Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: En5EspDXl1fgc3CQzmR31wCz99JAO5LMzTayWQQTuHU=
Subject key identifier: FE:9E:39:ED:C6:AD:1F:99:65:11:4B:04:3A:5B:B1:0A:4B:01:91:11
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019E1ED9FD5355D9177E59DECEF8F8D1047A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0765
Signing time: Wed 13 May 2026 01:01:02 +0000
Manifest this update: Wed 13 May 2026 01:01:02 +0000
Manifest next update: Thu 14 May 2026 01:01:02 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: x0jloN5WBKnz1ulXgQixDXmn+ejodtWsysOFbWjFWsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:fd:53:55:d9:17:7e:59:de:ce:f8:f8:d1:04:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: May 13 01:01:02 2026 GMT
Not After : May 14 01:01:02 2026 GMT
Subject: CN=fe9e39edc6ad1f9965114b043a5bb10a4b019111
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:36:2e:bc:44:36:04:a3:fc:d1:df:9b:0d:a5:
f0:d6:dc:49:1d:56:ab:c7:d3:e1:c4:b8:17:e3:db:
8a:7b:c3:e3:58:82:8c:6b:26:fa:da:67:24:a5:94:
47:12:a3:f9:2a:3d:e3:2f:e6:88:cf:73:ca:9b:fc:
6d:ce:7e:d9:13:a2:ba:fa:03:e4:e4:44:11:a1:cc:
f0:41:2b:a0:59:48:be:d7:00:a2:29:2f:08:b4:05:
4b:17:8f:38:ab:11:51:bc:79:c1:89:ac:e6:e4:25:
4c:6e:43:73:1e:b4:79:3e:fd:09:c5:64:c4:d4:39:
aa:bf:9e:5f:66:de:20:5e:eb:47:6e:14:5a:df:97:
85:ab:a2:17:de:04:70:21:54:ce:0b:b0:e0:06:52:
cd:4d:0a:56:20:03:11:86:55:d8:19:d5:bc:68:1f:
15:ec:6e:49:b8:ec:d4:28:76:99:5d:b6:de:5a:c0:
38:c3:ef:39:8e:74:93:c9:34:2a:c9:30:90:e5:da:
e7:da:a0:df:f1:70:b7:40:91:01:76:15:1d:a7:d8:
3d:6f:00:cf:7c:2d:65:7d:09:1f:d5:ad:78:21:b3:
3a:69:d9:85:92:ae:2c:68:d4:10:25:62:97:21:06:
66:b2:2c:06:d0:3c:46:f5:1d:2f:b6:5a:fc:9e:41:
6a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9E:39:ED:C6:AD:1F:99:65:11:4B:04:3A:5B:B1:0A:4B:01:91:11
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:75:43:77:40:fc:42:06:01:5e:ed:48:09:2b:3f:7e:f2:3c:
94:fc:ea:68:8e:fe:76:e1:87:62:18:e4:5a:e4:28:46:52:e4:
12:b5:75:c4:4e:e8:5b:04:56:ab:72:24:ed:51:d8:2d:77:5a:
79:7b:bd:d0:a9:24:1d:1e:9c:ab:22:cf:2c:74:23:65:58:3d:
0f:7e:c4:a5:ef:0a:e3:9f:be:4c:c3:06:27:71:e1:89:4b:20:
18:6b:ce:db:db:2e:55:59:2e:17:8c:26:cb:13:5d:58:b5:7c:
be:ce:5e:a8:b2:db:57:6e:df:35:7b:16:64:04:a6:44:39:e3:
73:63:3b:67:66:97:16:dd:ec:35:3d:28:02:d2:5a:f2:51:29:
d1:2f:c6:99:ca:9c:42:00:45:c8:c4:6d:f0:00:c8:5c:ab:e0:
a0:fd:64:d8:72:a5:e2:d6:2a:90:a1:61:56:a3:a6:8e:3b:f2:
8b:71:bd:99:74:48:fa:04:5c:bf:22:0f:61:84:1c:2c:a9:5e:
0d:df:f4:e7:43:12:71:26:cc:98:03:33:94:f0:83:ce:d7:dd:
be:4e:14:85:fb:26:3a:e0:c4:62:89:0c:8a:f2:f2:35:74:27:
e4:83:81:c8:6c:f6:60:1b:8a:55:b4:18:f5:29:23:d7:b0:27:
9a:e4:05:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:19 2026 by rpki-client