Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
File: U0lylWvf-DsNiB4Br9PWxSZR4Es.mft (raw, json)
Hash identifier: DXX5RfPRhni3SnM3zxesptyjhT5q4ubSelSyJvyabgo=
Subject key identifier: 3C:5B:7D:00:D5:82:61:66:9F:B8:C3:44:04:69:9C:AD:6C:BE:69:6D
Authority key identifier: 53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
Certificate issuer: /CN=534972956bdff83b0d881e01afd3d6c52651e04b
Certificate serial: 019F939280A1CC8EE3E4B5F46AFA6F68C5EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
Manifest number: 0A76
Signing time: Fri 24 Jul 2026 10:01:19 +0000
Manifest this update: Fri 24 Jul 2026 10:01:19 +0000
Manifest next update: Sat 25 Jul 2026 10:01:19 +0000
Files and hashes: 1: U0lylWvf-DsNiB4Br9PWxSZR4Es.crl (hash: PUXtb7xZejWffrhl7KzPjhhyallmGwYDKph77OCIlJE=)
2: r2FzkDk8bJYrPqzaqgtlaBonfqk.roa (hash: f1HN7BXYId6gEL/AZojIIht1vxFDri+lbHrSLek1YkE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:80:a1:cc:8e:e3:e4:b5:f4:6a:fa:6f:68:c5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534972956bdff83b0d881e01afd3d6c52651e04b
Validity
Not Before: Jul 24 10:01:19 2026 GMT
Not After : Jul 25 10:01:19 2026 GMT
Subject: CN=3c5b7d00d58261669fb8c34404699cad6cbe696d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:0a:77:5d:58:54:3b:d9:0d:67:c9:19:77:5d:
e0:6c:2d:15:ab:60:2f:44:83:d2:ee:7b:7f:61:bd:
7d:be:d7:0b:19:1a:3b:eb:77:bf:32:43:9b:8a:a5:
7b:a1:1a:4e:f2:92:6a:12:48:e5:f6:22:69:3d:ff:
ea:66:da:fe:d8:a2:11:2d:db:7d:f7:7a:d5:64:40:
82:11:20:18:bd:13:e8:7d:5a:fc:5f:c6:08:54:f8:
e7:4a:ff:27:4e:22:d5:24:19:17:da:af:6c:18:9b:
02:8c:20:d2:4c:d0:a4:b6:a7:81:ce:de:60:54:60:
10:a3:cc:d8:01:eb:39:b0:65:bf:03:28:7f:09:5c:
91:8a:ea:c9:43:81:71:04:b8:cd:63:b5:e1:98:0f:
88:df:70:32:c1:f6:f6:29:98:f2:1a:ba:58:b9:05:
3f:43:63:ad:3c:2e:40:41:b4:b6:86:b9:ce:d7:c1:
36:30:b9:3c:a0:8e:cf:ed:ff:1c:12:f4:f5:76:ed:
04:4a:f5:0a:d3:8a:a5:0b:35:19:9e:31:9d:37:a5:
6d:ef:aa:dd:8b:94:1a:3c:a7:ee:e1:e1:19:08:79:
15:56:bc:1f:01:16:18:21:a2:3f:3a:3c:21:0c:e4:
e8:bf:39:9c:d5:ba:57:fd:23:aa:c9:25:65:4e:89:
ba:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:5B:7D:00:D5:82:61:66:9F:B8:C3:44:04:69:9C:AD:6C:BE:69:6D
X509v3 Authority Key Identifier:
keyid:53:49:72:95:6B:DF:F8:3B:0D:88:1E:01:AF:D3:D6:C5:26:51:E0:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0lylWvf-DsNiB4Br9PWxSZR4Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/4c0413-ce81-4dc8-8a4d-a70eee3db5e5/1/U0lylWvf-DsNiB4Br9PWxSZR4Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:fb:d9:bb:f4:5f:3a:d6:e6:3e:24:63:b8:10:62:28:57:54:
49:da:e4:18:5a:b6:66:c0:ba:07:46:b1:df:42:c6:78:4c:d3:
2c:ea:c3:f7:4b:01:7b:20:c6:3b:3b:a4:42:65:1b:cc:b1:22:
05:03:db:47:e1:33:9f:fc:88:08:34:79:9a:a9:38:3b:d2:22:
8a:80:03:38:95:bd:d2:ef:40:e0:d0:a2:30:2a:f2:51:8b:7d:
1c:7a:cd:9f:77:ae:bb:98:52:8a:31:f4:c5:93:5f:92:05:ae:
29:aa:dc:30:9d:3b:48:be:2a:c3:73:b5:68:bd:31:42:f5:40:
31:f0:72:5b:26:b7:b2:92:8e:77:66:75:cd:af:b6:f4:b4:75:
9e:2d:21:51:f8:3f:14:ba:0b:98:f1:5c:4c:56:ab:72:67:00:
56:d7:cb:6d:2f:b4:0a:00:d1:a2:62:07:6e:14:82:e1:bd:45:
3c:70:3e:e5:f1:fe:ab:66:3b:a7:cb:e5:0f:37:7a:2d:e8:e8:
ad:c0:96:27:57:a6:01:a2:4e:05:48:a7:fa:0c:66:57:ca:89:
e3:2c:1a:1f:f8:6f:c4:fd:ab:c4:39:bf:17:3a:28:80:72:ef:
91:f7:6d:78:24:8e:7a:f6:ba:79:9a:31:ae:9a:e2:ef:61:d3:
1c:97:63:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:41:20 2026 by rpki-client