Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
File: UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json)
Hash identifier: 2hwOU0gWiZKp56m/pBOzAQ0Y5MYEaz6p3rpChWZk24s=
Subject key identifier: 88:A8:56:91:56:9E:ED:13:5A:22:E5:DF:7C:89:2B:1E:7A:77:27:74
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Certificate issuer: /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial: 019FAB2C9491497CA3311E8653A496B93E2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
Manifest number: 123E
Signing time: Wed 29 Jul 2026 00:00:53 +0000
Manifest this update: Wed 29 Jul 2026 00:00:53 +0000
Manifest next update: Thu 30 Jul 2026 00:00:53 +0000
Files and hashes: 1: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: T0+rjIB3uqEds/fR12Uz0wly5Lbe3pNBJr72KlIDD9M=)
2: WHzT1xNbrqBC6jtKFtgLQt_Vl6E.roa (hash: 8QkWSVBBzKymI1BjVbTns65IfcYeeeiohZFtfy32gfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:94:91:49:7c:a3:31:1e:86:53:a4:96:b9:3e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Validity
Not Before: Jul 29 00:00:53 2026 GMT
Not After : Jul 30 00:00:53 2026 GMT
Subject: CN=88a85691569eed135a22e5df7c892b1e7a772774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:47:45:0b:31:a0:7d:86:c4:eb:a4:7c:d7:1f:
05:77:0e:28:c7:7e:cb:56:5e:63:bc:bc:d7:f0:ca:
7d:5e:35:20:b3:61:94:8e:ce:4b:90:90:4c:8a:cc:
af:09:46:51:ac:98:32:a0:e8:19:30:13:bd:33:33:
71:b4:0a:e8:a5:19:50:b2:94:3c:2e:ed:4d:9a:99:
ad:e0:7a:20:be:d0:80:a0:c6:8e:a0:e2:9c:c2:62:
eb:cd:32:63:34:08:fe:e3:3b:4f:79:8c:0a:46:3f:
a3:57:b4:b6:cc:20:ca:f4:7a:8b:94:1f:ca:7b:82:
2d:1f:24:6a:29:3a:18:fa:a4:c5:af:93:9a:3f:9d:
64:f3:72:cc:99:fd:7d:98:4c:e5:dc:69:0a:9a:3e:
82:6e:a9:4c:37:d7:a6:de:42:02:bd:b4:69:cc:91:
e3:43:9f:39:db:81:fe:03:4a:a5:f1:af:2c:46:53:
c0:52:a4:79:a2:1e:87:4f:2b:68:3e:97:a0:0e:1b:
d1:71:6c:41:b4:fe:00:b1:24:d2:10:a1:03:25:ab:
cf:fa:5e:85:0b:bf:dd:9f:9b:1d:85:86:4e:23:89:
8a:3d:82:0f:78:f1:95:1f:a9:a6:2a:7c:1f:bc:d4:
a7:2f:95:80:f0:86:1d:ba:38:97:63:38:da:6e:b4:
36:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:A8:56:91:56:9E:ED:13:5A:22:E5:DF:7C:89:2B:1E:7A:77:27:74
X509v3 Authority Key Identifier:
keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:83:59:bd:b3:10:3c:ef:74:4b:81:1d:87:6d:f1:ee:5b:4d:
e0:f6:f0:c0:52:eb:67:33:c6:9d:34:83:2e:94:26:56:05:d2:
91:65:73:7a:f5:f9:7a:fd:07:c6:53:1c:23:53:65:a6:cd:7a:
c2:5f:35:9d:d6:40:de:77:48:d9:19:9d:55:c2:89:1d:97:4d:
5d:d0:bb:e4:53:de:47:df:46:1c:20:60:fe:87:72:f9:05:44:
db:ca:97:ec:5f:25:1e:06:85:09:6e:72:44:9c:e6:77:10:c7:
e0:3f:fe:25:c6:16:9f:29:7a:c9:ed:70:78:96:67:1d:3c:ea:
35:88:b3:11:9b:9a:36:65:7a:03:40:96:b4:a3:57:88:d1:3d:
6e:e9:8a:c8:d6:38:71:99:ef:d9:7b:f4:ed:4b:61:59:7d:1f:
c6:0f:42:02:4b:c3:1c:1e:53:f1:a1:68:53:c1:6c:a5:1b:19:
fe:0c:28:83:9e:68:be:fa:1d:33:2b:3e:be:02:29:6b:5d:dd:
65:8a:0c:da:f9:ef:e8:86:4c:cb:3d:3d:42:5c:97:bf:00:47:
f3:3e:df:10:ad:0b:87:99:6f:dd:0f:94:af:10:76:6b:61:41:
4d:35:5e:3c:88:77:46:d0:8b:89:40:95:9c:17:25:56:b3:0b:
59:65:2a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:47:18 2026 by rpki-client