Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
File: U43RixaS2KPncS0-a5KLCaoK5mw.mft (raw, json)
Hash identifier: vbBAjU48psuEdKfivozJh0HZHjRS+bJE0FwQmkLwHv8=
Subject key identifier: 1A:22:19:D5:3D:33:1C:16:1E:67:3F:FE:94:2A:80:77:A8:12:FC:9B
Authority key identifier: 53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
Certificate issuer: /CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Certificate serial: 019F91DA7C5896F92E326CC6087D4EDD0395
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
Manifest number: 04A9
Signing time: Fri 24 Jul 2026 02:00:42 +0000
Manifest this update: Fri 24 Jul 2026 02:00:42 +0000
Manifest next update: Sat 25 Jul 2026 02:00:42 +0000
Files and hashes: 1: 49wISrZvaWfJmuYUokxBAxCFFnA.roa (hash: fVyYSxQVcSLUIxvGvzkQ4MbdrWMkDcckbPhROtPlP1s=)
2: U43RixaS2KPncS0-a5KLCaoK5mw.crl (hash: gwMIWaw0FAJgV85/101wIEq2Okx1mVvNdYv56G2QZBA=)
3: n5blPzAxj6urB6U69h-1_6oKGxM.roa (hash: wVHabnnbMu4awX0MmEHsebkGh6JiyzOhJKMjTxirSzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:7c:58:96:f9:2e:32:6c:c6:08:7d:4e:dd:03:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=538dd18b1692d8a3e7712d3e6b928b09aa0ae66c
Validity
Not Before: Jul 24 02:00:42 2026 GMT
Not After : Jul 25 02:00:42 2026 GMT
Subject: CN=1a2219d53d331c161e673ffe942a8077a812fc9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1c:33:66:24:7b:2b:45:01:e7:82:47:a6:44:
a3:97:89:2f:bd:92:fb:00:e9:e3:fd:ca:69:d4:64:
60:cf:07:f3:89:07:34:26:4b:89:3d:41:4f:1a:e6:
0c:4b:ae:cf:0b:a6:35:6f:51:3c:3f:24:11:d1:b4:
6e:68:17:2b:f7:90:97:7d:dc:70:86:ed:53:d4:55:
4c:e0:6c:fc:e7:f2:b6:e0:56:cb:7a:4a:d6:95:83:
07:9a:ee:64:68:b6:fc:a7:ea:f9:d6:7f:56:af:37:
03:45:5a:6b:68:c3:f9:c1:1b:24:17:85:90:ea:76:
fc:3f:f9:30:a4:73:c9:fa:48:df:4b:db:36:7d:8f:
86:88:13:62:91:68:41:46:29:c4:95:0f:00:64:3c:
83:cc:67:c6:36:31:75:4e:75:d9:74:c4:82:52:bd:
ec:91:09:56:0a:bb:f9:64:e4:8f:c6:08:b4:39:77:
fd:f3:bc:19:40:28:0d:16:70:5e:92:a7:e3:47:31:
11:03:38:cf:dd:91:09:31:b0:e7:42:3e:65:8d:4f:
19:ae:90:5e:d3:20:9c:7b:13:b6:b4:3f:4a:12:47:
c9:90:01:bb:ff:2d:41:fc:7b:40:4c:08:89:86:63:
dd:c1:65:4c:33:7d:f6:bc:1e:cb:84:a7:54:17:c2:
91:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:19:D5:3D:33:1C:16:1E:67:3F:FE:94:2A:80:77:A8:12:FC:9B
X509v3 Authority Key Identifier:
keyid:53:8D:D1:8B:16:92:D8:A3:E7:71:2D:3E:6B:92:8B:09:AA:0A:E6:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U43RixaS2KPncS0-a5KLCaoK5mw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/9cb0e9-537d-4f6e-b98e-2eb70a3602e9/1/U43RixaS2KPncS0-a5KLCaoK5mw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f4:ff:7f:56:01:c1:af:a0:a5:a1:0b:79:4e:1e:2e:91:8b:
4c:06:c4:80:3f:e8:28:07:82:73:bd:85:cc:bd:0f:35:ee:c9:
38:9d:16:5e:3f:a7:19:fc:3b:28:d6:fb:dc:46:31:ff:40:ac:
be:93:d4:ef:1a:18:02:91:5a:71:ce:28:a6:7e:ab:bc:7c:14:
a9:b5:09:bb:63:23:44:13:b7:97:24:ef:f3:2d:51:49:60:40:
13:ee:ec:87:dd:4f:cc:79:28:84:a4:31:34:ce:73:cc:72:cf:
8a:77:ba:e3:54:16:53:e6:8e:71:63:c6:88:29:1a:30:37:26:
e7:71:92:ce:6d:7d:91:51:ed:31:14:24:09:f8:a2:a7:e4:ef:
29:95:e5:96:d0:99:d5:24:db:a5:84:9b:79:c9:b9:77:d5:25:
11:c9:0b:2e:62:d7:4e:fc:23:b8:b3:bc:a3:dc:ed:60:33:35:
b3:2d:0d:57:f3:35:99:cf:bc:cc:e5:18:14:9c:df:38:4b:4d:
1b:cd:03:41:44:40:82:5b:5a:b7:8b:e3:53:68:e9:56:7e:c8:
c4:d2:78:48:b3:24:0b:84:41:26:a7:d7:e9:a5:6b:db:fe:bc:
48:9e:4e:ff:1b:5f:f3:ea:3b:38:f1:bb:c3:33:1d:81:10:6f:
8c:5f:98:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:16:41 2026 by rpki-client