Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: JZwsdTOUJTwO/0GDF9+4XTJJeoxQcwl1g2L/OSOdjV8=
Subject key identifier: 14:1D:38:A4:8B:28:44:7E:DE:06:0B:59:83:C5:01:C1:CB:18:7E:CA
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 019FAD525DFB5AF0538291042ADF150419B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 19D9
Signing time: Wed 29 Jul 2026 10:01:23 +0000
Manifest this update: Wed 29 Jul 2026 10:01:23 +0000
Manifest next update: Thu 30 Jul 2026 10:01:23 +0000
Files and hashes: 1: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: akDE8mFaoXwwNYuuZvfegS3H0HkGul4RuEGg2Fi6QTU=)
2: dvjppw9s6JficbBL1JualOvAVhI.roa (hash: cPS5/nVNCYfyW3AOLG3yzdZLV0ipLTe96hQ2jMLs1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 10:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:5d:fb:5a:f0:53:82:91:04:2a:df:15:04:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Jul 29 10:01:23 2026 GMT
Not After : Jul 30 10:01:23 2026 GMT
Subject: CN=141d38a48b28447ede060b5983c501c1cb187eca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c6:32:85:85:8a:37:4e:09:5a:89:36:21:45:
ab:4e:70:38:4c:24:fa:cd:9f:03:01:96:c1:ff:5d:
ca:b4:88:83:19:00:01:1f:c6:b3:73:fd:77:2e:e7:
23:71:22:f0:19:59:c4:88:19:42:5f:7b:22:c3:3b:
02:43:52:df:46:7f:c3:a5:4e:12:bd:a8:e1:95:3e:
a4:cb:e4:1a:fa:39:98:a4:39:6c:df:02:7e:72:9b:
47:99:be:67:33:55:86:bc:07:df:18:05:09:0c:99:
ff:80:94:be:a7:41:74:dd:ff:eb:dd:83:a5:1a:ec:
53:a3:b0:f8:51:76:4e:f1:af:40:6e:db:ca:9b:6a:
4e:08:3e:06:66:c7:f7:20:40:42:d4:a3:66:4b:b2:
b6:31:04:47:d8:4c:8c:3a:f9:a7:55:7c:47:b8:34:
ce:f0:b2:42:a0:0e:d5:6b:e7:74:66:c3:96:88:75:
20:d0:7d:fd:9d:2e:fc:71:52:a8:34:d0:ab:67:79:
6b:40:1c:5d:a0:e8:9c:3c:2c:03:62:81:44:c9:c9:
83:e0:06:91:e9:a6:54:5a:04:6d:9b:f9:66:ec:be:
89:06:15:8e:78:e4:b2:cd:ee:54:7b:e2:6b:e9:4e:
24:6d:a1:48:cf:0a:02:82:2a:96:51:48:d7:64:b4:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1D:38:A4:8B:28:44:7E:DE:06:0B:59:83:C5:01:C1:CB:18:7E:CA
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:01:fb:6b:fa:94:34:ae:d1:fb:d2:71:7f:89:f1:0d:f7:b6:
65:81:7a:46:48:cb:ee:c6:bb:50:a5:05:e0:8f:e6:b4:03:20:
71:3e:af:74:fe:2b:83:5a:14:63:d1:42:82:35:5a:8a:c0:ec:
e1:42:40:33:41:cd:22:22:c8:0e:eb:a7:ea:ae:1f:7c:21:f1:
90:c0:60:4b:90:1d:70:89:3a:99:57:4f:0f:e1:d0:06:54:26:
ea:06:70:d1:08:35:d7:bf:2b:02:27:74:af:44:f3:68:b6:94:
96:a5:f4:5e:c8:91:81:3b:0e:20:02:71:6c:9a:59:ed:ee:f5:
e9:ce:bc:93:01:9e:5d:2d:a9:f5:67:f9:d4:30:13:51:bc:7b:
3d:51:8a:68:82:c2:2e:22:2a:c1:04:b2:96:ef:05:cc:38:eb:
91:0e:fc:51:01:9d:17:41:4e:b0:9c:65:42:b6:69:4a:bb:2c:
d3:05:bc:03:2e:85:2e:9c:11:94:f8:0a:80:4c:82:d8:43:3e:
c1:5e:28:a0:77:0b:33:4b:a6:85:95:ad:21:4c:1c:c7:6c:d1:
0e:e1:85:1f:37:5d:75:ed:4a:d7:5b:3e:1e:14:18:a0:61:29:
ed:0d:7d:a6:ea:b7:5e:55:df:45:93:1f:71:a6:61:9a:b5:19:
21:f8:96:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:33:12 2026 by rpki-client