Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: KiCIRDNBlU+jGTdDwp4im0qFEJCIUGloINkiC6mi0EA=
Subject key identifier: 2E:49:0A:5E:7D:CE:32:14:DD:F7:1B:78:DD:46:FA:03:5E:E9:F3:93
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019F93927D622EC9784F3BBCAF8106086A25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 19DD
Signing time: Fri 24 Jul 2026 10:01:18 +0000
Manifest this update: Fri 24 Jul 2026 10:01:18 +0000
Manifest next update: Sat 25 Jul 2026 10:01:18 +0000
Files and hashes: 1: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: L4gXkAL7VRHX3RoZmNC2jh2VlboxfU7dcY5AVz59V7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:7d:62:2e:c9:78:4f:3b:bc:af:81:06:08:6a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Jul 24 10:01:18 2026 GMT
Not After : Jul 25 10:01:18 2026 GMT
Subject: CN=2e490a5e7dce3214ddf71b78dd46fa035ee9f393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ab:9b:4a:3b:45:7d:55:9e:2f:bf:2a:b3:b2:
27:a6:21:a6:a6:20:07:47:8a:91:89:b5:ec:7d:c4:
8d:57:3d:2a:f5:62:b0:5d:33:5a:0a:e4:08:af:df:
d8:45:e9:31:11:1a:21:03:4d:87:cd:e2:0a:9c:d2:
21:46:66:91:57:98:2d:8f:43:a4:e8:20:23:35:28:
e0:06:02:68:50:c8:79:7e:4a:86:1a:9b:df:50:25:
6a:93:77:7d:6f:57:b8:31:93:75:17:f6:f4:84:13:
b2:26:5e:55:5b:ec:e3:77:9d:cd:9e:e3:99:52:42:
50:2e:45:db:92:88:92:44:4a:94:24:fa:16:28:45:
fe:43:bd:1c:c5:13:bf:ac:06:3e:37:2f:52:64:38:
42:3a:ab:a7:c5:67:5f:f3:dc:f5:98:89:e8:8f:1b:
ee:68:0f:34:1e:27:e5:1c:c6:33:e9:04:91:bd:cb:
b0:da:0b:d2:cc:8b:0c:59:77:4b:28:26:7e:ae:db:
25:43:42:d1:59:b9:c3:d0:b9:cd:2c:d4:04:37:95:
d0:54:e4:df:4c:7e:c6:35:07:d8:d6:ca:22:dd:fb:
03:58:1b:da:64:c6:e8:83:1f:38:50:5d:df:47:6f:
93:35:74:32:1e:da:51:a4:ce:b6:be:7d:8d:e6:af:
ac:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:49:0A:5E:7D:CE:32:14:DD:F7:1B:78:DD:46:FA:03:5E:E9:F3:93
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e2:a9:60:c6:83:31:40:bf:6d:80:33:a3:ba:6f:10:eb:3b:4b:
dc:20:f3:9c:b9:a7:54:c5:98:98:c2:97:e1:6b:66:c7:c0:e1:
46:bd:7f:45:ca:dc:d5:0d:5f:37:ac:d2:d8:4e:f4:0a:ce:01:
13:ef:bb:a0:71:dc:e8:08:55:66:91:bd:b6:00:28:c8:29:ac:
83:11:a6:97:24:05:bc:5f:12:00:a2:d9:0e:c9:41:69:68:97:
8a:6b:80:db:b8:ad:4e:98:d7:4b:a6:7b:10:4c:48:67:ab:25:
7b:41:fc:df:ad:07:43:cf:c9:89:7e:57:a8:34:06:e6:18:6b:
93:06:fd:f3:be:ba:38:2a:7c:92:35:f2:df:ad:34:54:3e:26:
68:c5:6d:e5:9d:3a:ab:5c:5f:cb:38:2e:a9:fa:0c:65:0b:d1:
cf:0a:41:65:05:ac:e8:cd:5d:17:17:e4:6d:26:fc:6b:dd:a0:
58:0d:fb:f3:f3:fb:39:d1:68:77:92:1f:2b:6e:24:c9:4f:b3:
10:60:79:c7:ee:e0:8e:7d:da:0b:d6:4f:5c:23:a4:30:46:fa:
ae:8a:b1:c0:a8:a9:06:94:54:8d:42:cc:f5:70:47:75:d7:c8:
50:77:0c:d4:a5:e3:f9:22:81:e5:3b:94:e5:d3:7c:67:70:ff:
26:f8:98:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:36:56 2026 by rpki-client