Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
File: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft (raw, json)
Hash identifier: ixKCXJ+yYroduhag0sVv1rdM6viO2ujpMgZqxUcHfH8=
Subject key identifier: F0:0C:31:0E:95:E0:F0:E8:E8:21:8F:7E:73:EC:D7:07:EB:A6:A3:94
Authority key identifier: 03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
Certificate issuer: /CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Certificate serial: 019F9090C2E696BB51A3DDC2E8AD03116292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
Manifest number: 19CA
Signing time: Thu 23 Jul 2026 20:00:33 +0000
Manifest this update: Thu 23 Jul 2026 20:00:33 +0000
Manifest next update: Fri 24 Jul 2026 20:00:33 +0000
Files and hashes: 1: A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl (hash: QOyHOH7QHvhxorkIAtyc8KeR2ynAiAvbTfT/wVLzMFI=)
2: LxJaOC-2KIpwwVVZABAlIWlsIp0.roa (hash: 7ma0hwDbVZMGk4nMz3JXDWUYVRt/2Dj4M9Onwnqp5u4=)
3: pCX_Df1xcNspUxHlFIrg2C-Qt_g.roa (hash: kTCwSVUPhhizrIBbzo+G2rorHsKLRW35XnzDp2Z2CKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:90:c2:e6:96:bb:51:a3:dd:c2:e8:ad:03:11:62:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03e53d18f5f212ae0802a17ee5994c3331a43524
Validity
Not Before: Jul 23 20:00:33 2026 GMT
Not After : Jul 24 20:00:33 2026 GMT
Subject: CN=f00c310e95e0f0e8e8218f7e73ecd707eba6a394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:d6:70:15:e9:44:16:fd:8d:a6:18:aa:44:2c:
fb:62:16:0c:f1:68:db:d1:69:0f:77:3d:10:b5:8c:
6c:4b:06:59:f3:79:a2:cd:87:5d:43:6a:24:c9:5b:
5e:f6:b4:00:bb:d2:fc:16:c1:d6:e1:16:6e:7d:bc:
dc:d1:b8:9d:db:b7:53:bc:6c:8d:d8:d4:7b:b7:8d:
1e:eb:06:55:fd:9d:e7:1c:11:cc:e8:b0:27:d3:11:
48:0b:58:c6:2a:0c:f0:f2:9d:55:d8:5e:d8:62:5f:
49:51:c2:76:77:35:16:e4:09:cb:6c:ba:f3:34:1f:
05:12:e2:a2:95:6f:ef:49:6a:e8:ac:cc:36:43:f5:
e4:de:f7:33:78:47:d6:ec:09:24:48:6b:71:dd:c5:
80:74:cd:bf:d2:62:1f:e9:53:ad:d1:3a:3c:6c:0d:
bb:79:dc:b3:30:81:51:29:0e:48:f1:9b:a2:47:55:
df:ba:c2:5a:f0:e3:f3:1d:20:4f:7c:b5:bc:e5:49:
cc:a8:62:a3:f3:33:d5:58:e2:cb:c8:12:fb:7a:c2:
1a:17:c2:49:4d:c1:17:17:12:ef:e1:1b:c0:f5:7d:
40:58:f3:65:47:c7:14:0b:cd:c6:e9:ca:48:10:dd:
ea:43:62:7e:86:be:2f:9c:49:e4:ad:c5:dc:34:8b:
1d:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:0C:31:0E:95:E0:F0:E8:E8:21:8F:7E:73:EC:D7:07:EB:A6:A3:94
X509v3 Authority Key Identifier:
keyid:03:E5:3D:18:F5:F2:12:AE:08:02:A1:7E:E5:99:4C:33:31:A4:35:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/ddd9f1-0f2e-4d5f-857d-02bab9f6f955/1/A-U9GPXyEq4IAqF-5ZlMMzGkNSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:17:a1:8d:8b:e5:78:3d:28:2f:d4:8f:11:f1:c4:ee:8c:0d:
49:df:aa:91:3b:a8:33:f4:d5:41:14:7c:94:b6:5f:0f:bc:cd:
a2:e4:33:8c:42:54:0f:c1:a0:93:db:12:66:95:df:36:63:2f:
03:8f:ca:bc:3b:00:e4:b1:97:4a:87:ae:22:16:56:19:55:d2:
c2:20:24:62:91:49:06:3d:dd:01:dd:52:d7:1f:6b:47:26:35:
14:b3:f3:e4:c8:43:1e:b5:1a:72:e3:15:ac:c8:06:4e:ef:ec:
9e:1a:05:b3:d2:c7:58:d6:75:cd:9f:3b:86:d5:8e:12:58:51:
bf:d1:45:b3:94:38:b6:d0:b7:46:b8:71:d1:ee:2c:af:07:52:
61:79:f8:17:5e:b8:c4:05:a6:20:99:56:0e:d7:79:c4:7a:ca:
ba:69:c9:9a:4d:4f:4e:6e:b1:3b:26:6f:6d:12:64:62:62:a4:
b9:0a:a2:57:7c:44:4b:b6:72:0d:59:4f:3f:4b:fd:ab:e7:52:
99:11:d3:89:8f:48:92:c2:20:72:de:a1:69:41:b4:35:11:33:
5d:aa:63:4e:6a:b0:4e:d5:3d:5f:dd:d2:f6:b1:36:78:98:cd:
d0:a0:be:26:c1:07:f5:14:bc:6a:3c:f3:ad:77:48:30:9a:8d:
f4:db:98:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:44:28 2026 by rpki-client