Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
File: 1SrUBolIgw2enlis5eHxcDSOQCQ.mft (raw, json)
Hash identifier: QJ+XPqodE1mOCcLTfVjPEIo0njpgaVrqNxjpmIk9aYQ=
Subject key identifier: 31:AF:31:E8:02:62:6F:5D:6D:E4:86:CE:F4:C6:6C:6F:6D:D3:2B:FC
Authority key identifier: D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
Certificate issuer: /CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Certificate serial: 019FA9E2D63BDDDA392DFF436D136084BBBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
Manifest number: 125A
Signing time: Tue 28 Jul 2026 18:00:43 +0000
Manifest this update: Tue 28 Jul 2026 18:00:43 +0000
Manifest next update: Wed 29 Jul 2026 18:00:43 +0000
Files and hashes: 1: 1SrUBolIgw2enlis5eHxcDSOQCQ.crl (hash: hCupG5XKb3uHpg+oUUBcpzVAvFch8Uzv88mlPATaQ8E=)
2: ubq_xBKrBDVmoRiicjeCjxM9yfM.roa (hash: 0xkkVTV2725zH3I8++A4kA66tUTB4Kd5cJoEJ4T50Pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:d6:3b:dd:da:39:2d:ff:43:6d:13:60:84:bb:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d52ad4068948830d9e9e58ace5e1f170348e4024
Validity
Not Before: Jul 28 18:00:43 2026 GMT
Not After : Jul 29 18:00:43 2026 GMT
Subject: CN=31af31e802626f5d6de486cef4c66c6f6dd32bfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:4d:4d:da:73:2d:7a:c5:ce:2c:4e:6e:43:cb:
8f:be:20:51:fc:c1:d7:7e:90:9b:50:7f:8f:34:dc:
65:3f:14:c1:13:0f:95:69:e9:ac:23:07:f9:44:40:
c7:06:a6:50:9a:38:9a:12:22:d6:c9:e2:db:c8:b7:
39:6e:f0:4e:b4:00:78:62:c2:93:80:b9:f7:af:f2:
cd:fc:a1:b6:0a:32:6b:e1:ab:46:60:e5:39:d3:f2:
71:66:e3:d8:98:a2:b3:75:6b:a3:8b:40:f0:90:23:
f4:df:61:b8:63:ad:f8:30:9b:0a:ea:4e:52:e1:77:
b7:81:db:23:e5:c0:b9:08:cd:4b:a6:63:84:9b:45:
8c:cd:15:c6:aa:f4:f9:fd:d8:ea:fc:ee:d1:d6:a9:
e1:88:5e:5d:8b:62:db:b7:40:f4:41:dd:7e:3c:cb:
71:46:6a:5a:2d:b6:1d:82:a8:c9:04:97:9b:c7:c7:
f7:6e:a0:ac:5e:54:f1:39:0b:96:95:aa:b7:eb:69:
d4:07:2f:46:44:44:4c:f4:1f:41:31:90:9e:04:7b:
0c:99:93:4f:8d:fe:00:93:99:68:d8:6f:20:4f:d7:
1a:83:7d:1a:71:d6:98:2c:0c:ce:ad:50:f9:54:0a:
20:d2:27:14:da:37:ec:a5:c3:5c:4c:54:85:54:1c:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:AF:31:E8:02:62:6F:5D:6D:E4:86:CE:F4:C6:6C:6F:6D:D3:2B:FC
X509v3 Authority Key Identifier:
keyid:D5:2A:D4:06:89:48:83:0D:9E:9E:58:AC:E5:E1:F1:70:34:8E:40:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1SrUBolIgw2enlis5eHxcDSOQCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/6db8e0-1780-401a-9cb7-b8cf04b54251/1/1SrUBolIgw2enlis5eHxcDSOQCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:2b:e3:b7:89:e8:52:2d:26:17:aa:52:8f:24:5f:fe:bf:ca:
9e:1a:2f:b2:29:2d:c2:cc:33:9f:c7:72:63:3a:4e:ed:a8:aa:
3e:4c:20:60:ca:8b:08:8c:93:72:30:f2:44:ed:40:04:f5:e7:
61:b1:6e:94:a5:fb:fc:7c:fa:b0:97:a4:77:9b:47:8b:dc:94:
37:aa:67:0d:57:b4:1e:45:71:e0:1d:98:64:db:5f:e3:70:d8:
7f:c7:a0:0e:3c:55:ba:39:e1:2e:a0:e9:26:4c:58:49:32:85:
5f:aa:61:66:aa:e6:25:ad:5f:85:1f:71:57:32:8b:c1:eb:da:
84:77:49:f1:b0:3d:27:80:d3:62:a8:a2:a4:46:dd:d4:24:f3:
3a:9d:96:bc:18:5c:ed:42:4d:84:cf:12:83:e3:c5:6c:f2:0a:
7e:44:45:c1:a8:2b:ba:06:6c:b5:56:1f:8c:fd:e5:2d:e0:98:
da:8c:ad:1d:63:25:f1:6c:8a:37:76:a7:75:e1:8f:bb:66:83:
ad:ff:7c:4b:ab:f7:be:af:34:62:3f:79:26:01:d4:61:92:86:
05:5b:7a:7c:88:9a:2c:94:92:7b:34:51:01:8d:0c:5e:44:e9:
3d:c2:25:5a:4e:8e:7f:09:b9:37:a8:e5:18:6e:8b:a7:8d:d1:
3d:05:85:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:56:19 2026 by rpki-client