Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: eH3ZTaKkBGsiIhiKioIE6aC1BdPTzILqO7tUeVZX+lY=
Subject key identifier: 9E:7D:BB:EA:27:C1:FE:E5:F5:73:6F:70:B1:B9:E2:07:1E:6F:71:10
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019FA9074EA3A1A2CABE0621E4E21557DC7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 19D5
Signing time: Tue 28 Jul 2026 14:00:56 +0000
Manifest this update: Tue 28 Jul 2026 14:00:56 +0000
Manifest next update: Wed 29 Jul 2026 14:00:56 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: cIPaVhPwKvo+JV5nISGM7IJcXSkUOPfIaBdLcylEzJU=)
3: ykl9L1ieIhGIofGi7fpGhZ_4q9o.roa (hash: SVH2fs99Ob8T2U4b3+XfOBMnnh8VK7bnsIv441zI1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:07:4e:a3:a1:a2:ca:be:06:21:e4:e2:15:57:dc:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Jul 28 14:00:56 2026 GMT
Not After : Jul 29 14:00:56 2026 GMT
Subject: CN=9e7dbbea27c1fee5f5736f70b1b9e2071e6f7110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:2b:be:dc:b4:d0:b3:04:07:ab:db:5c:83:
8d:21:d3:e8:c4:26:0c:3b:f5:76:d5:69:7c:da:7e:
6a:3b:5f:f8:ef:e1:c3:e2:cc:d5:99:1c:7a:f5:2d:
11:30:6a:53:b6:65:da:18:e9:2f:06:dd:f2:d7:ec:
de:7f:b8:dc:07:44:11:65:2c:db:b5:67:a2:6b:fa:
f3:d8:26:b1:83:a7:15:72:51:49:cb:4e:2e:9e:be:
b9:d6:28:11:4c:50:a4:cf:f2:bc:57:cd:47:2c:91:
f7:74:d7:d3:98:ba:e5:49:42:9d:43:4e:81:71:3e:
29:df:04:08:39:f7:6f:f5:cc:7f:96:3e:94:b7:09:
0e:cf:17:5f:74:5a:92:f8:69:23:38:e0:9f:60:3d:
60:0e:89:cc:66:34:41:5c:2c:69:a6:73:b4:54:72:
d5:4a:0b:46:38:01:0d:84:73:4c:f4:04:46:79:0a:
32:4b:a7:60:87:98:ef:93:4d:9f:c8:6c:ab:52:42:
f6:94:3a:b9:00:79:ee:50:62:12:40:5f:bc:41:dc:
18:21:18:b0:bd:69:70:91:e6:7a:9c:a5:70:58:bf:
96:89:d6:7a:51:b3:e3:f5:30:fb:cb:63:14:d2:7f:
f8:01:85:f6:b8:d0:d1:cc:47:1d:34:ac:a3:42:bb:
22:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7D:BB:EA:27:C1:FE:E5:F5:73:6F:70:B1:B9:E2:07:1E:6F:71:10
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:74:7d:a9:9e:87:81:4b:3b:18:e5:dd:de:f6:29:19:5e:30:
a1:83:47:aa:52:e9:89:ce:1e:00:fd:f6:3f:79:eb:e0:1a:e0:
2c:df:0d:4e:de:ae:e7:79:20:8b:b7:d3:f5:b0:37:dd:8d:f0:
01:1f:1b:df:09:ae:6f:2a:08:b1:12:8f:61:43:fd:a6:fc:21:
f3:45:0e:16:51:50:09:c2:e0:5d:94:be:4a:09:df:e4:b4:b6:
05:1b:6a:48:ff:51:7b:cc:24:3b:01:a0:bf:02:06:bf:ee:c5:
ed:e9:9b:65:63:eb:88:67:f3:d5:e6:72:f4:db:79:28:26:67:
8e:ea:7c:98:9c:1f:f7:24:7c:34:2d:14:27:41:8d:10:7f:18:
67:24:85:69:4d:ef:47:2e:34:fa:b5:5a:9e:d8:ce:39:d5:d0:
ca:c3:c3:47:9e:90:9f:64:5a:49:a4:25:1b:6b:64:e7:2f:9f:
ae:bd:07:32:e1:3d:82:e5:7b:36:d7:11:d8:bd:58:01:8e:10:
79:67:5a:11:3e:2e:ee:95:5e:6a:bf:cf:9e:d6:a4:a1:aa:e4:
8d:11:c7:90:34:1b:49:b2:26:42:cc:66:3d:05:5e:6f:ca:28:
6d:cd:61:fb:53:93:7a:9d:e5:93:b3:77:df:b7:f9:90:d7:a3:
3a:ed:ff:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:49:43 2026 by rpki-client