Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: k/yy+n8ZKA2NlQKs7jxZjlRc/py8GhALw9WvZDhqTj4=
Subject key identifier: DD:91:71:5D:99:5D:9A:D2:3A:5D:7E:AF:6C:89:3D:CE:CD:05:C2:10
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019EC11245C8BA3CC55BABDA25F7F3B30662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 07B9
Signing time: Sat 13 Jun 2026 13:01:00 +0000
Manifest this update: Sat 13 Jun 2026 13:01:00 +0000
Manifest next update: Sun 14 Jun 2026 13:01:00 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: e+bSCyF+zW0GxyXENJilUrWaTd04o9m5HWeUaM9HN2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:12:45:c8:ba:3c:c5:5b:ab:da:25:f7:f3:b3:06:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Jun 13 13:01:00 2026 GMT
Not After : Jun 14 13:01:00 2026 GMT
Subject: CN=dd91715d995d9ad23a5d7eaf6c893dcecd05c210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0d:b8:4a:60:21:06:cd:1a:14:ff:af:a7:45:
67:48:09:65:c3:d5:52:b1:15:e9:18:6c:b3:ad:98:
c5:0c:88:a0:0c:90:b8:23:f5:68:f0:bc:7e:03:50:
05:82:03:87:42:b3:be:1f:72:55:30:8b:e8:4f:a4:
3b:77:79:db:5d:21:8c:38:07:73:9d:30:56:46:51:
5e:0f:30:5b:92:f6:1b:85:c3:3a:cd:4e:d2:17:8d:
f6:4c:de:13:d9:68:93:19:29:df:75:23:8b:33:3a:
82:46:ce:3b:cb:50:6f:12:d0:98:45:e5:aa:28:66:
14:3f:53:cc:c4:f7:08:ec:11:49:cd:a8:1b:43:fa:
3f:33:6a:74:04:6c:d2:c8:94:0a:7b:01:52:1f:a8:
d9:c2:23:45:9c:d1:4c:c2:13:30:2d:f7:4b:9d:4b:
2d:4b:b3:a1:77:1d:a9:35:99:77:87:36:15:f9:85:
a1:1e:d8:59:83:2d:f5:1e:59:4f:dd:96:fa:a6:e4:
e2:14:53:e4:b5:4c:31:62:d2:61:2e:bf:93:2d:16:
7e:22:c1:68:e9:be:81:c1:39:ad:8c:51:b5:86:f0:
bc:4d:35:0e:29:10:d6:dd:4e:6e:c6:43:63:93:a1:
53:e9:bb:ed:26:70:f2:0d:2b:62:81:99:fe:ad:a0:
91:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:91:71:5D:99:5D:9A:D2:3A:5D:7E:AF:6C:89:3D:CE:CD:05:C2:10
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ce:82:89:d0:17:32:5d:c3:e7:24:cd:6a:fb:64:5e:05:47:
3b:ad:1e:d8:ee:d4:d1:50:97:e3:ce:2f:39:49:cb:3f:70:64:
31:da:f7:d2:52:31:71:11:2c:de:67:40:69:29:a7:07:8a:f7:
ae:c4:f3:40:18:05:cb:4f:37:3b:a5:3a:15:b1:2a:a9:37:83:
52:25:3b:49:bc:6c:74:2a:c0:25:19:5c:9b:52:06:86:50:91:
3a:38:c7:1f:78:31:51:be:78:2e:02:ee:1d:35:c2:be:0b:d7:
89:87:82:b8:e4:d6:51:96:cb:3c:74:db:b6:0a:55:af:50:2c:
9b:db:71:2e:2b:5f:af:85:ab:73:2c:85:f6:86:59:5e:d9:15:
59:7e:63:15:d8:fa:69:94:53:6c:16:87:df:40:11:5c:ea:4c:
20:37:3a:c9:f0:fb:52:77:9b:d1:c3:f8:fe:78:20:a2:a7:0a:
9a:01:2b:3e:fc:91:35:55:d3:15:28:6b:5b:61:60:fb:b4:cf:
97:c4:3c:a8:b1:d8:bb:2d:39:a3:41:9b:30:6a:dc:73:bc:aa:
35:38:46:5b:14:a4:76:47:3a:42:7a:32:ba:17:b3:2e:74:89:
85:39:df:ae:d8:55:32:c7:53:17:b6:8f:64:25:0a:bc:ee:2d:
da:4a:7a:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:36:49 2026 by rpki-client