Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: zr6dIbfYBkw0N04AAHuR0bI1lb3/CU6Hudvhub5MHC0=
Subject key identifier: AB:51:78:3F:65:D5:2A:58:53:3C:6B:FE:B7:3B:BC:1C:CF:DE:9B:AA
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019F93244421368E4B5B785BA1650BF16D78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 1228
Signing time: Fri 24 Jul 2026 08:00:55 +0000
Manifest this update: Fri 24 Jul 2026 08:00:55 +0000
Manifest next update: Sat 25 Jul 2026 08:00:55 +0000
Files and hashes: 1: KBKlhWMG0Rouh36bd9hH2_4iw1w.roa (hash: yknxcNHVgc1M1hYYcpZWhF9GZLOrrn9T1pEy+vc2uA0=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: OZVo5ihmgVi9sMFoqryOxOD5ck5VOC7hh/4qyiinAP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:24:44:21:36:8e:4b:5b:78:5b:a1:65:0b:f1:6d:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Jul 24 08:00:55 2026 GMT
Not After : Jul 25 08:00:55 2026 GMT
Subject: CN=ab51783f65d52a58533c6bfeb73bbc1ccfde9baa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:24:6b:ad:a8:35:9c:ce:12:c5:c3:d5:d5:31:
cd:5a:28:62:1f:11:1d:06:93:47:13:12:eb:4b:b8:
e8:58:c8:45:80:b4:9f:38:27:93:43:54:bf:88:09:
c9:59:7b:cf:89:f1:98:7b:b3:dc:0b:27:a4:75:85:
15:fc:17:77:fc:c9:b7:15:70:28:b5:94:ff:e0:04:
b1:ff:10:fa:9c:ab:af:60:7a:6b:d4:bc:3d:c5:43:
f8:43:c0:79:ca:36:5b:4c:b4:ba:3f:77:76:4d:f8:
65:cd:35:98:8a:34:bf:2b:df:ce:9e:7d:75:fa:e2:
58:43:48:af:9b:7c:94:a6:35:5f:35:19:48:d4:c9:
3f:a6:63:22:86:de:a1:75:ca:be:bb:58:e9:dd:c1:
59:56:7c:6d:c8:fc:5f:f6:ef:c2:86:21:a9:62:5b:
00:ec:71:be:7d:a2:97:bc:36:5c:6a:7a:26:b7:85:
fc:d6:2c:47:fd:16:4e:d7:36:c3:48:0c:ae:a7:40:
dc:d6:cd:88:c8:2b:a1:55:6a:b7:56:e9:0d:75:3e:
9b:80:cc:eb:d5:b3:e0:1b:77:23:27:d7:e3:7e:fe:
99:ec:bb:61:c8:7f:45:52:1b:6f:07:c3:7c:96:82:
7e:d0:ff:5a:17:ea:25:19:4f:90:f8:0e:42:ae:dd:
43:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:51:78:3F:65:D5:2A:58:53:3C:6B:FE:B7:3B:BC:1C:CF:DE:9B:AA
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:27:9c:2a:1b:8c:f6:62:63:ed:20:6b:0b:ab:05:a3:44:40:
e9:d3:de:23:1e:44:75:8d:05:63:31:6b:0b:38:ef:48:b9:50:
7a:be:0b:c4:c4:93:b0:4f:91:ef:2e:19:3e:38:8b:98:87:40:
de:45:d8:d2:76:bc:eb:2b:b2:a6:b1:0d:9e:7d:bf:44:c7:25:
db:63:88:fd:76:e9:86:d1:17:39:f5:61:55:27:20:51:2c:45:
0b:3f:16:57:5c:9b:d1:7e:42:52:1c:89:40:31:54:a7:04:cb:
1e:7b:3b:94:e3:a7:25:44:2f:cc:23:91:a8:5a:a4:b0:fd:9a:
90:e6:2f:a6:64:a9:31:5b:96:a9:19:0e:29:3e:b3:25:bb:aa:
7a:96:0d:7d:df:e9:0f:26:f7:68:b1:9f:98:fa:3e:a7:81:dc:
8d:7b:da:8c:75:a2:24:ff:b8:9a:97:d0:86:78:b4:d0:4b:4b:
ac:ab:75:6d:36:ce:59:9a:63:db:75:2f:c0:8f:90:3b:25:b3:
39:4e:25:db:c6:97:c8:c9:a0:95:44:4d:84:bd:f3:de:8d:02:
11:35:be:99:b2:89:b7:56:b0:08:21:b8:c5:c3:94:0f:ee:9f:
33:84:59:0b:82:cf:57:db:fa:8b:00:c8:e0:7b:15:bb:41:d1:
7b:41:da:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:30:58 2026 by rpki-client