Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
File: U1vkU3bViYdFK9Bka5p0z562yy0.mft (raw, json)
Hash identifier: rqXbVAtfRE9UofcTwdumOpgP+tfsubE+mp6eZ5bGYDs=
Subject key identifier: E8:C6:27:1A:77:34:22:EF:10:0B:88:58:61:C6:76:7A:F2:59:D7:BD
Authority key identifier: 53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
Certificate issuer: /CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Certificate serial: 019F935BB43866CD1AE9AA82DB6CC1CB002B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
Manifest number: 19C8
Signing time: Fri 24 Jul 2026 09:01:28 +0000
Manifest this update: Fri 24 Jul 2026 09:01:28 +0000
Manifest next update: Sat 25 Jul 2026 09:01:28 +0000
Files and hashes: 1: U1vkU3bViYdFK9Bka5p0z562yy0.crl (hash: 0uJVuQIMOCSG4/7+qIW2rwnLQxZ22zUyvrfA62PANYE=)
2: yAmajTNIGB30RaNnDKHZKbNV084.roa (hash: AvmPyTEQGMbZs2CFL6VyUeUgqUB6djXcQ6A/Qc+SDAE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:b4:38:66:cd:1a:e9:aa:82:db:6c:c1:cb:00:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=535be45376d58987452bd0646b9a74cf9eb6cb2d
Validity
Not Before: Jul 24 09:01:28 2026 GMT
Not After : Jul 25 09:01:28 2026 GMT
Subject: CN=e8c6271a773422ef100b885861c6767af259d7bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:90:41:78:ed:c9:ad:c9:65:3b:41:3f:ec:57:
bf:27:f0:45:69:6d:96:b9:ed:ad:f4:82:ab:f5:c5:
4c:75:f5:3b:e5:b0:a9:d5:55:f2:3f:af:25:02:c3:
9e:bc:4f:e8:d9:91:99:d1:1e:9c:7d:02:b6:ff:6f:
a9:d1:9c:14:a7:48:29:82:3c:79:11:1a:4b:00:2e:
31:30:3c:bf:b5:2e:e2:4d:5e:e6:22:d9:66:10:4d:
83:0d:d0:8b:37:cd:07:e8:27:4a:dc:bd:da:e9:2d:
7b:4c:e3:63:96:4c:15:ef:52:2b:61:04:ac:69:45:
68:c8:f9:c9:aa:98:7d:0c:46:6c:0a:39:fd:f4:0e:
e5:2b:5d:e7:25:16:bd:92:a3:41:9e:65:05:69:23:
51:a6:f1:a6:39:98:30:0e:48:e4:26:02:97:fb:fc:
5b:68:7b:4a:0e:32:11:9b:3e:a8:62:11:a6:b7:9f:
42:12:fd:e7:45:51:1b:ed:27:5d:9c:a2:e9:c9:8e:
a8:73:52:26:dc:ea:fd:05:07:be:b9:6e:b0:02:37:
65:eb:96:07:3f:f2:db:c5:90:b1:b6:29:ff:d7:b5:
9d:df:95:08:01:1d:c8:d7:87:c6:de:5d:47:9a:a2:
0f:ae:16:7f:d3:d5:fb:20:ab:c6:07:e6:d6:a8:1c:
01:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:C6:27:1A:77:34:22:EF:10:0B:88:58:61:C6:76:7A:F2:59:D7:BD
X509v3 Authority Key Identifier:
keyid:53:5B:E4:53:76:D5:89:87:45:2B:D0:64:6B:9A:74:CF:9E:B6:CB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1vkU3bViYdFK9Bka5p0z562yy0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/fb39a8-623b-4435-94fe-cec92b578006/1/U1vkU3bViYdFK9Bka5p0z562yy0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:d1:5b:01:26:0c:b9:74:28:80:27:fc:72:94:5d:b3:a3:75:
4c:1f:cc:4f:39:94:97:fd:60:bf:cd:8f:75:c3:fa:20:4c:0e:
09:8e:ab:73:95:a5:3a:2f:8c:d8:0e:c4:30:fd:89:6b:a2:75:
68:e5:2b:0a:01:6c:b9:4c:63:21:c0:25:a7:f3:9c:55:d1:db:
11:82:94:e8:bc:49:80:94:b9:eb:dc:71:7f:d4:d5:d4:52:24:
eb:f1:a6:b6:2c:81:43:28:e9:4e:78:66:9d:e2:1a:24:5a:2f:
df:0a:73:63:cb:c3:bf:d0:77:1d:64:67:12:81:ef:eb:7c:2d:
82:04:60:a3:cc:4e:c2:31:d8:bc:c1:30:60:f1:3f:24:a2:fb:
68:b3:58:74:15:b5:85:98:cd:5d:41:cc:36:b6:33:77:91:ad:
00:23:66:18:26:e8:77:7f:22:ca:7e:39:e0:9f:48:de:39:5f:
9e:6b:22:93:0a:3b:4a:e9:6a:8d:68:03:be:06:5d:a4:16:88:
a0:d4:fb:4c:05:4e:8c:51:7c:2e:26:b0:e9:02:2c:db:36:cd:
a3:a1:86:fe:15:a8:15:46:62:36:fa:bf:a9:70:1b:b0:09:93:
42:64:3e:d7:b0:8f:ab:38:1a:7a:ad:2a:76:33:a5:a4:16:9e:
82:9d:60:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:03:09 2026 by rpki-client