Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
File: U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft (raw, json)
Hash identifier: N0RJGsB+4UnQeVgql4i7UF/XdumwL/WvCjLXm3CsvJk=
Subject key identifier: D4:76:BC:5C:9F:0A:AA:91:E0:05:7F:5A:8C:9E:E2:8E:72:8D:AF:6E
Authority key identifier: 53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
Certificate issuer: /CN=535761913f575c411c992322ebb06cd2f37f02a2
Certificate serial: 019F9323AD2277E5CE33C0B38814D0A6B5D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 08:00:16 +0000
Manifest this update: Fri 24 Jul 2026 08:00:16 +0000
Manifest next update: Sat 25 Jul 2026 08:00:16 +0000
Files and hashes: 1: HiUqKu1CLOYfZbl3wCDGIXPaQ18.roa (hash: jutim/UTVgLR2CiOBLYd1qnaODFkPt/SBYjCIEf8wS8=)
2: U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl (hash: wNusU4OHTB4GO0lyjBLgSceoBeSWNi4HDfuAhp43ZLY=)
3: aQCGqbkR7pZwAY5aB2nDuU5di8E.roa (hash: 6xFhZTjV0UNGd+XOChz+C1HRl/SOHjV9aweW1aP17pY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:ad:22:77:e5:ce:33:c0:b3:88:14:d0:a6:b5:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535761913f575c411c992322ebb06cd2f37f02a2
Validity
Not Before: Jul 24 08:00:16 2026 GMT
Not After : Jul 25 08:00:16 2026 GMT
Subject: CN=d476bc5c9f0aaa91e0057f5a8c9ee28e728daf6e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d6:9f:c8:45:32:f7:0c:8f:1c:0e:ff:e6:f0:
3d:dc:fa:a3:d1:d6:9a:10:32:68:8f:31:77:be:f6:
4b:f9:d3:76:65:f2:ca:3f:7e:c8:38:ba:0c:ac:99:
c6:d4:2e:69:75:30:fb:90:de:76:2e:c5:f3:6a:d8:
c8:17:19:30:c3:ba:d9:7c:47:07:d6:2b:42:ba:69:
35:bd:e5:ff:95:66:12:e0:91:9d:01:80:70:40:ac:
66:f8:e6:02:c3:a5:aa:72:18:ff:61:5a:b0:72:cf:
b0:f5:8c:da:ec:e0:e2:9d:91:58:fb:3d:25:c6:da:
6f:d3:01:1a:da:6a:d8:4b:66:eb:d3:ee:41:66:6d:
ef:4a:55:59:f5:8e:4e:57:47:65:d8:da:e4:e9:27:
03:a4:bf:db:bf:4a:2f:69:ac:3b:28:e4:0e:64:3d:
00:63:10:c7:94:46:8a:06:07:a1:22:46:7f:9d:6d:
d6:44:ee:36:17:38:ca:ca:26:19:35:38:af:34:14:
d8:d8:12:57:4b:0d:a6:90:73:e2:8f:76:ee:f9:5e:
5a:63:cf:34:c1:75:0c:55:c7:13:a6:e2:6b:cf:b8:
67:9a:6e:fd:1c:ff:85:2e:16:13:19:e6:c9:77:21:
11:60:ec:e5:e6:5c:e0:42:c4:7b:49:cc:d1:be:d3:
5b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:76:BC:5C:9F:0A:AA:91:E0:05:7F:5A:8C:9E:E2:8E:72:8D:AF:6E
X509v3 Authority Key Identifier:
keyid:53:57:61:91:3F:57:5C:41:1C:99:23:22:EB:B0:6C:D2:F3:7F:02:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1dhkT9XXEEcmSMi67Bs0vN_AqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/9f00a9-b60f-4e32-9037-04dfc3663e35/1/U1dhkT9XXEEcmSMi67Bs0vN_AqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:c1:38:00:3b:a7:78:63:e5:26:75:cb:df:39:4c:1b:bc:98:
97:71:cc:12:47:96:49:41:cb:bd:24:f1:9c:71:32:80:dd:2b:
67:c1:79:fe:ed:da:21:fd:67:3c:6d:35:a8:ae:bf:ee:79:99:
dd:12:36:7e:1c:d3:6f:5e:64:68:91:44:bb:b3:05:83:bc:1f:
3d:cb:c3:86:a6:6c:0e:b8:11:6c:bb:c7:bc:d6:2a:a8:23:30:
42:7f:ee:1b:5b:f2:7e:70:46:a6:5b:73:64:82:b0:27:85:eb:
60:d9:11:0b:d6:f1:aa:97:8f:3c:78:ac:11:a9:00:00:da:eb:
c3:60:83:3a:7e:56:7b:c9:7c:97:76:28:12:bb:fd:4b:5e:69:
df:e7:0a:c3:fb:61:2d:7a:95:ce:8a:28:5e:0b:7d:ac:74:4d:
26:f6:51:b0:62:6b:2a:a2:f1:a1:2e:95:08:b0:e6:7f:22:b1:
e9:6a:c9:91:06:da:99:d2:be:18:11:6f:9c:e2:7e:45:a3:e0:
70:22:f3:7e:7e:19:8a:ab:81:c3:59:cc:5e:aa:a2:af:87:7b:
8b:15:13:0f:17:98:47:8d:18:68:7d:a3:b7:34:0e:1f:e5:1d:
0d:93:07:79:c4:60:81:a8:ed:ec:d9:d6:66:47:08:01:bc:a7:
27:2b:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:39:38 2026 by rpki-client