Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: EkTZHRt+efOiM81a78RXZLZzoQYaNq8HpmDGWS9ti7g=
Subject key identifier: E2:0D:C6:70:3A:67:CB:0C:43:6A:74:70:DD:0D:95:E3:71:82:81:AD
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 019F93FFEF1B7E998C934F2B210C612D8AE0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 0981
Signing time: Fri 24 Jul 2026 12:00:51 +0000
Manifest this update: Fri 24 Jul 2026 12:00:51 +0000
Manifest next update: Sat 25 Jul 2026 12:00:51 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: /MyCE2cgilY026fikt7m4SQlgrzMH6c8E5Sx8Io7vZM=)
2: _G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa (hash: QsL4Z9FiJsXvXIFlxM7RbhEJzgQ69Cb/qKd+bhG5xng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:ff:ef:1b:7e:99:8c:93:4f:2b:21:0c:61:2d:8a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: Jul 24 12:00:51 2026 GMT
Not After : Jul 25 12:00:51 2026 GMT
Subject: CN=e20dc6703a67cb0c436a7470dd0d95e3718281ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f5:0e:3f:39:24:07:37:c0:86:04:11:3c:a3:
19:ce:27:14:b6:6d:4f:42:c6:44:9b:5a:e4:b2:cf:
a3:ba:45:f0:71:25:e4:90:72:b5:5f:41:09:2c:59:
d8:0e:db:5b:a7:6e:91:4e:d0:84:20:df:0d:9b:ca:
b9:36:41:4d:64:bd:9f:be:63:e3:9d:69:49:a2:18:
02:45:cf:a6:30:14:cc:8a:15:4c:b8:e5:5b:b2:bf:
fb:0f:95:3a:53:7b:eb:ea:a7:a5:e0:18:91:79:9b:
e0:84:64:75:89:87:2b:27:c6:58:1d:61:1e:51:f6:
af:8e:2c:cb:ba:91:7a:ec:e6:fe:3d:d5:90:ed:5e:
12:df:a3:fb:ae:ec:35:bb:db:a9:7a:86:75:2b:60:
09:2c:8d:f2:9c:5f:18:41:bf:50:20:8b:72:c7:ca:
e6:f8:00:a9:de:5e:7b:ce:b6:0b:2c:bb:2b:6a:46:
dc:be:83:19:36:fb:cc:6e:2d:86:15:3e:fd:c2:74:
eb:01:e1:3f:fd:d8:01:9b:36:4e:00:bc:48:27:ba:
f1:ef:f7:13:78:20:fa:3b:5c:40:c4:25:2c:6f:f1:
34:10:56:99:30:d3:97:01:ed:40:92:eb:43:9e:cf:
75:c1:0e:d9:a8:78:cd:be:6d:77:fe:70:05:24:d9:
30:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0D:C6:70:3A:67:CB:0C:43:6A:74:70:DD:0D:95:E3:71:82:81:AD
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:ef:cb:9c:48:ad:40:70:0c:f1:12:58:7d:09:a7:7a:1b:83:
9a:ce:32:10:41:b0:a9:96:e8:a0:6f:38:dd:db:30:dd:6d:6c:
87:b3:e1:fe:5d:51:4d:aa:e8:35:37:37:e2:34:1b:a8:ef:7e:
2d:b1:c4:09:63:84:df:ab:72:7e:58:6e:3d:65:75:b9:db:e6:
1d:dd:4a:ed:12:a9:a9:00:6f:a8:4c:9f:16:f1:ed:0b:63:8a:
fa:f1:10:23:a8:4b:07:c9:bd:8c:e1:69:f0:cd:a0:b7:25:5e:
cc:f4:51:c1:e4:9d:2f:ae:e1:a5:08:98:e1:db:7c:d4:c2:c7:
85:8e:7a:d3:bc:5b:15:02:92:21:44:44:cc:d2:31:c4:52:41:
77:dc:c8:52:23:24:4e:35:7f:c6:29:14:78:00:ba:86:6d:b7:
92:bd:89:0b:68:82:f2:65:96:62:bc:8a:bb:b2:d3:c6:28:da:
98:d8:c7:0b:1c:8a:80:02:16:73:ba:77:12:37:81:0e:f4:04:
de:b3:b5:53:83:24:ae:3a:15:af:64:fc:5e:70:cc:82:f9:7b:
0a:89:30:6e:91:6b:fa:ab:40:5a:ac:74:19:3b:b3:1f:b9:b2:
42:9c:e6:20:53:6c:bb:ec:7c:18:c1:f5:8b:26:ab:1b:c9:19:
62:5d:9b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:49:27 2026 by rpki-client