Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
File: UYje2s3CQLSy94bxI0LgqD2K6A8.mft (raw, json)
Hash identifier: img6NhATwjtyExBlGeivFcJK/ze2SCtUw0+goJ3TpoI=
Subject key identifier: 13:CA:0A:05:09:AC:DC:06:DA:76:2D:9C:79:A6:45:53:93:E7:DB:EA
Authority key identifier: 51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
Certificate issuer: /CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Certificate serial: 019F946E17D2CE2CF30EF18EF9EA326E18D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 14:01:10 +0000
Manifest this update: Fri 24 Jul 2026 14:01:10 +0000
Manifest next update: Sat 25 Jul 2026 14:01:10 +0000
Files and hashes: 1: UYje2s3CQLSy94bxI0LgqD2K6A8.crl (hash: T/RD4LD2HMj57Pf8SEAxFkMRcN2BjwhfPTyfpTfCy7E=)
2: c9MRmnhU7G5UbCBGEHdpLFzsaXY.roa (hash: lmKAJaGimhpXG3IgAt2SCEHhEUBaeY2YUPKf/h17Txk=)
3: y1DTp2rwk07pO-FFEpxBdt4lOAI.roa (hash: RyVjgq9r229KujgssDD8ON6aKi9KzAQn4Dy7pqoxpgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:6e:17:d2:ce:2c:f3:0e:f1:8e:f9:ea:32:6e:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5188dedacdc240b4b2f786f12342e0a83d8ae80f
Validity
Not Before: Jul 24 14:01:10 2026 GMT
Not After : Jul 25 14:01:10 2026 GMT
Subject: CN=13ca0a0509acdc06da762d9c79a6455393e7dbea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:00:8f:0e:af:d2:9e:5a:b4:aa:4c:1f:81:80:
4c:d2:69:33:f6:83:f0:c4:f1:69:b1:05:81:05:9e:
f7:36:cb:9e:a6:c8:3a:1d:e1:55:d1:af:95:93:43:
29:37:86:ca:e0:a6:95:e0:0e:73:f3:21:ee:75:17:
6e:d4:7c:a6:6a:c0:4f:64:ee:ae:00:df:44:98:0b:
bc:15:b9:32:58:0c:ab:4c:d4:b8:a4:a9:a8:e3:88:
7a:77:ec:2a:29:3c:fa:83:e3:e9:eb:76:ee:30:74:
e6:71:0f:a8:fd:37:0f:20:11:ca:5d:da:52:89:b7:
87:9e:de:15:9e:a2:e8:69:88:60:06:66:41:ba:5c:
84:48:e8:a9:a7:7a:b1:f6:57:c9:86:8b:84:30:37:
be:c5:8b:92:d4:c1:6e:fb:ae:34:9c:b7:3b:0c:33:
40:a8:f1:79:0a:9d:7a:a8:b9:ff:1d:7d:c5:b3:b1:
58:f1:54:0d:32:3a:5e:2f:2a:4d:ea:cb:66:e8:f5:
85:c0:ef:bf:c3:37:26:4e:95:94:4a:7a:d3:c4:ce:
77:c1:a4:b7:40:97:c7:66:3e:c9:4e:19:90:47:0a:
ee:73:d0:e3:20:ea:f1:86:66:94:6d:dc:41:89:61:
ec:18:b9:de:0b:0f:1c:12:ae:e3:21:65:7b:9d:08:
cd:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:CA:0A:05:09:AC:DC:06:DA:76:2D:9C:79:A6:45:53:93:E7:DB:EA
X509v3 Authority Key Identifier:
keyid:51:88:DE:DA:CD:C2:40:B4:B2:F7:86:F1:23:42:E0:A8:3D:8A:E8:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UYje2s3CQLSy94bxI0LgqD2K6A8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/1faa3e-884c-445f-845d-79b3db659dfc/1/UYje2s3CQLSy94bxI0LgqD2K6A8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:56:dc:93:42:c3:81:75:24:65:d0:c9:41:66:d5:c8:4c:8c:
fd:87:cf:a6:90:5a:ad:b0:ad:3e:1e:28:37:5f:aa:21:24:a5:
a2:63:dc:ba:04:9f:55:74:e2:2a:cc:69:75:ba:0c:aa:79:88:
d1:4d:b4:30:f5:70:f4:09:4c:b8:cc:cf:81:ab:24:d4:9e:7d:
7b:96:3f:dc:45:af:bd:d5:bb:82:01:5a:34:e7:02:9a:6f:31:
cb:f9:56:78:b3:48:a9:6d:bc:25:19:f2:97:23:a5:ca:e9:7e:
49:dd:e3:eb:aa:21:4b:61:e9:b3:08:99:ec:ab:71:49:18:02:
b9:1d:82:5c:f7:c0:b1:9a:ec:a4:c4:9b:8b:a3:79:4f:db:48:
d9:74:23:d5:84:c3:f5:49:ba:04:d2:ec:e2:58:4f:b6:72:d5:
37:64:b4:f0:7c:bc:de:dd:60:71:67:0d:da:bc:1a:5a:2d:c8:
5a:d3:3f:a7:2e:ba:3e:21:af:8c:bd:15:74:14:f0:1e:f6:41:
dd:3c:a5:00:80:0d:8d:91:aa:24:52:0c:05:e3:55:2c:71:4d:
cc:5a:b7:29:c4:b6:38:26:91:8c:c2:c8:5b:81:e5:73:ef:43:
98:8f:8d:43:11:98:ad:d9:2f:b4:d3:5d:74:00:68:e9:61:71:
13:78:b3:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:48:20 2026 by rpki-client