Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
File: UbNIBPm2anHCRyWy13-UkRIYXrE.mft (raw, json)
Hash identifier: 3i62gb7465H2R6HHHfPe7+6d6+FEoEXx+Xpd6NXJ0qM=
Subject key identifier: 7F:33:52:50:B3:73:7B:0B:8C:8B:14:54:EC:AD:EB:83:6A:98:74:DA
Authority key identifier: 51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
Certificate issuer: /CN=51b34804f9b66a71c24725b2d77f949112185eb1
Certificate serial: 019FAE6449856CCE37DE3B1599D560933B90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
Manifest number: 0D43
Signing time: Wed 29 Jul 2026 15:00:35 +0000
Manifest this update: Wed 29 Jul 2026 15:00:35 +0000
Manifest next update: Thu 30 Jul 2026 15:00:35 +0000
Files and hashes: 1: AL0W8JafgnmPnnZBBZOLnMOElHU.roa (hash: W7hf6DI9RRqdDA51Pz50C4flOR9nQCePHPNNbBEGwT8=)
2: UbNIBPm2anHCRyWy13-UkRIYXrE.crl (hash: tB0aFLLmYW8y9UFvSPfN1jbZ1u3lbM03R3dpdEJC3sk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:03:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:64:49:85:6c:ce:37:de:3b:15:99:d5:60:93:3b:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b34804f9b66a71c24725b2d77f949112185eb1
Validity
Not Before: Jul 29 15:00:35 2026 GMT
Not After : Jul 30 15:00:35 2026 GMT
Subject: CN=7f335250b3737b0b8c8b1454ecadeb836a9874da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3d:f6:1e:9f:db:b9:45:54:48:56:0e:03:66:
c0:ce:2d:97:61:a3:85:65:ac:9d:56:a4:50:b7:a6:
6c:f4:5c:ea:b5:c2:53:77:3a:92:14:86:30:e6:fa:
b4:0c:2c:33:74:a6:0b:d6:a4:fc:d2:dd:3c:67:a5:
19:9d:9d:3a:88:4c:40:d6:7b:a3:01:20:f1:cc:d7:
83:de:92:b4:f9:fe:5c:0d:03:00:98:9a:fe:78:e3:
72:6f:59:3b:e9:24:57:f6:f0:37:aa:c7:be:33:40:
86:3c:c1:10:f4:25:8f:b8:91:1e:76:9f:19:8e:21:
b7:fa:32:e1:30:01:69:e6:aa:08:76:47:48:5c:72:
90:91:53:c5:ff:62:5c:15:a4:95:31:d6:14:e7:11:
20:d9:5a:c5:a3:be:cf:32:a8:74:38:48:9d:69:f3:
83:a2:1e:1a:e2:4a:ff:c1:42:71:6a:5d:55:b0:bb:
36:20:1b:ea:4c:f9:28:cd:26:99:53:25:db:89:07:
fc:19:c6:b8:f3:d3:b5:7a:71:b0:f7:1a:17:7a:8a:
c6:dc:c5:6a:cc:b7:d6:47:0e:31:1d:7f:b4:00:12:
f5:e2:ae:6c:de:96:9c:16:52:11:a7:7b:30:5d:bd:
1b:a6:36:67:95:41:81:0c:1e:18:ab:ed:e3:93:98:
e1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:33:52:50:B3:73:7B:0B:8C:8B:14:54:EC:AD:EB:83:6A:98:74:DA
X509v3 Authority Key Identifier:
keyid:51:B3:48:04:F9:B6:6A:71:C2:47:25:B2:D7:7F:94:91:12:18:5E:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbNIBPm2anHCRyWy13-UkRIYXrE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/74606f-d070-432d-a86f-5a7289ef5f63/1/UbNIBPm2anHCRyWy13-UkRIYXrE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:9b:08:86:d5:12:d0:59:06:82:59:11:2a:bc:af:72:05:19:
aa:2f:e3:27:e0:6c:6d:75:14:a6:46:e6:a6:5c:36:ab:21:12:
f4:60:db:93:22:0a:ef:79:45:bd:95:59:da:53:fd:cf:82:71:
35:09:a7:aa:33:bb:72:9a:38:84:e9:ff:f7:f6:f4:d7:6a:79:
25:04:aa:a3:e1:44:34:11:cc:5d:e5:32:cb:8d:47:58:70:f8:
f3:6f:c0:a5:ba:1d:4b:59:62:44:a9:86:33:fd:6a:d2:ba:5f:
24:19:ee:b4:de:d5:25:44:5e:4d:ab:9d:71:b9:9e:8d:63:9e:
4c:c3:6f:66:89:18:fa:09:1e:9d:ae:48:80:a6:a5:7a:98:1c:
d4:74:d8:7d:c4:f3:6b:de:62:28:2e:84:63:21:78:4f:ec:a7:
ab:24:d3:20:93:40:2f:f7:4e:7b:ce:a9:ca:6d:f9:5f:81:8c:
33:27:b1:2e:50:21:1d:4e:c8:73:e2:de:eb:b2:cc:94:a6:07:
88:58:6f:2e:c8:b9:e3:ca:7f:f3:fe:b8:10:e0:da:7e:6a:c1:
04:de:d3:f7:50:eb:aa:1c:39:c3:9d:6a:a0:64:80:b9:a5:ec:
63:a6:42:7a:ea:16:0b:be:8d:32:f2:fd:ca:59:42:5d:73:4b:
4a:7f:5b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 17:02:06 2026 by rpki-client