Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
File: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft (raw, json)
Hash identifier: F/BQitwB8CiNjKEDCyi2dqBGdoDRCC3v13QQiu71TEY=
Subject key identifier: 8D:A9:EE:8D:F6:2C:39:BE:12:10:B5:05:E1:4C:3E:4E:0F:8F:93:D3
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 019F91A3DD8C0F9BF8866E7161B85B4F70BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
Manifest number: 41
Signing time: Fri 24 Jul 2026 01:01:03 +0000
Manifest this update: Fri 24 Jul 2026 01:01:03 +0000
Manifest next update: Sat 25 Jul 2026 01:01:03 +0000
Files and hashes: 1: aHiGs_kfVS1DoiuEnfjlUZrGV7M.roa (hash: FlQ4woD6r87CTo56VrPgZyPlvImZWFoOO8xKo56dALc=)
2: aKvA2sGDcrQ9MX1z85xud2IcwQ0.roa (hash: K4dwopOx/n4SNP6oBK4GBq75QTWYS4KcSRrgSdwWp/I=)
3: u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl (hash: Mu49oDx7gwMSzOquYfv0SbFkocnQqbuDPSH4d8FUiY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:a3:dd:8c:0f:9b:f8:86:6e:71:61:b8:5b:4f:70:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Jul 24 01:01:03 2026 GMT
Not After : Jul 25 01:01:03 2026 GMT
Subject: CN=8da9ee8df62c39be1210b505e14c3e4e0f8f93d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:9c:06:4f:29:af:84:86:4d:63:1e:3d:76:
c2:39:af:ab:0e:6d:fb:ad:89:ee:3f:7b:b4:bf:27:
c7:5f:98:8c:ae:86:27:7b:5d:ba:e0:b4:69:84:34:
67:c2:45:40:dc:ec:ab:d4:e2:41:e9:7f:66:fc:0d:
a7:9c:30:da:8a:04:3d:52:6f:cb:e7:8d:2a:cc:37:
8d:76:e2:04:48:0d:e2:9e:fc:24:7b:90:6d:bb:ee:
f2:33:ae:a2:1c:b3:28:fb:b6:23:a3:05:cd:57:a3:
c2:72:49:3a:db:67:ab:08:a5:d9:94:99:32:aa:75:
4c:36:30:75:20:b1:9b:f9:2f:56:85:ae:0d:59:bf:
e8:34:92:2f:3a:29:50:99:26:7a:f7:25:12:f3:2b:
ce:3b:ec:ef:2c:dd:22:88:99:c0:95:08:20:9a:e7:
f9:d0:25:e1:c9:5d:f4:eb:e4:19:76:2a:44:93:28:
d9:b3:1f:0c:0f:4c:e6:b3:be:e8:08:c5:14:fb:c6:
83:81:91:62:1f:83:7d:0e:7c:0a:01:d3:65:ef:75:
0c:46:2b:ec:5b:91:cc:d6:cf:42:69:03:26:1d:1e:
30:9b:7b:a9:ed:cc:2f:32:a7:38:a7:32:25:c5:a9:
c6:c7:df:15:e9:4a:8a:6b:24:cf:7c:de:14:9e:e3:
25:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:A9:EE:8D:F6:2C:39:BE:12:10:B5:05:E1:4C:3E:4E:0F:8F:93:D3
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:df:bc:dd:a1:3a:b5:84:82:e4:2c:c5:e7:be:65:b4:a4:9f:
6b:c4:ce:0d:21:75:56:ee:f7:c7:53:21:9b:91:ab:2b:cc:10:
e2:f6:d2:f2:23:a0:51:f3:08:b4:bb:7e:ee:d5:d2:e7:ae:2f:
ca:0a:d0:30:77:93:0f:43:02:ee:e5:45:57:f3:21:58:50:db:
99:9b:c0:64:5d:93:3a:26:54:f7:97:fe:81:c0:8b:2c:8f:0b:
60:10:b4:96:b5:d0:6f:fc:72:5f:20:14:5f:81:fd:aa:53:17:
55:50:1b:7b:78:34:ca:9e:98:2b:f6:52:1c:99:5e:27:b3:bf:
ba:1c:cc:2a:2d:29:14:8d:c3:98:73:2d:da:99:d4:b9:0f:d3:
a5:da:15:38:2d:92:65:7e:5f:80:cb:a1:85:db:61:43:b8:a4:
61:8f:5d:bf:11:4d:34:af:0c:a7:84:66:c1:55:0b:ce:92:47:
a1:5e:ed:ca:bd:a1:b3:81:38:bb:7b:e2:96:5f:9e:1c:09:19:
c2:ab:52:50:55:48:f5:fe:9d:d7:0c:18:12:88:d8:56:f9:11:
23:56:e0:b1:7f:a7:2a:00:33:52:ef:75:78:da:d6:92:f5:70:
f8:a5:cb:38:75:4a:b1:e8:27:fe:53:20:d2:58:bf:1c:4b:b2:
51:07:62:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:15:12 2026 by rpki-client