Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
File: UZ5x0bhgWjO53WVLo43fq8HO9es.mft (raw, json)
Hash identifier: xcpxRRSg4O2Z7t32gj1e4yG0nTGBDLC/1agGs2b+Q0k=
Subject key identifier: 9F:67:42:78:EF:31:5A:26:2F:F9:5D:29:BE:02:7E:C1:32:BE:60:68
Authority key identifier: 51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
Certificate issuer: /CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Certificate serial: 019E1F47BA03DD0CC88FE97467A94C258A57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
Manifest number: 08C0
Signing time: Wed 13 May 2026 03:00:54 +0000
Manifest this update: Wed 13 May 2026 03:00:54 +0000
Manifest next update: Thu 14 May 2026 03:00:54 +0000
Files and hashes: 1: UZ5x0bhgWjO53WVLo43fq8HO9es.crl (hash: CRpQogLrxseGh4qNCjdXPMQQJ3yiAWqiqBQNoxoRRTc=)
2: _G4ib8y2Mhp9fmW-zDcRMp9FTNQ.roa (hash: QsL4Z9FiJsXvXIFlxM7RbhEJzgQ69Cb/qKd+bhG5xng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:ba:03:dd:0c:c8:8f:e9:74:67:a9:4c:25:8a:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=519e71d1b8605a33b9dd654ba38ddfabc1cef5eb
Validity
Not Before: May 13 03:00:54 2026 GMT
Not After : May 14 03:00:54 2026 GMT
Subject: CN=9f674278ef315a262ff95d29be027ec132be6068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:04:2a:37:b3:04:67:de:7f:9c:e7:6c:1b:c0:
81:f6:50:dd:8a:6c:63:ff:1f:0d:53:49:fe:6a:11:
11:5f:67:c8:7d:d2:0b:ec:e0:56:dc:b9:52:16:0c:
a5:22:02:95:84:eb:d6:11:35:4e:8c:4a:5a:25:43:
32:e1:4f:0a:d4:ce:2a:ef:57:b5:56:5e:fa:5f:11:
a8:0e:10:1d:0d:f2:b5:ea:10:55:c7:57:37:13:c7:
59:87:22:10:53:ed:50:f4:85:61:ca:70:83:e3:23:
2f:49:85:88:74:73:b0:dc:1a:fb:30:2f:0a:a4:9a:
83:49:66:8b:f3:70:74:45:91:82:69:84:1a:f4:2b:
f8:22:6b:d5:20:04:2e:26:0d:d6:00:e7:6a:75:71:
67:ba:cc:ab:88:83:93:10:a9:72:bd:f3:27:e7:a4:
d6:63:1b:6f:2c:dc:be:bd:1a:2f:a4:5d:94:8a:8a:
69:15:2d:e0:8a:bb:fa:7f:85:e2:7c:5e:17:cb:a3:
1e:d3:dd:01:bd:66:e0:4a:09:2e:6c:f6:50:23:a9:
8f:3d:15:b6:b4:8b:a5:22:3a:7a:67:68:d0:39:2b:
ab:1f:0a:47:df:73:09:59:c5:14:fb:e3:14:84:6b:
ac:56:4e:e9:98:06:82:ff:7e:f1:c2:9e:c6:ca:a8:
8f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:67:42:78:EF:31:5A:26:2F:F9:5D:29:BE:02:7E:C1:32:BE:60:68
X509v3 Authority Key Identifier:
keyid:51:9E:71:D1:B8:60:5A:33:B9:DD:65:4B:A3:8D:DF:AB:C1:CE:F5:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZ5x0bhgWjO53WVLo43fq8HO9es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/f35fb5-0f67-44e4-9a54-fd6f235daf0b/1/UZ5x0bhgWjO53WVLo43fq8HO9es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:16:24:e9:25:73:88:78:60:60:9d:09:9d:b9:6e:b8:58:a0:
a8:9b:24:1e:4b:dc:7f:3d:d9:7d:40:33:85:87:a6:21:ad:62:
ab:5a:54:da:5f:80:a8:97:7e:c8:f2:40:8c:32:d6:09:48:7d:
cb:51:b5:12:00:a8:12:76:2c:58:49:bd:36:96:8a:20:b1:dc:
79:d5:66:51:6d:c5:16:9b:83:7d:30:bd:4f:8f:09:3a:99:9e:
71:19:a7:c5:d1:8b:26:13:4c:8f:ec:b6:c9:07:1a:a2:1e:9c:
8a:e9:ae:2b:42:75:e3:96:58:19:40:bf:56:c2:17:ad:f0:4d:
3c:2f:7d:d5:76:09:72:61:b3:a0:f6:ed:7c:22:c7:03:61:d6:
72:c6:79:e9:20:e9:3d:06:84:0e:14:fd:85:44:24:43:a3:74:
0b:0b:36:02:66:ab:81:18:f4:39:13:ef:ff:f1:46:74:5d:86:
75:c6:fa:b2:89:30:14:1d:7a:27:76:b9:e5:48:a8:cf:9f:68:
05:b2:c2:ba:29:2c:f0:05:dd:bd:27:50:3b:1a:1e:57:4f:19:
2b:40:52:19:83:1a:dc:c1:02:53:5a:a6:a7:a4:ee:de:d7:96:
dc:f3:12:a7:61:f5:48:40:1e:27:2f:28:6c:97:4f:22:af:06:
59:08:65:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:13:15 2026 by rpki-client