Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
File: UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft (raw, json)
Hash identifier: EQhCgfQ55RuN2i5YFk8zOUiI8h7JEauLwWs7vZszXzc=
Subject key identifier: 3F:7A:CD:D7:54:4A:7C:BE:D4:43:F1:0A:D0:3D:85:AF:26:DC:00:89
Authority key identifier: 51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
Certificate issuer: /CN=5177b45dbe49582983871498e928aee77607e4d2
Certificate serial: 019FAC75C4E751E24F0FCEAE39B583CB03B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
Manifest number: 4E
Signing time: Wed 29 Jul 2026 06:00:26 +0000
Manifest this update: Wed 29 Jul 2026 06:00:26 +0000
Manifest next update: Thu 30 Jul 2026 06:00:26 +0000
Files and hashes: 1: 9Hex18TBKBueDomTw4vvvqZLwVk.roa (hash: AvD4BYdpz590SrzArOTz39pFBwhxq164wDsdMrG1gDA=)
2: UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl (hash: EnqoZRuEdxBteocPkn2gG+J7JxvMIKq543xH22ByrXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:c4:e7:51:e2:4f:0f:ce:ae:39:b5:83:cb:03:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5177b45dbe49582983871498e928aee77607e4d2
Validity
Not Before: Jul 29 06:00:26 2026 GMT
Not After : Jul 30 06:00:26 2026 GMT
Subject: CN=3f7acdd7544a7cbed443f10ad03d85af26dc0089
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:90:48:3b:dc:44:a4:1e:db:9f:a3:f7:f5:5f:
20:c1:e8:c6:14:8a:97:1b:e9:46:9c:9c:73:26:b7:
b7:e7:5a:2a:34:ca:8f:64:c3:c4:3a:95:4f:0e:18:
fa:09:fb:06:5b:4a:33:07:3a:5c:7e:5b:a0:1f:15:
5f:8e:5d:c0:f4:f6:44:c1:6a:f9:6e:02:a8:6c:5b:
8f:86:85:4a:ae:25:b6:59:32:b2:c2:5d:d5:39:56:
9d:15:ad:82:0a:29:e8:c6:1c:b3:9d:dc:88:f3:68:
0d:bb:42:46:bb:36:86:c9:c1:e3:5e:51:9a:5a:2a:
08:56:8e:2f:e6:31:4b:27:24:60:7b:ff:a5:a3:0c:
3e:f3:64:cf:0e:4f:2c:23:10:d7:da:fc:f3:df:88:
51:fc:91:4c:c1:ed:07:ca:a5:f8:0f:34:0a:11:3b:
a8:cf:af:4f:79:6e:5d:ce:5e:fc:44:e6:41:75:b9:
b1:50:a9:75:45:f8:73:15:5b:63:33:24:84:3d:d5:
5a:c4:47:ea:28:9b:ad:bf:0c:5f:fe:46:80:e0:2c:
6a:16:dd:3c:b0:2d:4c:f3:0a:fa:a1:7d:c4:36:a3:
fa:7b:79:e7:51:e9:3b:27:c2:b6:7f:7a:a9:70:a2:
b5:b4:23:61:97:f7:12:41:62:86:e3:e5:90:39:7f:
45:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:7A:CD:D7:54:4A:7C:BE:D4:43:F1:0A:D0:3D:85:AF:26:DC:00:89
X509v3 Authority Key Identifier:
keyid:51:77:B4:5D:BE:49:58:29:83:87:14:98:E9:28:AE:E7:76:07:E4:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXe0Xb5JWCmDhxSY6Siu53YH5NI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/d46001-1609-4487-9150-bf78bb85a69e/1/UXe0Xb5JWCmDhxSY6Siu53YH5NI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:40:fc:43:5b:f8:b1:0f:33:71:b2:5a:cc:e0:5b:54:c7:50:
86:64:54:4d:68:77:27:77:60:82:c2:b9:48:ed:4e:06:4d:f2:
26:39:70:c5:cb:ad:f2:e3:87:a4:f6:b4:e8:52:44:56:f8:2f:
f3:fd:c5:c3:ff:49:86:25:a2:6b:6d:0e:24:c0:c4:eb:ca:5e:
8e:05:74:c1:01:dc:0a:41:85:70:e9:9b:f5:83:85:2f:bd:24:
ce:7c:95:e0:58:d8:39:96:cf:bb:59:f7:87:e0:66:b4:04:09:
51:d3:a0:8c:23:28:83:1f:33:c6:f8:7f:1f:8b:4c:2b:38:3a:
a3:37:d7:60:85:55:8d:e3:9b:e7:8b:cf:d0:b3:fc:8e:f2:13:
0e:80:34:3c:d3:62:45:5f:31:22:5c:05:69:ac:ee:a7:35:fb:
20:9c:e7:32:b1:d7:53:9f:03:7d:09:ad:da:24:16:86:72:b6:
0c:ed:02:4b:b1:4f:89:d3:a5:ce:25:ce:33:b4:a0:68:ed:c5:
c0:2a:03:89:6b:1b:01:b8:5f:b1:36:6a:75:48:27:2f:54:ca:
28:be:e9:ca:d2:95:c7:11:5f:ec:bd:f2:5e:36:2c:28:ec:17:
54:a8:ad:a6:8d:87:55:0b:a8:e6:af:b9:6a:32:e4:a2:2a:3c:
26:19:63:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:23:32 2026 by rpki-client