Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: wTy+Ue4ld8u0WVeZ/KSYjkzju0hGnkP9PpippJnDjU8=
Subject key identifier: DD:14:2A:BE:6D:3B:E2:83:C6:BC:B4:42:BD:9B:91:86:9A:CF:9F:75
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019FAD1ADBFFB4C5ABA4476A8B243CEF12A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 19E0
Signing time: Wed 29 Jul 2026 09:00:46 +0000
Manifest this update: Wed 29 Jul 2026 09:00:46 +0000
Manifest next update: Thu 30 Jul 2026 09:00:46 +0000
Files and hashes: 1: HCkTO8KxnQW5z_1GFAOAHjIGab8.roa (hash: XoAXikNwV8c/+4uyw3oTAAVmB0UR0KOtZ+V3aJEPK8c=)
2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: ZWG2hEzlI1til7RcbHIUqByuD0gLtbEKaW93M5//By0=)
3: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1a:db:ff:b4:c5:ab:a4:47:6a:8b:24:3c:ef:12:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jul 29 09:00:46 2026 GMT
Not After : Jul 30 09:00:46 2026 GMT
Subject: CN=dd142abe6d3be283c6bcb442bd9b91869acf9f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c7:c3:54:3c:c2:4e:69:d7:e9:b6:ff:e4:52:
53:00:7b:2a:2b:dc:30:2c:f5:4b:e1:39:3d:08:91:
fe:29:eb:59:e5:38:e6:2a:9a:2c:5a:01:79:14:b9:
b7:93:2a:03:8f:ef:a5:2b:3f:3c:26:84:da:55:03:
fb:3c:63:45:fe:97:9e:b7:0f:f2:95:fe:0b:5e:75:
7e:61:71:16:90:84:bb:bf:4b:e6:8e:a0:00:42:70:
6d:5b:43:c1:b1:04:e8:2f:35:21:e4:db:33:db:e3:
40:ab:39:bf:ce:da:61:9e:88:b9:76:c5:76:62:6e:
fc:0e:8f:89:2a:b4:c1:ad:6d:74:3f:9c:ed:d5:d0:
76:ca:72:d6:e1:a4:c7:c8:58:c0:c1:f5:f6:36:16:
88:4e:e4:b5:6c:ce:85:35:a9:1f:a9:18:ec:be:3c:
f1:3d:98:05:7e:1d:4b:72:d1:f3:20:49:a3:ce:e4:
db:ae:44:42:2e:ea:23:d6:c1:67:1e:32:5b:b0:53:
19:46:9a:95:3e:ee:b7:6b:2f:65:41:3b:0c:41:b6:
0b:7c:a5:42:21:69:62:f1:07:dd:38:24:e8:4b:c1:
0c:da:aa:ea:08:97:c5:b0:f7:8d:35:07:cf:b0:8e:
28:90:17:f5:85:db:3d:1e:9b:c4:91:e1:d1:96:85:
41:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:14:2A:BE:6D:3B:E2:83:C6:BC:B4:42:BD:9B:91:86:9A:CF:9F:75
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2d:0f:3e:0c:38:53:c0:aa:2a:7b:d2:1e:25:4a:c5:23:c6:
9c:68:f2:09:15:90:94:29:f8:b8:4e:69:54:20:85:7a:4e:3d:
5d:40:d6:6a:51:b0:51:91:98:a8:cf:0f:7a:b7:0d:7a:2f:b3:
68:4f:79:0c:d3:12:a6:c1:8c:75:86:0a:a0:5c:5f:69:3e:11:
42:4e:6c:65:a6:1a:11:ea:69:17:a8:b0:87:eb:c6:34:d4:05:
ee:8d:d6:e5:b5:c1:32:47:a1:bf:e9:57:c4:11:56:d9:75:c6:
6c:a0:b4:b0:70:c6:06:da:8d:97:c9:e5:16:4f:6b:e6:2e:c3:
69:7f:2b:b5:2f:99:cb:79:0e:07:bc:ad:c0:ee:21:91:66:58:
b9:c0:10:d7:60:81:16:e2:89:3e:8a:b0:f0:4c:df:e9:52:54:
a9:b2:fa:84:35:97:a9:9f:28:a9:d7:57:88:30:99:24:02:64:
33:13:86:d3:16:3c:ff:a6:09:6b:5c:d8:8d:41:aa:e3:c8:44:
37:7a:47:b0:ce:68:8c:43:21:20:5a:a9:74:e7:d8:96:7e:f4:
0a:5a:4b:1f:35:e4:0e:82:7d:f3:2f:1c:fa:fe:84:69:22:5d:
f8:e5:34:88:e1:e2:d1:27:85:23:e3:55:75:05:bd:55:12:84:
bd:ee:3e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 14:16:55 2026 by rpki-client