Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: 2bRZbCI0vcLKp53KtDNMMFp9fLr04vyAAHw0QiyS0TI=
Subject key identifier: 12:54:62:2B:A9:42:A7:98:07:C3:11:DB:45:C7:5C:DF:C5:BA:3D:0A
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 019F8EA2EA65C70ED8E39B18A252EDBB0E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 19C3
Signing time: Thu 23 Jul 2026 11:01:09 +0000
Manifest this update: Thu 23 Jul 2026 11:01:09 +0000
Manifest next update: Fri 24 Jul 2026 11:01:09 +0000
Files and hashes: 1: AeJ2zlCCxAGqIGZJMGxpfScT4aY.asa (hash: vV3sJH5TnYIMyxRcZZhNX1B1hLvxAZFKHPAv1rfCpfU=)
2: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: ze99Wzc7NNp/0QzcW333laF0yaMuhrAvcWp49tNZXz0=)
3: hxaq6eiJQ6KIeDkuFuKpk9DlMmM.roa (hash: xzNRvq9UxlokWK6wW9763CTDxuLBGl6gUz0jxPwvuI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:ea:65:c7:0e:d8:e3:9b:18:a2:52:ed:bb:0e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Jul 23 11:01:09 2026 GMT
Not After : Jul 24 11:01:09 2026 GMT
Subject: CN=1254622ba942a79807c311db45c75cdfc5ba3d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ca:42:de:91:cf:29:27:54:b0:85:4e:4c:f7:
c4:f4:d6:3e:af:3d:21:72:02:31:10:24:6a:48:8f:
e0:03:70:c0:8e:6a:83:b9:a0:88:a5:e9:cf:f5:ad:
58:39:e1:be:35:a1:b3:df:22:a5:e1:2c:30:7a:d3:
f0:2d:39:e7:4d:ca:3e:31:38:87:e8:61:80:61:5b:
35:85:30:6c:75:c5:f7:3d:d6:bd:4b:f9:13:d1:d5:
42:71:cf:50:fc:2f:87:3b:73:4a:7c:0c:2d:ac:1b:
63:b6:45:dd:52:77:a2:d0:42:03:de:c9:63:f9:df:
11:89:9c:ea:4e:4a:8a:93:06:12:e8:f8:b7:17:8b:
30:41:c1:d8:ab:27:a5:80:69:8a:be:f5:e1:ba:7f:
ae:0a:64:8b:c4:18:5a:96:d8:1a:b3:a6:38:17:53:
39:3e:12:07:9b:09:f7:16:42:99:49:61:c3:04:9c:
a2:be:a0:cb:c9:b9:0e:21:20:6d:28:fc:e3:f9:81:
15:15:4f:f6:28:ce:b0:85:ba:06:fc:39:be:4f:14:
3f:f7:e2:d3:31:74:66:f6:e9:af:77:b2:f1:fa:56:
29:09:f5:3e:2b:78:b2:20:0a:41:07:7d:52:3e:5e:
41:b5:11:1a:b0:75:e7:69:83:7e:1b:8b:47:a3:dd:
bf:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:54:62:2B:A9:42:A7:98:07:C3:11:DB:45:C7:5C:DF:C5:BA:3D:0A
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:7b:71:d6:cc:75:91:0b:c1:4f:d3:d6:76:e9:c5:d5:0a:2b:
a7:60:20:4e:d0:89:df:11:8c:7f:d6:79:52:e6:f6:14:41:b9:
91:02:c6:d1:ae:52:2b:9e:88:37:0b:b4:93:bc:89:30:be:bd:
e0:71:e6:9b:00:d9:56:5f:4a:c9:60:f2:89:f5:fa:6d:39:40:
85:d1:b1:7d:a2:9b:f2:01:58:7d:26:0d:ab:a8:e8:79:8f:c1:
1f:b1:62:be:84:ce:69:0d:9a:69:37:d8:d4:40:8d:69:d2:ac:
5a:0e:1b:67:23:4c:95:33:a0:c1:e8:61:d1:d2:d5:c3:0b:03:
26:6a:b6:bf:a6:22:41:b4:bc:7a:36:61:e5:a5:fe:a2:ff:d3:
10:3b:5f:71:e2:af:7d:82:d1:cb:83:b7:81:8b:ae:e4:87:02:
9b:68:c4:7b:ee:76:28:7d:de:a4:45:46:00:b6:f8:53:83:34:
f4:4b:81:7c:84:17:e7:1a:9d:bf:40:33:eb:77:60:b5:8f:59:
24:22:7f:89:b2:4f:ee:60:3b:02:28:09:44:13:b0:fb:bf:61:
7f:9a:82:c0:44:3d:1c:38:99:9f:57:0d:b2:ac:47:43:ad:b4:
8c:d5:70:06:f2:0f:4e:24:e7:5b:67:9a:6f:78:db:f2:c4:44:
9a:9e:ae:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:02:55 2026 by rpki-client