Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
File: U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft (raw, json)
Hash identifier: R5sk4+53o1ZDDMmxp/JkyOc8ZgzQHCxRi52AUXzYW3Y=
Subject key identifier: 97:51:EB:09:C7:7C:6A:A7:33:B6:20:B1:47:97:C0:99:7D:ED:1B:42
Authority key identifier: 53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
Certificate issuer: /CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Certificate serial: 019F9248B6219966118E367C4965106D3ABA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
Manifest number: 19D7
Signing time: Fri 24 Jul 2026 04:01:06 +0000
Manifest this update: Fri 24 Jul 2026 04:01:06 +0000
Manifest next update: Sat 25 Jul 2026 04:01:06 +0000
Files and hashes: 1: 4T05fIk1IL5XmP-J7JePysAxRKE.roa (hash: CZTtj6ljL4ZrRColIvs5nHru+2r0m25Gxfk+juu8BnA=)
2: GIKwXPgpp9tYu44qAWsgouqavSk.roa (hash: U0ZjuWOGhkNCjwceAqeYAxKQDQUWsJyAsTBPjUkaiJM=)
3: U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl (hash: P49u5r9Fc8ex4SaP95+S8PXTmbXDmeqRkfQ+2x+cc2U=)
4: _r56llLnHAPpXxxxkXq1tr0D3E8.roa (hash: GaXEko33otm3bGM4yo2EOeA4n0z4wsimGbz5tJkDlo0=)
5: hdiJUsn-mGkGSUlT1Hqx92eDVHA.roa (hash: LJKbx4az7vTER8ap7GuxbSzBoud2G6PQUC4oXRhpf84=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:48:b6:21:99:66:11:8e:36:7c:49:65:10:6d:3a:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b62ace615b906b42ab27f4fb1d203df36d5436
Validity
Not Before: Jul 24 04:01:06 2026 GMT
Not After : Jul 25 04:01:06 2026 GMT
Subject: CN=9751eb09c77c6aa733b620b14797c0997ded1b42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:db:f4:d5:12:29:8a:38:8b:bd:1f:c0:48:ed:
a3:6d:c7:ea:c0:fa:c5:34:46:9a:58:63:e3:86:3d:
5f:1e:8d:b2:30:81:49:ac:4a:7a:9a:c9:59:19:0f:
22:95:10:65:23:1c:fb:22:0e:ce:8f:23:db:7c:5e:
f2:a2:af:83:2f:c8:24:95:81:7b:72:a5:d9:37:a9:
12:a4:b3:13:8c:b6:fd:8c:ed:23:e4:51:f7:6f:4a:
e7:df:6d:7e:04:03:32:3b:8e:54:74:9d:28:4c:ef:
be:6e:0b:f2:f7:3a:9b:c5:48:b4:18:ca:c1:20:77:
82:43:8b:67:2d:85:3d:d2:fd:71:40:07:d4:53:70:
f9:cb:74:a3:c2:81:86:d8:c1:52:bc:01:ec:65:34:
c5:b2:cd:9f:38:34:f8:9a:b2:0b:c4:4a:5c:98:2b:
00:8f:61:17:16:b3:7d:a4:b2:c2:f2:44:5a:58:cf:
c9:98:c3:9b:83:e0:c5:9a:8f:0f:74:b5:c9:d8:ba:
5f:62:9c:ca:b1:95:57:6c:cf:0f:11:7f:7c:97:2a:
48:71:a8:d0:8a:07:65:20:20:dd:ff:d0:93:ec:e7:
5c:b3:fb:93:d7:9a:a7:e9:35:20:6d:06:33:c7:df:
d2:45:10:ad:da:55:fd:81:42:8a:46:97:32:22:4c:
68:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:51:EB:09:C7:7C:6A:A7:33:B6:20:B1:47:97:C0:99:7D:ED:1B:42
X509v3 Authority Key Identifier:
keyid:53:B6:2A:CE:61:5B:90:6B:42:AB:27:F4:FB:1D:20:3D:F3:6D:54:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7YqzmFbkGtCqyf0-x0gPfNtVDY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/8b07cd-0ced-4afc-8d02-972a4c3dc3f3/1/U7YqzmFbkGtCqyf0-x0gPfNtVDY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:8f:ba:a9:ea:7f:42:ea:ee:16:a8:b9:42:00:d1:e8:fe:d9:
49:6d:50:0a:10:02:ad:05:17:e9:7d:53:3d:d3:e7:0c:54:96:
07:93:4e:af:77:cb:fa:24:08:cb:75:03:b0:7d:6c:0c:1b:31:
55:73:44:be:b4:a8:58:a7:de:90:73:97:78:ba:fb:1c:af:2e:
b5:c1:af:44:69:28:dc:bc:7d:a0:ac:07:a5:69:f2:d3:30:23:
00:6f:1e:e6:9d:aa:d5:be:34:78:56:c9:29:a8:fa:15:b6:a6:
11:8b:cb:06:ea:0b:7e:39:f0:21:67:84:d6:53:eb:84:5c:bd:
72:90:28:86:5e:cc:f2:4f:7e:55:2c:92:9f:fb:ea:bb:9a:a7:
21:c5:2b:58:4f:89:ad:38:86:24:af:b5:d1:2b:69:56:5a:2a:
12:1e:d7:f4:c9:f6:f0:7d:c5:8f:66:e8:aa:74:65:63:24:06:
ad:ed:a6:4e:74:f9:f2:28:45:00:6f:c6:ff:90:25:25:7d:d2:
c5:f0:3c:4b:f5:8a:14:cc:12:1e:2c:be:43:52:26:6b:71:23:
51:fc:72:3b:34:5f:7c:10:a0:7d:4e:31:92:08:b3:92:93:29:
b1:49:ca:43:67:52:4d:3e:aa:12:41:45:df:84:d1:4f:51:b5:
a3:e2:ff:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:07:50 2026 by rpki-client