Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
File: U5jsPBWxT9itkTy7lWV9jqgufiU.mft (raw, json)
Hash identifier: OIfIgUFxn7YOJulraKdnOnJjL+TIJd/+qDeD+eM884w=
Subject key identifier: D2:2F:6F:A5:DB:69:73:D9:65:E2:C5:17:31:69:39:28:01:35:E4:32
Authority key identifier: 53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
Certificate issuer: /CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Certificate serial: 019FAB63CED70B94FCF03D733CE979171C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
Manifest number: 06B8
Signing time: Wed 29 Jul 2026 01:01:12 +0000
Manifest this update: Wed 29 Jul 2026 01:01:12 +0000
Manifest next update: Thu 30 Jul 2026 01:01:12 +0000
Files and hashes: 1: U5jsPBWxT9itkTy7lWV9jqgufiU.crl (hash: okeDCr/dVzwBnLsSGTJ6uvNgOYa059bbiCcn3VkA0W4=)
2: mVapMmHRdrNnHP7qEe61fUd9MJ4.roa (hash: 7gjqh37t5TbJMLovzwK7uE6PbR35tPIiZgeHv6oUC54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:63:ce:d7:0b:94:fc:f0:3d:73:3c:e9:79:17:1c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5398ec3c15b14fd8ad913cbb95657d8ea82e7e25
Validity
Not Before: Jul 29 01:01:12 2026 GMT
Not After : Jul 30 01:01:12 2026 GMT
Subject: CN=d22f6fa5db6973d965e2c517316939280135e432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e6:15:f8:ba:ba:d2:89:46:d4:c8:6f:7b:9e:
61:58:1e:d5:84:e7:34:67:2f:4a:6a:4f:42:75:bf:
c7:c9:f5:a3:d3:bc:b1:f0:72:60:9e:39:d9:0b:46:
8e:5f:38:a6:81:65:a5:d7:28:76:b7:b3:0f:d0:34:
e7:f9:7f:99:2e:04:13:01:cc:6e:55:f4:fd:f2:e0:
4d:a7:85:df:d9:b5:c9:31:b1:b8:42:1f:79:96:11:
8b:55:2c:93:9c:a8:4e:8b:63:46:6e:56:25:e7:19:
43:68:29:aa:ed:67:ef:af:22:14:3e:11:9f:d2:48:
9d:9e:a2:81:7a:23:47:4d:f8:e6:f9:bb:88:9b:9d:
32:9e:93:f2:22:9e:94:6d:37:f1:2c:b6:27:04:bf:
bc:c3:5d:ff:19:80:20:8f:67:13:96:d8:f4:65:fd:
b6:3f:6b:58:3a:46:c3:56:ee:c3:b9:e2:b8:81:9b:
29:4d:65:ce:3b:67:96:b6:c6:f5:26:8f:38:62:29:
07:47:c4:f4:9f:6c:a5:d6:bf:41:b7:63:86:43:81:
0e:6e:bd:06:f4:25:6c:c3:76:35:72:d4:cd:b8:20:
29:3d:90:bc:ee:37:15:77:e0:26:7f:ed:73:4a:6e:
9d:51:56:f3:47:a7:ce:82:0f:a8:a2:87:a4:85:67:
86:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2F:6F:A5:DB:69:73:D9:65:E2:C5:17:31:69:39:28:01:35:E4:32
X509v3 Authority Key Identifier:
keyid:53:98:EC:3C:15:B1:4F:D8:AD:91:3C:BB:95:65:7D:8E:A8:2E:7E:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U5jsPBWxT9itkTy7lWV9jqgufiU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/88e8f4-74af-4b72-becc-f576738167e1/1/U5jsPBWxT9itkTy7lWV9jqgufiU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:de:36:89:4c:d3:9b:f8:7d:14:c7:06:e7:dc:a2:89:b6:93:
5c:aa:dc:a0:5c:c5:5d:cb:ce:d1:f5:d6:d3:7d:70:10:a7:75:
05:2f:56:f1:a1:9a:e4:0f:41:ed:24:1b:c9:92:68:e5:18:cb:
7b:a1:3d:64:9b:be:c2:2e:59:0e:20:db:ed:e5:03:e2:ec:4f:
05:cc:72:4e:e7:92:9f:40:12:fe:9e:7d:9f:4c:c1:51:61:d7:
2a:7f:50:a1:ff:02:08:23:0a:f5:d8:7d:f4:ac:ef:25:f6:34:
83:38:02:88:b3:f8:d5:c5:76:b3:54:ba:a8:f2:fe:c1:25:8b:
61:4e:f4:84:ee:74:60:b4:05:c8:33:79:8a:fc:f1:e8:8c:84:
6a:49:c0:ce:d8:a9:3b:3c:3b:53:7f:72:8d:95:58:a4:eb:83:
9f:8f:20:bf:6f:9a:63:29:ce:11:0b:48:6d:2f:fe:a6:0a:3c:
28:b6:96:b8:50:e9:5f:83:99:ed:61:15:e4:a0:4e:fc:2d:9e:
30:07:01:42:71:cf:fb:61:25:42:2e:00:bb:d1:87:b8:95:1c:
76:3f:6c:cd:26:96:36:78:58:c7:c4:1a:23:ad:0d:d9:9b:b3:
c2:ff:0d:35:ee:7a:ae:62:d7:76:0c:6f:11:72:b2:1b:1b:ec:
85:a1:f9:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:40:11 2026 by rpki-client