:14:46:e1:69:c2:56:de:0d:0b:d4:6d:1b:2a:53:e9:da:
8a:c7:61:d0:12:26:37:69:09:a9:b4:68:6a:9f:8a:3e:fd:69:
d6:a7:4b:e4:22:41:9b:4e:ac:54:5e:11:da:66:9c:7d:d9:63:
6a:40:4e:8e:e6:cf:4a:bf:82:39:76:78:b0:32:ec:ad:64:50:
bb:2b:2c:b9:25:44:d3:b5:62:c5:64:8a:49:b2:79:f7:84:6b:
99:c5:9e:16:e9:e7:95:37:4c:2d:71:ff:8c:88:79:9a:25:d6:
b3:60:1a:b0:c1:b4:0c:d8:d3:95:78:9f:80:3f:22:c4:65:85:
75:52:47:0a:8f:f5:ef:aa:3c:c4:40:59:cf:ee:a0:a3:41:47:
22:2a:f9:59:08:9f:83:89:32:88:ae:90:87:ad:a6:66:fc:44:
37:a7:ff:a5:3b:59:d6:19:41:a2:e3:11:bb:c6:35:47:80:d4:
bb:e6:bc:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:15:51 2026 by rpki-client