Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: mG0VrS5ZgvNPAEBjCvoalVPTMD6We+62LCGiqsAwNKE=
Subject key identifier: 11:33:4C:A4:2C:79:86:91:2E:83:50:16:12:80:F5:C0:54:3A:98:90
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019FA82BAFC5DC27C4381FBF28995E4B823E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 19D3
Signing time: Tue 28 Jul 2026 10:01:03 +0000
Manifest this update: Tue 28 Jul 2026 10:01:03 +0000
Manifest next update: Wed 29 Jul 2026 10:01:03 +0000
Files and hashes: 1: S_bLPS21FFHSFgzqZbLQgGjdapU.roa (hash: ntP7qUH7mD4+qqNvUodX6WEcYgeevuhwX8/sIbaDqz4=)
2: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: 8j2omcrftSS1ZDnDuvAfgvg/kKtjH3XDnKTDZFZCXfw=)
3: vuogQOiw-NsRjP2TO25Dr4VGU1g.roa (hash: /xeIMQbmMftTFD0OnGKJGQk5eie+bKtG5JesE4wKpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:2b:af:c5:dc:27:c4:38:1f:bf:28:99:5e:4b:82:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jul 28 10:01:03 2026 GMT
Not After : Jul 29 10:01:03 2026 GMT
Subject: CN=11334ca42c7986912e8350161280f5c0543a9890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d2:33:de:30:d4:79:91:4f:7a:e0:30:10:c5:
fb:78:8e:56:c5:72:86:82:8b:15:55:fd:de:3a:9b:
cc:3a:e4:77:38:ea:04:0c:b4:a7:38:d3:c3:ee:cd:
7e:80:b0:25:69:a8:33:a0:dd:48:e2:f7:82:dc:52:
ba:54:41:72:9e:fd:62:4d:e9:54:eb:f3:11:e1:a8:
4f:21:06:d8:3b:45:56:b0:d2:7b:3d:8f:b1:eb:9d:
4f:3c:9f:fc:00:5c:de:b8:48:28:67:53:77:95:78:
86:54:6e:ff:8b:1e:eb:b1:aa:f4:90:8b:49:57:d0:
a3:60:a8:b5:87:6d:fd:5b:d3:7f:22:ef:db:17:ed:
c5:eb:27:3a:b2:31:59:f6:9c:c4:ca:71:60:3c:23:
d2:9c:a1:93:92:25:10:04:2d:00:13:8c:90:dc:f6:
8e:34:7b:58:d9:75:34:dd:33:6f:6f:fe:77:15:80:
3d:b1:6a:3c:95:fd:82:c6:86:3f:c8:66:c1:2c:5a:
4e:6b:43:4d:bd:cd:de:82:78:8d:f8:c3:f4:cc:5e:
eb:8e:40:9f:9e:d7:93:b6:22:14:bd:cb:76:6e:d4:
08:2f:79:fd:46:9e:e1:78:01:5b:e5:7d:9e:89:70:
45:bf:60:b2:fd:58:cb:b2:f8:41:1b:31:1f:8b:93:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:33:4C:A4:2C:79:86:91:2E:83:50:16:12:80:F5:C0:54:3A:98:90
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:f4:4b:5d:96:19:59:34:e6:d3:d8:74:90:34:12:92:35:26:
09:ab:e5:7d:d9:df:7f:19:6e:58:ff:41:da:29:db:cb:70:0b:
31:b7:71:f7:3c:fa:80:23:2c:b1:08:98:60:80:d9:16:96:48:
46:56:05:2b:7a:01:bb:6f:eb:fc:61:a3:4e:26:e5:55:18:bc:
4f:69:a4:18:88:7b:33:e9:9b:86:7e:3f:5e:58:85:cb:1a:ca:
47:21:72:db:58:3a:dc:11:62:f1:08:89:4c:bc:63:91:56:a4:
23:58:aa:2a:3a:c1:6c:1e:bc:2d:08:c7:60:3e:a3:02:7e:64:
39:55:75:ec:7e:3b:99:3b:ce:0b:62:cb:31:2f:d7:43:ba:b2:
1a:3d:49:51:f2:c1:db:f3:b7:aa:7b:d4:bc:31:52:47:25:0c:
bc:52:89:25:f7:ed:5f:d7:03:48:2c:5f:a3:6c:82:77:fa:40:
50:01:a8:03:2b:cd:ea:fb:70:f3:5c:2b:fd:c1:57:f6:1d:9f:
27:a9:e3:65:d0:22:2d:c2:57:a8:d7:1f:44:20:6e:59:d1:a5:
ff:66:de:d7:23:57:51:6e:38:35:4f:c4:5b:1b:86:47:a2:1d:
34:93:8f:61:6d:e1:fc:b3:0e:bd:f9:28:ba:7d:75:4c:2f:9c:
cd:75:bf:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:11:57 2026 by rpki-client