Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: gGRON0hE1Wr8N2xPhZL8i4a0pinTeNeUlJXyfAwjXbQ=
Subject key identifier: 56:A3:03:DA:36:1E:94:FF:CB:19:5F:12:52:4D:2C:45:30:4D:A2:FB
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019FAB63EC6D70CFE57DB89F2E275B0FF7E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 172F
Signing time: Wed 29 Jul 2026 01:01:20 +0000
Manifest this update: Wed 29 Jul 2026 01:01:20 +0000
Manifest next update: Thu 30 Jul 2026 01:01:20 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: B+U8j62JFZn7QVud9k91evg14faX6fowIl8fGQKVf0E=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:ec:6d:70:cf:e5:7d:b8:9f:2e:27:5b:0f:f7:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Jul 29 01:01:20 2026 GMT
Not After : Jul 30 01:01:20 2026 GMT
Subject: CN=56a303da361e94ffcb195f12524d2c45304da2fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bd:b3:37:77:cc:ed:f0:28:09:ad:3e:f1:71:
7c:cf:84:96:70:a6:21:c9:f7:95:be:d2:8a:15:b0:
f1:82:56:3b:08:73:82:3c:de:d0:0c:d2:41:a1:8f:
89:f4:c7:47:24:d8:f0:d0:2c:1c:7c:13:2f:90:84:
d6:4d:7a:04:e9:a8:59:1a:08:94:92:09:80:02:c9:
d9:69:71:33:27:6e:7d:5e:6a:2f:32:5a:ed:e7:ce:
25:56:02:c5:84:04:7b:ab:fb:87:3c:d2:e5:9b:b1:
cc:a0:be:af:29:8c:4c:39:e9:5f:0e:40:aa:7d:87:
e3:1c:ac:8d:b9:98:0c:be:c0:e9:b8:8b:59:7d:f9:
6b:78:a7:29:74:5d:31:cf:a3:83:8e:50:67:e2:a7:
79:b4:b7:a0:f5:76:0c:7d:ce:e1:ca:12:b5:1e:22:
fc:40:a1:8b:11:ca:02:1e:c6:78:9b:4b:27:82:72:
18:a4:c4:fb:b0:e4:39:0f:07:07:6f:12:95:4e:f0:
95:c2:9f:a2:a8:99:31:61:5e:c6:f4:5a:59:01:ba:
b4:b5:cd:9b:00:fd:55:51:36:d5:2a:74:fc:e1:44:
0e:98:e5:6a:5d:e7:d2:af:1a:1b:e0:bf:ed:fe:67:
a8:b3:59:08:11:04:a9:b5:a4:24:e9:1c:f6:91:31:
14:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:A3:03:DA:36:1E:94:FF:CB:19:5F:12:52:4D:2C:45:30:4D:A2:FB
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8f:77:42:bd:33:e7:e6:e6:fd:27:03:4b:25:7a:9e:5e:a1:
dc:ab:0f:64:8d:98:8f:d0:a2:2c:7f:ed:99:c7:83:89:aa:b0:
7e:cd:4e:7d:3e:d7:64:cb:d4:27:91:75:29:48:11:94:0c:a9:
f3:dc:a1:5e:6a:6d:ae:58:bb:42:1f:58:d9:9c:f8:9a:e6:01:
4e:ef:e2:d9:a3:ae:87:e0:b9:f4:c1:43:99:2b:82:c6:9a:0b:
c2:64:bc:f0:2b:a6:df:7e:94:27:a9:45:c6:62:c6:e5:a0:c6:
e5:ab:8e:c1:d9:ac:62:a9:8a:9e:f0:2b:32:dc:f7:ef:6e:a2:
f4:59:92:13:0e:1d:2e:d7:87:38:65:2b:6c:79:83:65:09:c1:
f3:a5:84:7f:40:5a:bf:6d:95:86:b3:ee:1b:df:10:db:98:88:
72:eb:17:dc:28:28:cd:68:cb:da:c5:28:3d:12:c7:40:12:34:
b1:64:c3:b2:73:a7:b1:23:b3:04:49:57:d2:e4:0a:79:4e:ef:
d7:dc:1b:a7:d8:70:02:fd:a0:6c:23:f7:5e:50:85:4f:df:d5:
58:73:2a:14:ee:bb:6e:7e:da:47:09:dd:66:48:5f:7e:0b:6c:
ed:e0:70:17:21:67:89:45:2d:0c:ea:cf:be:ea:a9:7c:d5:63:
0a:0b:e6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:23:33 2026 by rpki-client