Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: o2UP5p0gAJoFWjOXON1It29K6/US4I8qPjrMvcNKP4w=
Subject key identifier: 0F:B5:30:EC:14:C7:43:12:D6:1A:9F:CC:7C:25:77:F6:0D:E1:FD:25
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 019F9624E81EC44A4969FD6738988BAD3943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 19CB
Signing time: Fri 24 Jul 2026 22:00:28 +0000
Manifest this update: Fri 24 Jul 2026 22:00:28 +0000
Manifest next update: Sat 25 Jul 2026 22:00:28 +0000
Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: nn0BPJDd1oeGDnmYBRDw6pV2eQRKxaNl+Fv5UliYI/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:24:e8:1e:c4:4a:49:69:fd:67:38:98:8b:ad:39:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Jul 24 22:00:28 2026 GMT
Not After : Jul 25 22:00:28 2026 GMT
Subject: CN=0fb530ec14c74312d61a9fcc7c2577f60de1fd25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:56:11:7c:9a:cc:c3:86:40:cd:ef:63:5f:a4:
f0:d6:bf:38:75:96:f7:cf:d2:27:8b:c5:ef:cf:51:
79:8c:f8:3f:81:4c:b3:10:bb:6c:b1:73:bd:8a:a7:
9a:5c:b9:ad:bc:30:d8:cf:be:b2:31:fe:cb:6f:7b:
90:66:dd:6b:7d:3a:2d:d6:58:ad:ca:f2:be:2d:85:
b3:f2:e7:62:dc:8f:b4:c5:5c:75:0b:cf:0d:ff:dd:
0a:38:bf:e7:d3:fd:19:3b:07:e6:64:2e:ce:a7:b1:
fd:56:2a:c0:9d:8d:91:fd:97:b4:b0:de:4e:74:9c:
ab:37:9f:3b:e4:73:aa:8e:39:84:79:0f:24:5b:dd:
f8:a4:0f:84:5d:70:54:b0:c0:c7:6c:9a:b2:7a:41:
6b:71:f4:ae:65:ea:ed:c1:30:b2:0c:c9:0a:6f:16:
94:eb:14:3c:39:30:70:a1:73:92:67:8a:76:c6:41:
db:3b:5a:40:75:dd:05:6c:44:cd:02:04:de:08:67:
b6:83:2e:79:2d:1e:cf:e3:d5:a6:b0:bc:08:8f:f4:
84:52:ce:34:bf:4d:71:44:21:61:76:2e:bc:0c:7f:
1c:a4:e3:3b:1f:24:92:f0:30:31:49:a3:2e:c8:3c:
a3:9c:db:14:ca:65:dc:90:25:e5:63:f6:9c:84:5c:
0f:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B5:30:EC:14:C7:43:12:D6:1A:9F:CC:7C:25:77:F6:0D:E1:FD:25
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:20:df:1c:e9:1f:a2:3a:fc:11:f3:cc:55:64:5e:ae:2b:62:
c4:72:cc:bc:b6:c7:4d:2f:92:d3:06:b8:f6:01:4b:70:bf:e5:
2e:72:1b:1c:41:ca:bc:61:66:15:87:b8:cd:62:cf:66:0d:2a:
31:ae:0c:9c:ee:71:29:a1:c8:aa:ab:28:6e:12:38:ef:25:84:
69:86:db:ca:3c:e5:e4:3c:6a:ba:6b:8f:0d:a7:6e:51:c5:1d:
1e:9f:d2:2e:cd:c3:b3:93:21:d4:c6:e8:71:49:cd:12:bc:c9:
bc:50:28:65:9b:a1:58:31:1a:9b:7c:da:aa:ac:3a:dc:4c:3c:
dc:a8:33:fb:b0:3a:f0:3a:9c:21:86:6f:e6:f6:98:26:46:ca:
02:4b:e5:c8:1f:c9:42:b8:af:32:c5:3b:5c:ca:a7:5d:88:3e:
0f:40:1a:8d:e2:0a:8b:87:ee:6d:da:ee:9a:ee:9d:24:e1:e5:
15:e7:9f:fc:39:b1:ed:d9:16:72:13:cf:91:63:11:2a:c8:1b:
61:46:34:33:f4:88:8c:46:a6:b6:01:87:36:90:4d:7d:16:ef:
0b:75:b9:03:e6:10:40:d9:d3:df:f8:f2:d3:2e:ad:b1:3d:14:
87:c4:cc:d7:dd:05:e5:c0:07:2d:de:e6:b7:02:4f:21:02:5e:
c8:8e:b0:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:47:47 2026 by rpki-client