Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: 0JsWHgfVCqCFcQJLQSLycPwJqa2rvCCl8Bz3jmQTKoE=
Subject key identifier: B7:B2:A9:C1:CE:26:E8:E8:D5:F7:25:53:91:BA:13:09:C8:60:BC:8A
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 019E1F7ED03C61D361E30F1D31F239F6089D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 190B
Signing time: Wed 13 May 2026 04:01:04 +0000
Manifest this update: Wed 13 May 2026 04:01:04 +0000
Manifest next update: Thu 14 May 2026 04:01:04 +0000
Files and hashes: 1: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: w/oJhnMdb6oBL2U/jAtY0t/U+8JezXcKbbeL7Pna4V8=)
2: dvjppw9s6JficbBL1JualOvAVhI.roa (hash: cPS5/nVNCYfyW3AOLG3yzdZLV0ipLTe96hQ2jMLs1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 04:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:7e:d0:3c:61:d3:61:e3:0f:1d:31:f2:39:f6:08:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: May 13 04:01:04 2026 GMT
Not After : May 14 04:01:04 2026 GMT
Subject: CN=b7b2a9c1ce26e8e8d5f7255391ba1309c860bc8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:a6:e2:41:79:d6:80:a8:7c:96:ba:23:99:71:
67:cb:e8:a7:78:c5:c1:3c:1e:a1:74:24:b0:7d:4d:
2e:ae:49:fd:d1:c5:5c:3c:9d:d0:ac:30:d6:5c:70:
49:d7:3c:fb:9a:b2:17:3b:94:90:8a:47:fa:40:da:
0e:e2:3e:46:ea:fc:81:58:4a:95:b5:f7:c3:33:20:
24:61:8d:63:2a:ee:de:5b:3e:e3:35:81:53:09:53:
bb:77:dc:ab:c7:47:94:1a:90:47:ed:1d:bc:2c:c7:
5e:1c:2e:62:56:b9:67:96:0a:e2:02:05:91:77:19:
89:86:cc:65:01:3b:5b:92:30:07:e2:cf:9f:b0:b5:
43:3b:46:90:6b:d0:af:1c:5b:be:ed:86:ef:1d:8d:
30:6f:c1:68:ed:6d:57:0a:27:90:46:0c:bc:1e:ad:
87:74:23:6d:19:c5:8a:d7:b2:f3:00:ed:a5:b7:11:
c5:98:f7:fd:3d:9b:3b:8f:69:1d:ad:62:f7:97:d9:
82:f4:97:b6:5f:3f:51:5c:31:bc:03:61:5a:f5:bf:
da:c9:22:49:a3:ad:09:b5:dc:ea:3a:0c:88:a6:e1:
33:42:17:e9:9a:11:e8:1c:6d:46:82:31:85:3d:80:
12:81:0b:3b:33:e0:43:f9:ed:86:0e:32:ab:e9:42:
44:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B2:A9:C1:CE:26:E8:E8:D5:F7:25:53:91:BA:13:09:C8:60:BC:8A
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:ba:c6:8e:06:88:17:cf:53:7e:61:4f:12:60:ca:c2:96:25:
93:5b:6b:9d:97:ff:1e:e0:17:7a:40:5d:bd:54:9a:27:3e:2a:
96:14:9f:9f:cf:e3:0f:6a:5b:45:94:2a:46:41:cd:39:3a:bb:
ea:e4:36:47:47:b9:98:45:39:81:d1:c3:7a:68:3d:6e:0c:20:
18:5a:92:c7:87:33:86:29:94:48:87:8d:65:1d:93:8b:81:7a:
5d:89:1d:6f:90:9f:37:8e:19:b4:b9:89:ab:61:64:00:e8:c9:
4c:6c:b7:b6:b9:2b:f9:18:c7:b9:fe:b5:63:c4:a9:ea:25:6e:
18:cd:fc:97:44:8e:a9:ed:ff:e9:a0:ef:82:29:aa:da:ac:2b:
81:e6:e4:6a:a4:cc:40:75:63:72:43:1b:8a:a1:b5:2a:9a:5c:
75:98:d9:f8:da:2f:fe:d5:12:24:c6:99:e0:96:42:63:b8:84:
cb:09:5a:fa:34:24:5d:e4:76:dc:d4:c5:fc:ca:e0:cf:e9:8d:
d7:d4:24:81:12:bf:d1:df:c9:00:30:90:bc:db:fb:7f:41:0f:
c3:da:80:e0:58:f3:c5:50:f3:c3:51:b2:f5:46:f4:76:de:ef:
43:5e:76:60:86:8e:9e:2f:bd:a2:af:78:73:da:14:47:58:3b:
a0:8f:e9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:07:38 2026 by rpki-client