Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
File: UgE1Q57tNQX3iGMmZ22r83zrvzY.mft (raw, json)
Hash identifier: aLaVIPcVlYSebSi0Ik8YeBq0bXMNrEdNSO4d3i9nalg=
Subject key identifier: F5:8B:F3:83:2A:91:A0:24:7F:9A:DA:CC:E1:62:FF:7F:CF:DB:8E:98
Authority key identifier: 52:01:35:43:9E:ED:35:05:F7:88:63:26:67:6D:AB:F3:7C:EB:BF:36
Certificate issuer: /CN=520135439eed3505f7886326676dabf37cebbf36
Certificate serial: 019FA89A590DD2ED088A074021EBF41A40B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:55 +0000
Manifest this update: Tue 28 Jul 2026 12:01:55 +0000
Manifest next update: Wed 29 Jul 2026 12:01:55 +0000
Files and hashes: 1: 60JuUSTouRU0NgMTspFmcLL6UNI.asa (hash: hRKCOYUhKmouY4DU6/XK7YCHELPIORSd+VCaf267/OI=)
2: UgE1Q57tNQX3iGMmZ22r83zrvzY.crl (hash: FvjtP8R3mHc7jkE7YV4H3oGj4wpCbQBonOReL2TUWvM=)
3: hZ_U4aIo3Sivv4cJsMMpXDX3NG8.roa (hash: cWZgtl6Fe0hqFBrcZyuN1x8H8xcw1ByuFigP7rHanh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:9a:59:0d:d2:ed:08:8a:07:40:21:eb:f4:1a:40:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=520135439eed3505f7886326676dabf37cebbf36
Validity
Not Before: Jul 28 12:01:55 2026 GMT
Not After : Jul 29 12:01:55 2026 GMT
Subject: CN=f58bf3832a91a0247f9adacce162ff7fcfdb8e98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:90:75:36:cb:85:b8:5a:45:3e:dc:10:6d:c7:
ba:fa:ab:36:07:4c:c9:06:1b:0a:df:51:85:19:98:
66:76:d8:f7:9f:22:7d:17:21:83:7f:53:63:18:85:
40:89:fb:3a:f6:d7:98:e6:37:f9:02:3b:1d:9f:5f:
ab:6f:ef:a5:75:8e:44:be:ab:8d:2f:c1:22:8c:6b:
26:a2:4d:f3:91:1e:6b:a8:b5:6a:14:7c:49:e7:de:
54:1e:59:6d:85:70:c1:22:42:77:34:90:ec:55:0a:
32:b5:60:36:e8:f9:be:e2:32:c2:c0:be:58:a6:14:
cb:91:4e:64:c2:d9:e3:c9:63:9a:25:21:e4:a6:92:
93:b9:f2:21:a4:46:77:b4:65:b0:39:33:39:58:69:
ea:b8:3d:18:28:14:26:27:83:0e:70:d7:a8:37:19:
10:90:c9:83:ed:25:f1:34:fe:da:9b:6d:22:3f:9e:
ad:d4:bf:54:83:67:d6:ee:2a:35:dc:20:6f:37:c8:
af:c9:b9:1b:31:a9:48:75:bd:95:ca:3c:d1:26:42:
b5:d7:89:09:e2:f6:3a:98:68:bb:83:a3:e5:35:ea:
60:04:70:b6:b4:27:02:e4:bf:0b:7e:f7:be:eb:22:
70:4f:75:ba:47:74:94:ca:7c:82:21:19:10:4a:bf:
14:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:8B:F3:83:2A:91:A0:24:7F:9A:DA:CC:E1:62:FF:7F:CF:DB:8E:98
X509v3 Authority Key Identifier:
keyid:52:01:35:43:9E:ED:35:05:F7:88:63:26:67:6D:AB:F3:7C:EB:BF:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UgE1Q57tNQX3iGMmZ22r83zrvzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/7926b8-6ea7-45b4-953e-aab7fc3f8ac5/1/UgE1Q57tNQX3iGMmZ22r83zrvzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:98:c6:6b:f3:c4:e4:59:74:c0:89:5d:53:9f:b4:a6:df:28:
5c:24:2d:cc:d6:af:0e:6d:a2:93:be:09:94:f9:b8:a5:d1:36:
d7:0f:cd:f0:d2:fe:e2:88:fd:c1:6f:f3:2c:43:91:e3:59:2b:
b4:c8:eb:ff:a6:4f:26:3e:71:7f:42:7b:5e:75:bf:69:1c:36:
a9:5d:68:cd:48:45:6d:03:e6:a0:69:ba:45:ea:90:78:fd:f6:
0f:07:b9:a7:4e:5f:89:b0:d2:64:e7:d6:71:27:f3:d3:ec:84:
5a:8c:fc:1e:86:89:f8:7c:07:05:ab:93:b8:7c:b6:f0:a5:d8:
ec:04:02:b8:5e:66:63:1f:40:d4:64:67:66:dc:1b:12:ce:9a:
62:96:62:9e:6f:d6:c0:70:39:98:f8:c6:f1:c7:a4:b0:af:ad:
d8:08:a0:7a:2e:7d:f9:41:d3:63:16:48:39:24:0d:6d:d0:0a:
d1:1c:10:e6:f5:65:29:40:b7:ad:7d:f3:98:eb:af:e3:42:0b:
bc:4c:b3:54:ac:00:43:f7:d2:e4:23:bc:71:7c:db:0b:9a:e0:
74:26:dc:ec:09:1c:29:df:30:61:ae:93:9a:70:02:2c:2d:8c:
98:7f:c8:f9:d4:3a:89:9d:f6:99:b4:b4:e9:44:a2:e0:8b:8d:
9f:4b:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:51:38 2026 by rpki-client