Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
File: UNSsMgllq0mREIUBoGAqaJPmP-w.mft (raw, json)
Hash identifier: v15H2RaHFbkQx8LSBq2MHZgtBKfdayQ5dxu+MZw8Pto=
Subject key identifier: FF:87:2B:0F:20:E3:EF:B3:39:FB:EA:E2:7F:27:18:C6:04:3D:1A:DB
Authority key identifier: 50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
Certificate issuer: /CN=50d4ac320965ab4991108501a0602a6893e63fec
Certificate serial: 019FAABF3275BF4B5B7015C861267F422278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
Manifest number: 19DA
Signing time: Tue 28 Jul 2026 22:01:24 +0000
Manifest this update: Tue 28 Jul 2026 22:01:24 +0000
Manifest next update: Wed 29 Jul 2026 22:01:24 +0000
Files and hashes: 1: UNSsMgllq0mREIUBoGAqaJPmP-w.crl (hash: hPzaJLpAmfLWAuVt83MyFivHkj7TevgtpALFCUHGt50=)
2: aSQK_Cn7Rj_Qk5VH_2zX0Del1xI.roa (hash: AJLz8V9DTfSj8uSOdLs4ccNuem/rratwpuZJ7Nlu/rU=)
3: tw_BqpZzxh26R1N5YCAOWWyOrCQ.roa (hash: 6Q4E50IA4gfxHi7asjcxRHabRyp2c+3fX6uruEOwttg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 22:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:bf:32:75:bf:4b:5b:70:15:c8:61:26:7f:42:22:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50d4ac320965ab4991108501a0602a6893e63fec
Validity
Not Before: Jul 28 22:01:24 2026 GMT
Not After : Jul 29 22:01:24 2026 GMT
Subject: CN=ff872b0f20e3efb339fbeae27f2718c6043d1adb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:66:46:aa:45:1c:8d:7b:4d:77:67:42:0a:19:
35:29:86:ab:4f:a9:b3:c9:51:e3:ac:88:ee:5d:4a:
45:60:b6:f5:9f:33:a3:be:ef:34:d0:7e:0c:a7:20:
f0:4b:4a:ab:6d:7b:77:02:39:89:95:37:b0:90:d9:
b4:38:5f:cb:f9:fd:1a:97:67:7c:f8:cd:e4:8a:4c:
5e:d5:6c:00:94:a3:84:a8:d6:24:d3:d7:10:60:9e:
c2:53:a7:6c:2f:ee:1c:05:b4:ca:62:ea:d6:78:1f:
78:59:93:52:39:dd:d8:c9:70:c1:c2:2f:90:cc:37:
0b:35:80:8c:de:17:7c:c2:73:2a:1b:21:30:ed:c9:
28:1e:b0:6c:8e:2c:f0:73:d5:41:b8:c4:0b:9a:c6:
2e:c6:ce:2f:4d:f0:a7:41:1e:74:5b:fe:0c:09:b4:
fd:e0:b7:d9:2b:67:3d:0d:7d:4b:5b:6c:84:4c:83:
fa:e6:2d:78:30:7e:59:2f:0c:ba:16:0c:1d:b7:ab:
17:9e:16:7d:4b:4a:4d:13:de:ae:9c:5a:2b:cd:12:
9d:d7:c7:fd:83:e9:d9:b3:0c:f9:46:75:31:d5:72:
d2:d6:be:2c:bb:de:89:8f:0d:25:25:07:31:34:9c:
16:ab:eb:2c:4f:e1:8f:2b:d2:4c:44:ff:37:e0:07:
f9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:87:2B:0F:20:E3:EF:B3:39:FB:EA:E2:7F:27:18:C6:04:3D:1A:DB
X509v3 Authority Key Identifier:
keyid:50:D4:AC:32:09:65:AB:49:91:10:85:01:A0:60:2A:68:93:E6:3F:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNSsMgllq0mREIUBoGAqaJPmP-w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/403528-9e7c-4b64-9599-ba032323744c/1/UNSsMgllq0mREIUBoGAqaJPmP-w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:49:cc:ea:3f:9b:1c:ad:fd:07:7d:74:38:44:6d:c2:a2:e5:
01:f8:e4:9e:97:f5:ae:01:ba:2c:58:7e:e4:9a:e4:c0:4d:40:
b4:11:89:64:b9:62:b5:81:1a:45:87:f9:ec:60:d4:ba:18:12:
3d:d7:e1:9d:1f:ea:68:04:b7:fb:f7:dd:a3:b3:9c:41:76:18:
8b:fa:43:e3:de:f6:58:40:86:2b:28:a7:69:63:f1:3f:48:54:
1b:3a:71:e7:75:2a:e6:64:ae:0e:01:df:4f:a1:2a:e0:71:6b:
7b:14:d4:e4:81:2d:0f:b7:d1:d9:74:bc:86:d2:b0:97:4b:a5:
98:9f:24:4e:16:fa:e5:dd:0d:a4:76:ba:70:4b:55:04:70:71:
de:b4:ed:43:5e:5f:d5:06:28:e7:dc:18:30:87:23:13:b7:f0:
7d:db:38:9e:d8:ac:a9:86:c1:dc:18:db:f3:32:3d:f2:b3:87:
c6:b3:89:ff:e8:eb:43:14:47:ef:00:d0:77:c2:1e:9a:7e:47:
e5:cc:8f:fe:30:c6:47:dd:6f:ab:fb:8f:dc:d2:43:8c:20:05:
40:76:a9:69:58:9b:93:10:76:86:ef:8e:0b:22:90:33:09:de:
67:ac:83:86:57:d7:7c:57:5e:bf:21:8b:36:7f:ff:84:8e:22:
24:30:75:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qvzJ1v0tbcBXIYSZ/QiJ4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZDRhYzMyMDk2NWFiNDk5MTEwODUwMWEwNjAyYTY4OTNl
NjNmZWMwHhcNMjYwNzI4MjIwMTI0WhcNMjYwNzI5MjIwMTI0WjAzMTEwLwYDVQQD
EyhmZjg3MmIwZjIwZTNlZmIzMzlmYmVhZTI3ZjI3MThjNjA0M2QxYWRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyGZGqkUcjXtNd2dCChk1KYarT6mz
yVHjrIjuXUpFYLb1nzOjvu800H4MpyDwS0qrbXt3AjmJlTewkNm0OF/L+f0al2d8
+M3kikxe1WwAlKOEqNYk09cQYJ7CU6dsL+4cBbTKYurWeB94WZNSOd3YyXDBwi+Q
zDcLNYCM3hd8wnMqGyEw7ckoHrBsjizwc9VBuMQLmsYuxs4vTfCnQR50W/4MCbT9
4LfZK2c9DX1LW2yETIP65i14MH5ZLwy6Fgwdt6sXnhZ9S0pNE96unForzRKd18f9
g+nZswz5RnUx1XLS1r4su96Jjw0lJQcxNJwWq+ssT+GPK9JMRP834Af5qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+HKw8g4++zOfvq4n8nGMYEPRrbMB8GA1UdIwQY
MBaAFFDUrDIJZatJkRCFAaBgKmiT5j/sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTkt
YmEwMzIzMjM3NDRjLzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS80MDM1MjgtOWU3Yy00YjY0LTk1OTktYmEwMzIzMjM3NDRj
LzEvVU5Tc01nbGxxMG1SRUlVQm9HQXFhSlBtUC13LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzknM6j+b
HK39B310OERtwqLlAfjknpf1rgG6LFh+5JrkwE1AtBGJZLlitYEaRYf57GDUuhgS
PdfhnR/qaAS3+/fdo7OcQXYYi/pD4972WECGKyinaWPxP0hUGzpx53Uq5mSuDgHf
T6Eq4HFrexTU5IEtD7fR2XS8htKwl0ulmJ8kThb65d0NpHa6cEtVBHBx3rTtQ15f
1QYo59wYMIcjE7fwfds4ntisqYbB3Bjb8zI98rOHxrOJ/+jrQxRH7wDQd8Iemn5H
5cyP/jDGR91vq/uP3NJDjCAFQHapaVibkxB2hu+OCyKQMwneZ6yDhlfXfFdevyGL
Nn//hI4iJDB1gA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:04:40 2026 by rpki-client