Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: bUb8aqFxvGSurpjeND/EZjKIjlVkqetsEFjJ0CpSIXE=
Subject key identifier: 2D:4B:36:C9:E9:5A:05:CB:93:B3:2A:45:87:A5:71:6B:5E:50:CF:82
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019F93FFFC6EBEB553FC26E883A9462F7AFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 19D3
Signing time: Fri 24 Jul 2026 12:00:54 +0000
Manifest this update: Fri 24 Jul 2026 12:00:54 +0000
Manifest next update: Sat 25 Jul 2026 12:00:54 +0000
Files and hashes: 1: HCkTO8KxnQW5z_1GFAOAHjIGab8.roa (hash: XoAXikNwV8c/+4uyw3oTAAVmB0UR0KOtZ+V3aJEPK8c=)
2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: HwHfHyc0U3gXeYe6lgIOKmaWzji/hycbHkbeC8Llh6Y=)
3: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:fc:6e:be:b5:53:fc:26:e8:83:a9:46:2f:7a:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jul 24 12:00:54 2026 GMT
Not After : Jul 25 12:00:54 2026 GMT
Subject: CN=2d4b36c9e95a05cb93b32a4587a5716b5e50cf82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:09:a6:b3:7a:d5:2c:62:a6:8e:d6:18:a6:
02:50:0e:6f:68:39:2e:f7:3a:d0:1f:4f:f7:6f:6a:
d2:57:7f:18:01:3a:43:a6:9f:08:35:4c:10:a4:d5:
53:86:0c:e3:e5:c0:81:f4:68:76:30:ef:c6:78:71:
e0:d8:22:94:94:66:f8:dd:04:ef:e0:f3:5d:5e:c8:
81:1c:38:8b:54:1e:bc:5d:7b:3b:3e:47:61:87:f9:
9b:25:a0:61:85:62:6e:59:b9:8b:de:c6:7d:60:6f:
35:6f:3c:ca:aa:e6:7c:40:ce:21:c0:39:30:53:23:
e2:e4:6f:4b:9f:1e:0b:6b:89:bd:a9:bd:92:73:b0:
1a:43:aa:52:fa:db:7b:ed:95:ca:a2:25:07:54:62:
d0:b9:08:59:91:41:c3:4e:bf:8a:41:ef:7c:6c:1a:
d6:29:2d:97:84:87:69:8f:8c:7e:8e:06:15:38:fa:
8f:64:bd:b6:bc:75:51:97:e0:fe:e8:9d:cb:f7:33:
7b:8d:be:d5:34:c9:4d:54:6a:99:7b:cf:c6:99:35:
bc:02:1f:50:7e:14:64:96:59:c8:36:f4:41:f2:dc:
22:55:24:e6:7f:3e:71:8d:e0:8e:32:09:c4:2a:3c:
bf:3a:34:60:73:96:e2:ad:5d:68:84:6b:eb:24:23:
57:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4B:36:C9:E9:5A:05:CB:93:B3:2A:45:87:A5:71:6B:5E:50:CF:82
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7f:e7:c3:92:ac:8f:34:40:ab:8f:78:71:ab:3f:33:10:d8:
6f:0f:d3:39:89:7b:fa:7a:03:bb:53:c9:2c:f7:51:9b:e7:fe:
4e:2c:65:27:6d:ed:e0:7f:6c:6b:26:cc:bc:2c:0f:c4:6f:29:
cb:90:dc:ae:07:b6:fa:eb:6e:cd:4b:fb:83:7b:a7:6b:44:83:
b0:4b:0d:84:db:4e:34:a6:60:32:37:9a:4b:f7:01:ac:d9:3e:
a3:da:05:a5:15:c3:51:46:27:ef:f5:38:8f:ec:b1:af:48:57:
1f:3a:25:69:78:8c:0d:23:3a:9d:6a:e5:d3:0d:fe:c0:1d:f2:
c5:6d:d4:56:a4:f9:ae:bc:97:07:b9:27:e3:f7:d9:c8:ae:70:
9a:8e:fb:16:7e:1f:4e:3e:f3:75:ea:25:49:3a:e7:a4:b0:01:
09:00:20:78:4f:7f:28:d7:05:a8:38:ec:59:78:34:32:26:ad:
9f:10:81:96:85:5b:1e:d1:b7:4f:5a:08:3b:9f:17:80:7e:83:
41:76:ac:aa:c2:59:cc:25:97:9b:19:d9:c7:97:80:f9:be:f6:
40:bd:e9:d7:dd:f9:2d:31:3b:43:62:af:c8:f9:d2:09:39:82:
e9:a5:a3:b8:c6:8f:72:6e:e7:18:f1:76:a4:24:93:6e:fa:34:
a2:37:fe:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+T//xuvrVT/Cbog6lGL3r9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMzBiNjVkNjExNmQ0YjYwZDM2ZmRmN2I2YzZkNWU1Yjk1
NDYzOWUwHhcNMjYwNzI0MTIwMDU0WhcNMjYwNzI1MTIwMDU0WjAzMTEwLwYDVQQD
EygyZDRiMzZjOWU5NWEwNWNiOTNiMzJhNDU4N2E1NzE2YjVlNTBjZjgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1AJprN61Sxipo7WGKYCUA5vaDku
9zrQH0/3b2rSV38YATpDpp8INUwQpNVThgzj5cCB9Gh2MO/GeHHg2CKUlGb43QTv
4PNdXsiBHDiLVB68XXs7Pkdhh/mbJaBhhWJuWbmL3sZ9YG81bzzKquZ8QM4hwDkw
UyPi5G9Lnx4La4m9qb2Sc7AaQ6pS+tt77ZXKoiUHVGLQuQhZkUHDTr+KQe98bBrW
KS2XhIdpj4x+jgYVOPqPZL22vHVRl+D+6J3L9zN7jb7VNMlNVGqZe8/GmTW8Ah9Q
fhRkllnINvRB8twiVSTmfz5xjeCOMgnEKjy/OjRgc5birV1ohGvrJCNXQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC1LNsnpWgXLk7MqRYelcWteUM+CMB8GA1UdIwQY
MBaAFFIwtl1hFtS2DTb997bG1eW5VGOeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjIt
MTM1OGMyYjVkNTQxLzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9mYWRmZjYtNWNjMC00Njk0LTljNjItMTM1OGMyYjVkNTQx
LzEvVWpDMlhXRVcxTFlOTnYzM3RzYlY1YmxVWTU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASX/nw5Ks
jzRAq494cas/MxDYbw/TOYl7+noDu1PJLPdRm+f+TixlJ23t4H9saybMvCwPxG8p
y5Dcrge2+utuzUv7g3una0SDsEsNhNtONKZgMjeaS/cBrNk+o9oFpRXDUUYn7/U4
j+yxr0hXHzolaXiMDSM6nWrl0w3+wB3yxW3UVqT5rryXB7kn4/fZyK5wmo77Fn4f
Tj7zdeolSTrnpLABCQAgeE9/KNcFqDjsWXg0MiatnxCBloVbHtG3T1oIO58XgH6D
QXasqsJZzCWXmxnZx5eA+b72QL3p1935LTE7Q2KvyPnSCTmC6aWjuMaPcm7nGPF2
pCSTbvo0ojf+jw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:56:59 2026 by rpki-client