Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: FMk9qLQTqPkyw5hYL0UgRE1jsoV0ZCyXPu+I+qDLbjE=
Subject key identifier: 09:E3:42:43:1B:8D:7E:B7:17:17:73:39:FA:66:7F:87:4D:88:83:80
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 019F9625C0ABDB250C16A81440E5C4874C69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 19CD
Signing time: Fri 24 Jul 2026 22:01:24 +0000
Manifest this update: Fri 24 Jul 2026 22:01:24 +0000
Manifest next update: Sat 25 Jul 2026 22:01:24 +0000
Files and hashes: 1: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: IGKTTNkIMRDhLTSYfTJc65rmaXRLFd1Vk7LXSMGimcE=)
2: dvjppw9s6JficbBL1JualOvAVhI.roa (hash: cPS5/nVNCYfyW3AOLG3yzdZLV0ipLTe96hQ2jMLs1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:96:25:c0:ab:db:25:0c:16:a8:14:40:e5:c4:87:4c:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Jul 24 22:01:24 2026 GMT
Not After : Jul 25 22:01:24 2026 GMT
Subject: CN=09e342431b8d7eb717177339fa667f874d888380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:85:1a:ef:0b:79:43:8b:7b:02:e6:20:28:
42:3b:87:a7:87:6f:95:b9:76:7f:9e:96:00:fa:35:
e4:70:18:33:a0:0b:52:c7:6c:74:fb:ed:9d:96:81:
24:6b:14:73:64:24:af:10:07:01:69:a1:37:77:ce:
6e:17:48:27:15:1e:9e:0c:ec:c1:58:b7:c4:58:ac:
69:d0:fa:64:37:0f:36:26:d6:a5:32:8f:10:c6:ba:
e3:53:82:74:f6:bd:6e:d0:dc:11:a7:77:60:6c:e9:
56:de:f1:d0:7f:d1:6b:37:de:64:d2:64:fd:a5:1e:
a6:e1:93:18:7d:dd:72:bd:e0:34:5f:c3:4e:8a:f8:
f5:91:fd:cf:24:eb:9f:dc:70:b3:6f:32:09:fd:57:
01:7a:6c:07:53:cc:71:87:f4:3d:c9:2d:ce:a5:d2:
a6:3b:17:91:0e:e1:1a:03:0f:cc:06:b2:c5:25:ff:
65:70:19:91:3a:bd:c7:6a:30:56:aa:af:22:6b:e8:
54:f9:d5:21:7c:85:79:d0:c0:59:ca:39:3a:60:d9:
de:6f:19:4d:6b:36:2e:26:65:30:01:ab:2a:1e:bb:
cb:d8:a7:22:9f:82:48:16:92:24:16:8a:4e:3e:7a:
7c:a3:65:86:10:5f:59:5b:2b:3f:f5:8e:f0:51:e7:
d5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:E3:42:43:1B:8D:7E:B7:17:17:73:39:FA:66:7F:87:4D:88:83:80
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:0a:b8:5e:84:0e:66:f5:6c:84:97:cd:29:bb:90:5e:74:5e:
8f:c4:d3:04:3d:b2:11:1b:c1:6a:bd:19:cf:4d:3c:31:c5:60:
58:38:d4:ce:cf:20:8f:0d:d7:a5:de:2a:99:ca:58:41:e9:3f:
c9:e5:4a:27:8e:42:7a:7e:d2:c0:a2:6f:54:a1:aa:70:0c:91:
43:b5:f8:2d:69:51:87:8b:8e:b7:49:54:98:19:36:72:cd:1e:
2b:08:05:95:a6:f2:01:01:44:d4:9d:79:47:5a:1b:53:41:82:
81:9b:c2:06:8e:c0:fb:d7:21:fa:29:91:47:88:4f:01:9b:3c:
a7:26:05:e0:cf:87:f6:5e:35:b7:6b:14:fd:09:cb:b8:3f:9d:
34:67:35:86:11:a0:3d:42:32:b5:e5:51:96:3a:31:33:41:f7:
d8:04:77:17:f0:97:dd:e1:e9:6b:4c:b1:f9:91:b5:51:7b:6b:
3d:0c:70:c2:43:cc:5c:8a:14:aa:b4:71:77:77:94:0e:ab:55:
5b:1e:aa:4f:20:da:d1:79:e2:c7:09:a1:fc:40:d8:06:8a:22:
55:11:fb:0b:bc:b1:95:db:ed:5b:70:39:27:15:88:2a:10:1e:
ce:fa:73:67:81:96:6d:57:55:fe:7d:cf:0f:25:21:97:a9:c4:
57:ce:bf:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:52:18 2026 by rpki-client