
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File: UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier: vQ3nx2QdfM8lwcWDgp8i3ALKjICM6fmAvJmoFnQz928=
Subject key identifier: 8A:6C:BD:13:B2:49:91:BD:DA:46:BF:2B:7E:E0:18:FD:65:E7:F8:29
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer: /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial: 019F93240B02B31D9FE60176BA94A9962A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number: 010D
Signing time: Fri 24 Jul 2026 08:00:40 +0000
Manifest this update: Fri 24 Jul 2026 08:00:40 +0000
Manifest next update: Sat 25 Jul 2026 08:00:40 +0000
Files and hashes: 1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: UYpb8YUP9/oS+DFTQH2+IHfN6OPnvoHJ3MIrSIULgVk=)
2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:0b:02:b3:1d:9f:e6:01:76:ba:94:a9:96:2a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
Validity
Not Before: Jul 24 08:00:40 2026 GMT
Not After : Jul 25 08:00:40 2026 GMT
Subject: CN=8a6cbd13b24991bdda46bf2b7ee018fd65e7f829
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2b:2b:3b:ca:ca:3f:8e:92:78:64:17:24:e9:
8e:d2:d0:05:77:58:e6:28:97:ed:49:18:76:9f:9b:
85:d2:17:95:19:9b:da:e7:ed:e5:83:19:ab:f8:40:
ed:a8:f7:d0:d5:c4:1a:f6:f8:8d:cc:fb:7f:29:84:
20:60:39:24:01:fa:e4:ba:c8:6b:14:1b:a9:05:37:
4a:27:d1:1f:fd:82:53:02:c9:44:da:87:9a:e8:b6:
df:32:08:ad:9e:cc:f9:f1:1d:bc:18:5f:6c:44:e8:
8d:e9:f0:87:f4:3a:c4:aa:f8:b2:5b:f8:8f:2a:d5:
5e:78:e5:9c:b9:da:32:78:19:8b:6c:51:4b:aa:81:
85:63:df:aa:c4:df:ec:d4:3f:49:0a:69:3d:cb:d9:
25:d0:e6:48:dc:0f:f0:0d:57:db:86:75:9a:9e:ac:
04:56:15:ca:97:47:3c:3a:26:c7:80:56:f5:35:54:
9f:8f:55:c6:0f:b1:14:ba:72:d3:5c:08:52:9e:33:
11:d3:17:36:9e:c0:58:3a:4a:b2:c2:81:c2:de:79:
88:1d:c3:68:cb:81:a1:a2:e2:06:58:98:23:1e:b2:
fe:0c:2c:d0:10:03:1e:bd:fd:c4:ef:fa:7e:e5:5b:
05:02:47:4f:8c:4f:19:27:72:bc:7c:78:b6:c2:2c:
28:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:6C:BD:13:B2:49:91:BD:DA:46:BF:2B:7E:E0:18:FD:65:E7:F8:29
X509v3 Authority Key Identifier:
keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:d5:13:d4:c0:71:17:32:e4:ad:81:14:a7:6e:ab:15:3e:b4:
8b:90:58:7d:dc:77:e7:2b:d0:ce:8f:b5:2f:0f:a1:3c:86:bc:
c5:30:19:60:22:a1:86:f4:97:c9:ca:9b:b1:19:b1:e6:64:95:
3e:32:d5:42:f4:5d:dc:a9:b3:a6:cb:40:e9:52:a9:3f:df:e5:
93:cd:dd:da:21:18:f2:c6:aa:ec:fa:d9:cd:75:5c:15:c6:8b:
7c:87:93:70:11:d7:b9:96:4b:02:da:c6:58:03:fe:41:ad:73:
29:82:3e:b7:d6:f7:8c:58:47:6c:65:41:99:8e:c7:66:2c:a3:
64:1b:45:51:85:ae:80:60:8b:65:1c:e0:11:6c:fd:ff:a5:4a:
26:2c:11:77:5d:80:93:bb:6e:db:31:a1:2f:ad:02:b2:65:a5:
15:69:95:8a:5e:61:93:cc:34:7d:3d:4b:c9:70:2b:75:b2:16:
0b:ce:e7:95:bc:8e:f5:3d:bc:c5:7f:b8:f5:9e:ec:42:c5:e0:
27:c1:6f:1c:8a:ee:91:f0:ce:63:f5:c0:24:e1:3b:a0:00:94:
05:56:c8:79:8a:ff:51:c0:c5:06:66:46:61:30:45:57:99:94:
4b:82:58:1e:5a:0b:21:fd:98:76:86:e6:a5:76:53:b5:30:cf:
db:cf:1c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 15:36:32 2026 by rpki-client