Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: rSi/3XDEIwGnwW4Z16GOlWvWkTTFe2+a1G8BQBElah0=
Subject key identifier: 61:A3:04:A8:4C:F0:E1:5D:5C:E7:BC:84:B5:84:ED:29:53:71:FD:8B
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 019FACAD5CA771F2682D642C8DBF29E8B997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 19DB
Signing time: Wed 29 Jul 2026 07:01:10 +0000
Manifest this update: Wed 29 Jul 2026 07:01:10 +0000
Manifest next update: Thu 30 Jul 2026 07:01:10 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: dGy9We1C11GgL3R2V2mkcAN5tT/BKGj+nWYsZ7Dow/8=)
2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:5c:a7:71:f2:68:2d:64:2c:8d:bf:29:e8:b9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jul 29 07:01:10 2026 GMT
Not After : Jul 30 07:01:10 2026 GMT
Subject: CN=61a304a84cf0e15d5ce7bc84b584ed295371fd8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e6:e6:63:18:78:50:6f:e2:6b:d0:9f:70:50:
28:36:be:08:95:1a:a1:63:8a:f4:13:23:f5:2a:05:
2d:e7:e0:a0:b9:9b:85:0e:e0:5c:27:bd:6d:e0:35:
9b:b1:c7:d9:4c:bb:ba:c7:33:cf:2a:2d:84:54:b2:
36:33:c1:25:07:47:80:95:3e:99:90:48:7a:ea:d7:
ff:7e:2c:81:b2:1b:6d:83:94:8c:24:22:e7:6d:6e:
9f:ac:fe:14:7f:e6:41:d2:11:02:52:66:5e:93:19:
55:b6:f8:0a:3d:19:3c:25:93:e0:da:e6:8d:ee:06:
cf:a6:e4:2c:33:f7:9c:73:ae:46:79:91:78:75:cb:
bc:9b:2c:ef:07:e1:8a:20:5f:84:af:4c:14:05:e4:
34:52:f8:e6:e2:a4:28:15:c1:6d:67:1d:ce:75:db:
9d:03:43:8d:e4:03:80:28:d1:e0:00:99:18:46:6e:
46:36:97:73:bf:6f:12:8e:3d:28:19:00:ee:ac:80:
eb:1d:1e:f8:e9:29:c6:b5:ff:4d:fd:65:90:11:18:
7b:b6:18:d1:d3:49:de:ed:4a:5e:87:74:3e:a2:e1:
bd:c9:a1:d9:06:0d:d6:83:9a:9b:70:5b:aa:61:db:
a7:67:0b:59:e3:41:87:8b:ac:18:2c:51:97:68:90:
1a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A3:04:A8:4C:F0:E1:5D:5C:E7:BC:84:B5:84:ED:29:53:71:FD:8B
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:18:1d:cb:3c:73:97:49:cb:18:9f:a5:97:c8:71:52:de:68:
93:d4:41:09:b0:d9:32:5f:09:f0:33:b1:41:d1:b9:46:45:af:
19:b9:9c:cd:6a:37:f5:5c:b9:61:7b:7f:f6:b9:61:c4:c7:e0:
07:19:14:72:7f:c7:6d:6b:1a:ed:bd:f0:a7:34:0d:78:65:3d:
5e:e8:62:8f:fd:6e:b4:bd:e0:0e:53:e4:90:3f:9d:c7:ed:72:
81:89:3b:50:35:05:ef:88:00:d6:dc:1e:9b:92:b0:5b:64:eb:
6c:e0:de:a3:e8:31:a0:92:eb:10:c8:92:79:87:5e:de:37:fc:
74:11:01:e9:81:39:55:3d:b7:27:c0:b8:c4:ec:8c:20:9c:59:
01:ef:84:b3:14:14:c0:11:b7:e3:18:67:bc:b5:ae:22:84:2f:
de:87:19:95:54:e5:c7:66:ca:77:bc:4a:6c:0c:d1:53:d1:25:
17:2c:bf:ac:65:96:8b:bf:8d:1d:b0:d4:ca:35:f5:45:91:61:
c8:49:c6:93:ac:f6:97:6d:1f:9c:9e:53:bd:ff:61:13:c5:75:
d6:ce:e2:d2:0a:57:c7:de:c4:57:91:9a:e2:93:8b:fb:9d:f1:
5e:f0:24:1c:2e:36:31:0e:e3:9f:30:be:4e:69:af:91:4b:f0:
04:5b:f9:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:31 2026 by rpki-client