Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
File: UXJQgtvnpOkAQ6MxcjoX81exBek.mft (raw, json)
Hash identifier: dCumUd2Ut8i1Qo7oItd68Rx4eVgEzX8fUwLqlYGGa6o=
Subject key identifier: 8E:5B:91:94:9E:88:A9:C3:CA:C6:FF:3D:BE:5A:AB:FB:3C:29:71:C2
Authority key identifier: 51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
Certificate issuer: /CN=51725082dbe7a4e90043a331723a17f357b105e9
Certificate serial: 019F935C0CEEC0D8DBD1637C353B1D441C53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 09:01:50 +0000
Manifest this update: Fri 24 Jul 2026 09:01:50 +0000
Manifest next update: Sat 25 Jul 2026 09:01:50 +0000
Files and hashes: 1: UXJQgtvnpOkAQ6MxcjoX81exBek.crl (hash: 2lOr6BqfZEIKN7KtrphitRKDYlQFdrVA6tZV4ms9E4Y=)
2: yGc1olHbdu0re5cga7zmsztnd84.roa (hash: rPgsDnlPhqj34gq4l/H+82O5x4qAi6GfxZrdQ2oMAVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5c:0c:ee:c0:d8:db:d1:63:7c:35:3b:1d:44:1c:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51725082dbe7a4e90043a331723a17f357b105e9
Validity
Not Before: Jul 24 09:01:50 2026 GMT
Not After : Jul 25 09:01:50 2026 GMT
Subject: CN=8e5b91949e88a9c3cac6ff3dbe5aabfb3c2971c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6c:59:da:6d:1a:dd:4d:f4:51:5e:36:a1:b5:
f4:78:57:77:e7:af:b9:a5:90:63:68:5c:fd:d4:ea:
4d:e8:40:36:d3:96:6a:37:e5:c8:d6:57:38:fe:ff:
f5:9c:3d:4a:97:3a:df:b3:79:25:26:d1:0f:77:99:
77:dc:e4:64:d4:65:67:d3:be:c2:8d:2c:32:09:41:
d4:45:ae:7e:6f:92:cb:4c:7e:e1:4f:e0:c3:60:ca:
fb:a7:ca:fb:8c:14:c4:8a:f0:58:0a:86:8e:2e:01:
07:85:8e:46:ae:fb:c8:7a:34:e9:28:90:92:27:53:
11:ec:83:9d:01:3c:7a:83:73:fc:47:65:5c:52:03:
0a:fb:2a:1e:7b:8c:fe:ce:dc:c6:40:c2:a5:0a:09:
a8:19:0f:a1:28:32:5b:4a:4f:d1:41:09:b6:50:02:
8c:28:16:dc:32:aa:ad:ae:ef:ba:00:8e:8c:fc:d5:
8e:61:ed:cc:87:18:0e:9b:76:14:7b:82:2e:ea:3d:
7d:17:d1:0e:85:8f:ef:7c:b5:ae:77:6e:b8:49:53:
19:b8:5f:20:0d:ed:81:a2:db:f5:58:f6:91:61:9d:
b0:f6:dd:fa:ea:6b:c1:ea:52:5c:d6:ed:0a:c8:79:
c2:ff:04:b0:65:30:af:0f:e7:d0:4a:e0:86:00:a4:
98:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:5B:91:94:9E:88:A9:C3:CA:C6:FF:3D:BE:5A:AB:FB:3C:29:71:C2
X509v3 Authority Key Identifier:
keyid:51:72:50:82:DB:E7:A4:E9:00:43:A3:31:72:3A:17:F3:57:B1:05:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXJQgtvnpOkAQ6MxcjoX81exBek.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/99afec-d418-46f3-9782-a3bda4d86cc7/1/UXJQgtvnpOkAQ6MxcjoX81exBek.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:25:22:de:ee:3b:d9:0c:55:5e:10:03:a2:a4:4d:78:3a:52:
3e:47:43:2b:5f:2e:a0:39:33:72:ff:b0:06:e2:3c:a8:d9:2b:
e5:e7:2d:ce:02:41:01:08:f9:28:9e:08:10:96:5c:ad:38:76:
cc:60:b8:8d:74:ae:7a:e4:6a:fd:f5:8e:41:be:b9:d2:4f:83:
41:ba:57:73:47:d0:69:e5:20:1d:ce:5a:24:8c:13:29:60:e1:
de:b2:d2:56:bc:00:e0:2f:2d:c1:29:f2:71:17:00:b8:82:b8:
24:06:c9:2d:c4:0d:cc:ac:28:f3:d2:27:d9:b4:ae:cb:b4:db:
19:3c:48:2b:1c:0b:00:ad:7c:e2:c4:6a:4f:f9:b9:15:65:ed:
7b:75:35:df:37:e5:26:e8:7a:6c:3d:e8:57:67:07:c3:e8:a3:
99:13:7b:00:db:ad:22:b0:e3:9d:11:5f:0b:3a:65:b8:6a:87:
c1:5c:67:7f:0c:15:73:5b:68:35:60:64:7e:7d:07:8c:20:9b:
a3:6d:e2:54:d6:06:60:41:b9:19:58:44:ca:a4:62:57:e5:6f:
00:8a:61:02:f4:2a:2a:e6:d4:09:51:98:e4:a1:2e:7d:39:13:
5b:80:f3:0c:50:82:34:62:18:fc:27:cf:4e:6f:d3:32:d3:65:
cd:91:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:11:53 2026 by rpki-client