Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: oPviGScshJlj0pCScbcKxYOgpE9vJrTdQB2/oDYVfL8=
Subject key identifier: 10:4F:A4:64:EF:C4:36:C8:D6:88:EC:9D:F5:80:56:63:2B:39:3C:1E
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 019FAB99F0DF9327239B639AAE765C65FD2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0B66
Signing time: Wed 29 Jul 2026 02:00:20 +0000
Manifest this update: Wed 29 Jul 2026 02:00:20 +0000
Manifest next update: Thu 30 Jul 2026 02:00:20 +0000
Files and hashes: 1: Efm2bGrofvD9TKo6fR0hCwXyZZY.roa (hash: 8/kSaahEbvJMwKWK7IV2ZU7p4mFsDitwaZrJNwqZgFY=)
2: NDmwsiusftzbyMWBTWDJVW16t3w.roa (hash: vo2FWAXvXazwyLT6897L+Sclc/TCo4ut41EBl8NTSUY=)
3: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: Kt9QlRTIhefkKyyimc/kCGV+2GtEUCZgBjSmtfiQ1lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:99:f0:df:93:27:23:9b:63:9a:ae:76:5c:65:fd:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Jul 29 02:00:20 2026 GMT
Not After : Jul 30 02:00:20 2026 GMT
Subject: CN=104fa464efc436c8d688ec9df58056632b393c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:45:5c:47:8f:95:dd:7a:78:ab:2e:7f:89:33:
f2:25:82:bf:3b:9a:76:bd:43:3c:bf:eb:86:b2:50:
d7:a4:2b:19:d0:93:ed:70:65:3a:ab:39:e4:b4:f2:
24:68:d5:90:34:7a:df:59:11:d5:5e:eb:10:22:c8:
d5:f1:8f:53:98:72:de:a5:4f:9d:2e:e0:22:54:5c:
d9:e9:6f:47:aa:0a:a8:9c:22:0c:6f:e3:3b:e6:e2:
bb:82:ac:db:4a:d8:8a:e5:2e:45:c4:bb:84:3b:cf:
ed:ff:a3:b3:95:d8:83:40:8e:1c:ce:e0:64:18:47:
85:36:41:3e:d4:ef:0a:21:ac:cc:2f:73:ac:65:e9:
33:df:5d:29:a5:5f:2f:44:df:0f:b6:9a:83:35:53:
ee:16:72:2e:ca:fb:28:6b:d7:1d:27:1c:ee:d6:84:
46:78:80:08:a5:d3:5e:60:53:56:80:56:a0:55:b0:
1a:2c:07:e6:5e:b5:8f:78:a0:f9:21:ab:50:c6:ed:
08:37:fc:bb:8b:0b:4b:ff:ae:f2:cd:e2:ec:7c:4a:
dd:b0:e4:f8:e7:aa:f6:57:8a:b1:c8:bc:1d:c5:55:
78:b9:a7:04:00:69:4b:89:2e:b5:b9:74:88:50:43:
58:75:0f:16:45:cc:9b:6c:d7:71:6a:74:93:be:ef:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:4F:A4:64:EF:C4:36:C8:D6:88:EC:9D:F5:80:56:63:2B:39:3C:1E
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:8c:90:cc:59:29:a7:d5:11:aa:58:da:83:af:c4:78:aa:5a:
7d:c7:48:86:fb:c6:3d:17:ba:85:48:a6:4b:b9:a9:14:79:ee:
90:8b:db:dd:93:70:f7:bd:66:19:81:97:ac:1b:c8:16:af:dc:
c7:c8:7c:45:ac:05:14:55:8f:2f:1f:96:b5:c4:fd:ff:64:46:
8a:89:1e:f9:3e:48:07:b1:9d:3a:20:89:7c:90:eb:6d:1a:42:
40:ac:66:6e:37:fb:51:c8:e6:bb:0c:aa:1d:35:c0:b9:b6:c1:
9a:89:de:4a:c6:1d:ef:84:50:27:54:2c:db:e2:7e:93:73:1f:
e5:4a:ea:0e:7c:7b:79:f0:83:b9:f2:dc:a7:50:f1:81:ed:ea:
1d:1d:3a:3e:11:72:f4:de:34:54:87:85:f1:54:f2:ff:67:27:
5b:d9:31:6a:77:8f:17:70:9e:d2:68:0d:19:03:a7:fc:6a:56:
84:2f:0d:89:5f:5a:7a:f8:26:05:3d:c5:35:ca:69:33:a9:9c:
4c:20:e9:df:98:a7:13:6d:12:7d:9d:18:4e:d5:1b:38:44:29:
73:47:58:58:09:05:c3:1f:0e:24:37:31:d8:c2:8c:ee:ef:f5:
f1:38:6c:c1:b3:21:ea:b7:55:bd:14:ce:0c:b0:b6:ee:f8:d0:
bc:26:52:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:36:26 2026 by rpki-client