Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File: ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier: a1fqhb3JgAZYS5qWWnd03UlqH3o/in5vfL9idITJb1E=
Subject key identifier: 3D:E9:EC:42:66:DB:C1:E7:A4:34:8C:9C:87:61:7A:36:F9:02:BE:1A
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 019F92ED5EF538A3A5BFF8807862B8C586A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number: 15D5
Signing time: Fri 24 Jul 2026 07:00:57 +0000
Manifest this update: Fri 24 Jul 2026 07:00:57 +0000
Manifest next update: Sat 25 Jul 2026 07:00:57 +0000
Files and hashes: 1: 189oV8GncXIuUHjeoI_E8INYiQs.roa (hash: 0A49Lxa8+HmOmnCCbU77IrfpJ/mis7ETSIxuX6hEu0Q=)
2: T_XFNeZT8y3cvlmC-FDGyTbQPEQ.roa (hash: yPf4MjNnJsPVmh5cf0exZFQpxpGLZw774YP/hVrhXHU=)
3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: Q4EnS+LvGuzDcx1PNVH37j0CThG5wM1+Z6gxcpe/cZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:ed:5e:f5:38:a3:a5:bf:f8:80:78:62:b8:c5:86:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Jul 24 07:00:57 2026 GMT
Not After : Jul 25 07:00:57 2026 GMT
Subject: CN=3de9ec4266dbc1e7a4348c9c87617a36f902be1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:79:bd:57:f1:18:97:56:78:77:c1:be:01:5a:
84:7a:32:e5:17:aa:ad:2b:b2:f6:fa:6a:2b:fb:cd:
8f:2c:4b:29:29:95:9e:03:95:33:90:3a:7d:e7:a9:
69:d6:64:5a:06:b3:3e:62:50:1e:dd:9c:d1:37:e6:
6f:0f:0b:65:a2:29:49:71:c0:c0:b4:0b:35:04:69:
0f:bf:4b:d1:a5:72:44:27:fa:23:ae:1e:a6:00:2b:
ff:80:d7:94:7d:8b:bd:ee:5b:95:eb:f0:b5:b4:53:
a9:12:3e:f3:d1:5f:64:35:cf:48:a4:97:27:bd:89:
10:dc:ff:23:69:e4:19:77:11:b3:93:14:31:ab:83:
71:63:9d:e6:42:bd:8e:8c:46:f1:67:c1:a3:00:e8:
4f:10:15:0d:2d:14:cc:4e:43:4f:72:57:74:a4:c8:
7b:b4:5a:2b:9e:7a:77:03:f0:cc:ab:2b:6e:b3:f7:
51:0e:7d:1a:ba:91:77:91:c9:b4:66:83:8f:fa:db:
ff:1a:b8:be:f7:08:96:df:49:d9:7c:ce:9a:c8:13:
5f:9e:f5:d6:6e:ad:e4:55:07:4d:0a:ab:fd:e6:51:
30:e9:95:91:85:f4:b9:cc:63:07:91:90:02:06:08:
9e:9f:ec:04:ed:1b:aa:ae:c1:f5:81:c1:77:3c:64:
88:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:E9:EC:42:66:DB:C1:E7:A4:34:8C:9C:87:61:7A:36:F9:02:BE:1A
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b9:68:76:a8:ac:69:79:90:52:c9:f1:d7:3a:cf:59:ac:3b:
3b:a2:69:33:27:d9:93:4b:94:2f:f6:32:a8:09:c1:c7:57:b3:
26:50:2f:ef:4c:93:91:14:f3:fb:dc:66:63:93:5b:6b:5b:91:
64:7a:63:6d:ce:4a:32:85:8b:54:4a:66:07:d5:3f:aa:eb:43:
ef:cb:01:85:4e:41:3b:3a:e0:c3:d4:d2:18:f3:13:3e:7d:97:
e1:7e:48:e8:bf:d1:62:1e:c1:42:50:3b:3e:f9:69:da:03:f5:
50:65:db:c3:b8:6e:f9:11:96:f7:51:20:80:d8:9f:9d:91:92:
fe:49:d0:be:fe:d8:8f:e5:89:a9:4b:e6:b3:c4:cf:6d:58:d9:
0d:1b:17:b2:1f:06:3a:7b:a6:02:fe:75:38:a4:70:00:13:3c:
39:03:41:2f:cb:fe:15:ea:7f:20:ad:a4:df:db:ad:50:e0:c2:
29:15:9b:72:74:0c:10:2b:ef:77:5a:73:7a:f6:cb:23:f4:e3:
a2:43:f6:15:d8:e1:b0:e4:5f:73:e6:8b:7b:4b:b6:54:a9:2b:
28:7d:99:36:d5:22:dc:b7:b3:54:ac:57:61:09:f2:02:91:c7:
d6:c9:2f:5a:e0:51:49:8f:87:79:61:82:74:8f:62:b3:a3:85:
32:8f:d5:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:56:41 2026 by rpki-client