Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: IfuQQak5JQDCAfk357EQU5vL+DyH3QZu5XI/llxtS2w=
Subject key identifier: 89:A6:F9:E5:F7:12:B0:DC:F7:ED:7E:BE:9C:30:66:E3:5E:0D:CF:1B
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 019F927F0C74F83724ED9408BA4E108AABEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 05ED
Signing time: Fri 24 Jul 2026 05:00:27 +0000
Manifest this update: Fri 24 Jul 2026 05:00:27 +0000
Manifest next update: Sat 25 Jul 2026 05:00:27 +0000
Files and hashes: 1: 5bBSbPRJU7MitFpRgPerCchom28.roa (hash: QAwUl9Lhrh1n1EXirxYX4rz+UIQVZLyQirDHc9Fe4Ek=)
2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: 7CyNebM6WP/QVtyCelrz4rQn+coK0U7wFBsKGvqS/IA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7f:0c:74:f8:37:24:ed:94:08:ba:4e:10:8a:ab:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Jul 24 05:00:27 2026 GMT
Not After : Jul 25 05:00:27 2026 GMT
Subject: CN=89a6f9e5f712b0dcf7ed7ebe9c3066e35e0dcf1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:68:49:05:d1:c5:5c:ea:df:f4:15:43:dc:9f:
8f:23:97:ff:2d:6a:ca:7b:cc:b4:0b:68:7f:f5:02:
6b:6e:e1:ae:da:47:7d:17:04:7d:9b:75:e0:a2:98:
ce:c0:e8:ba:b1:8b:8b:99:f6:ae:d4:76:6c:6c:0b:
a4:ee:56:1e:67:b3:e8:ec:6c:b6:10:1d:43:31:99:
13:9f:cb:f5:69:26:00:77:62:ab:8f:9a:5d:ca:c0:
12:80:1b:db:f9:f3:e0:83:97:9e:45:83:b6:69:db:
f9:61:cd:4d:fa:79:ce:7e:41:14:30:95:35:b4:36:
86:26:26:fb:d6:75:61:83:a1:8f:3d:45:d1:a3:4e:
77:aa:eb:d2:bc:1d:a4:c3:17:1c:09:cb:17:d6:29:
2a:08:75:c8:0d:59:b8:f9:d0:59:33:5f:eb:5b:79:
b1:52:d2:a0:15:9a:6f:41:6d:9d:65:82:bf:af:a8:
fe:c1:86:4d:ba:8b:96:9f:60:9a:23:c8:d4:6d:3b:
24:df:1b:b9:61:9c:74:1e:33:18:ce:8d:bb:81:3e:
04:b3:2f:30:dc:c4:dd:27:07:0e:9d:a1:63:38:3b:
cb:45:54:5b:86:a7:2b:f3:34:c3:d5:32:8a:ac:d4:
70:0a:83:76:db:a7:fc:96:20:ad:d1:7e:17:84:bf:
91:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A6:F9:E5:F7:12:B0:DC:F7:ED:7E:BE:9C:30:66:E3:5E:0D:CF:1B
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c6:62:72:75:56:c2:61:75:5e:11:e8:40:1b:1d:e6:c0:6e:
ed:f2:2c:9c:60:a7:57:e0:f1:be:3b:75:6b:bc:9a:f5:8e:0f:
9d:18:50:0c:9f:36:b3:b9:b0:a8:c4:3d:79:82:60:98:2f:a0:
98:df:f1:bd:97:af:aa:01:62:a9:1f:74:87:99:5b:d0:de:e4:
74:1e:60:00:15:15:35:88:4b:cd:37:53:2c:64:5f:86:2e:fe:
57:8f:b1:5d:33:b7:47:90:98:07:bd:9c:41:5d:1b:60:32:42:
3d:4c:d6:9e:1a:36:81:69:18:9e:86:44:1d:45:46:3e:51:d1:
6f:2c:f6:8b:9a:9a:1c:a7:b1:7e:4d:3f:fe:f9:0b:d8:a2:4a:
44:28:06:c2:a9:45:23:d5:7c:59:14:96:ec:0a:e1:13:77:f2:
e6:6f:20:21:12:ed:3a:70:80:96:ab:f7:f0:1d:ab:a7:60:15:
1b:cf:e2:6d:43:a1:59:98:f0:1e:b5:53:0c:4c:24:01:d9:a4:
0b:30:84:e0:83:2c:24:45:21:d4:3e:f8:db:e4:2f:50:c1:b0:
c7:94:69:26:9d:9d:f1:1c:6f:60:8f:f6:a9:22:72:3b:2f:65:
9e:94:6a:72:8d:35:16:ab:8a:39:4a:0a:b6:7e:87:20:34:24:
5d:9f:a0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:03 2026 by rpki-client