Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
File: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft (raw, json)
Hash identifier: CqZt0arQFIYEWP92x06Fhe3SKlPl0Q+AN51Y66OMt5c=
Subject key identifier: 3C:76:41:59:9B:94:D8:77:07:EF:D0:9B:5E:F1:5A:61:05:CA:36:69
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 019FAABE43F077A8FAD693BECF1CFD79FA4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
Manifest number: 4E
Signing time: Tue 28 Jul 2026 22:00:23 +0000
Manifest this update: Tue 28 Jul 2026 22:00:23 +0000
Manifest next update: Wed 29 Jul 2026 22:00:23 +0000
Files and hashes: 1: aHiGs_kfVS1DoiuEnfjlUZrGV7M.roa (hash: FlQ4woD6r87CTo56VrPgZyPlvImZWFoOO8xKo56dALc=)
2: aKvA2sGDcrQ9MX1z85xud2IcwQ0.roa (hash: K4dwopOx/n4SNP6oBK4GBq75QTWYS4KcSRrgSdwWp/I=)
3: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl (hash: d2YpIJv58YzoclWY+QRinmp/C5jqvkFqriChKeXqScI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:be:43:f0:77:a8:fa:d6:93:be:cf:1c:fd:79:fa:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Jul 28 22:00:23 2026 GMT
Not After : Jul 29 22:00:23 2026 GMT
Subject: CN=3c7641599b94d87707efd09b5ef15a6105ca3669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:e8:3d:c8:0e:a4:cb:c0:ab:ae:71:ba:a8:
23:33:58:26:17:c4:b8:dc:77:18:11:2a:22:9f:4a:
b5:d9:40:28:84:ea:3a:57:88:c0:5c:3b:53:33:32:
85:84:c9:21:af:8e:e1:6d:60:9c:94:ab:a1:0c:ef:
3f:ec:67:39:d8:26:e2:54:62:68:be:48:03:bd:34:
16:73:43:45:c3:88:16:49:cf:2b:f1:62:c2:38:8a:
22:57:fa:48:06:bd:f6:d4:3c:ae:ca:68:64:fd:46:
5c:15:e1:ae:2f:c7:75:19:6c:f2:64:73:08:7c:7e:
03:f4:72:cd:87:b3:3a:80:b9:a6:af:23:08:66:5f:
97:a5:30:18:e8:b9:b7:09:b9:40:bd:e1:53:71:24:
8c:04:3c:d7:0f:18:48:c8:a5:1f:75:31:5d:6d:e2:
63:1a:ce:b6:cb:f9:e1:63:dc:b5:7d:35:60:cb:55:
d0:e4:65:f8:5f:58:5b:60:f6:da:70:00:95:c7:49:
63:a1:60:ce:af:27:18:74:b0:83:c5:31:5e:77:29:
07:ab:aa:9e:58:fe:9b:69:f5:06:4e:f1:d5:7c:fd:
ee:8b:8f:19:2e:f6:68:1e:25:3b:2c:de:c9:dd:87:
b4:17:7d:39:3c:43:2b:48:a2:b9:65:07:01:d0:09:
d1:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:76:41:59:9B:94:D8:77:07:EF:D0:9B:5E:F1:5A:61:05:CA:36:69
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:4a:06:cd:80:76:71:22:ba:cb:39:13:6d:d9:69:62:1e:0c:
51:ae:bb:e6:9e:f6:54:17:2a:ab:5d:08:56:d8:aa:87:6c:21:
3e:a6:2c:2b:24:f7:49:bd:87:44:58:b0:70:9d:9f:72:be:88:
28:f4:0e:dc:d1:68:65:91:11:81:1a:72:ab:69:8a:e1:d2:bb:
14:0b:c4:5c:ad:45:9b:29:bd:49:3e:d3:71:c4:be:8f:aa:7a:
58:48:e2:fc:ce:69:41:de:ec:6b:3d:db:cf:27:0b:e0:89:3e:
b7:41:9a:bd:16:e8:54:cd:81:66:51:bb:3f:bb:be:f2:b1:3e:
66:a3:07:4b:ad:b0:2c:5d:fe:ce:10:66:83:3b:d0:af:f1:19:
1c:97:db:a1:fb:c9:1f:17:68:ef:58:f8:81:a0:0f:56:26:d1:
38:79:4c:ce:2b:7d:85:63:f1:98:33:be:ee:c2:91:0f:dd:52:
82:57:bc:3c:72:7c:a5:e3:df:52:e9:a8:8e:2f:0d:2e:09:ae:
0a:fa:01:10:36:a5:26:3c:d0:5d:f3:59:b4:6c:f8:f3:1b:a2:
1e:16:36:b9:bb:01:da:b6:d0:64:1f:68:d0:e2:1c:fc:4d:9b:
15:16:a5:39:0a:47:b4:9d:79:b9:af:9d:46:b0:e8:18:65:e3:
1a:fc:69:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:51:07 2026 by rpki-client