Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
File: UkEeUtq30L4mdDE7a10udL0RNg4.mft (raw, json)
Hash identifier: 7IFQ0DxltbsA9l5qFQBitVlMHjgt3iapn4dcU0sN0ic=
Subject key identifier: 0B:49:D6:E6:FD:12:F4:98:94:FD:73:20:31:59:92:3A:88:47:51:BA
Authority key identifier: 52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
Certificate issuer: /CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Certificate serial: 019F93921D61D2A441C5B3A77E4775424FED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
Manifest number: 11BE
Signing time: Fri 24 Jul 2026 10:00:54 +0000
Manifest this update: Fri 24 Jul 2026 10:00:54 +0000
Manifest next update: Sat 25 Jul 2026 10:00:54 +0000
Files and hashes: 1: UkEeUtq30L4mdDE7a10udL0RNg4.crl (hash: ofxcslZ3V75Y1koVKaRPQORsEB6kf71G2EOghbu/xx8=)
2: Wf-ksTwxo7Sq0plKXRXEi63Vqfc.roa (hash: 7+Wwaoq9oqFjf/pv4r/VE2mNMQO06GEpJG3+nVsxTaM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:1d:61:d2:a4:41:c5:b3:a7:7e:47:75:42:4f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52411e52dab7d0be2674313b6b5d2e74bd11360e
Validity
Not Before: Jul 24 10:00:54 2026 GMT
Not After : Jul 25 10:00:54 2026 GMT
Subject: CN=0b49d6e6fd12f49894fd73203159923a884751ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:5a:3a:7e:7a:b6:4b:57:1c:4b:1e:9d:f6:bd:
61:a2:f7:38:bd:82:ac:0e:33:ce:a8:6a:6b:77:fb:
81:a6:77:ee:e3:18:68:e2:8a:df:81:77:c0:df:8e:
03:e5:60:bf:d7:2f:8c:d0:f6:43:e1:df:0c:d2:f3:
9c:dc:a4:21:76:ac:e1:de:3f:ab:87:6e:2b:a0:13:
d8:2a:dc:31:29:b6:99:3f:90:e0:7e:39:3f:b2:4b:
97:b9:33:36:db:a2:36:df:37:2c:ee:3f:77:dd:3f:
6f:cb:ef:e6:02:89:81:80:11:12:1a:8b:2b:97:b8:
4a:bc:92:29:88:1f:89:5e:09:42:97:10:eb:c6:ed:
20:1e:ac:59:8c:ba:19:10:13:01:51:82:ef:2d:97:
76:2c:cf:ef:a2:6b:a0:43:0d:a5:2d:8a:c7:8b:18:
fe:ff:ec:4b:f8:14:14:84:c4:18:e1:00:2d:8f:b5:
e8:32:c5:4f:f0:34:7d:43:3d:a1:cd:d9:c4:cb:a8:
a8:9c:28:65:32:a3:a0:a4:34:6b:b1:81:d1:72:82:
4e:70:c1:70:5a:81:1c:d5:4a:60:1f:ab:e3:bf:23:
96:ef:15:0a:f8:5a:d0:52:2a:fd:07:8e:91:6a:15:
73:b5:fd:fd:2b:5f:5f:2e:6b:07:85:e4:70:9a:d8:
4c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:49:D6:E6:FD:12:F4:98:94:FD:73:20:31:59:92:3A:88:47:51:BA
X509v3 Authority Key Identifier:
keyid:52:41:1E:52:DA:B7:D0:BE:26:74:31:3B:6B:5D:2E:74:BD:11:36:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UkEeUtq30L4mdDE7a10udL0RNg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9b1d85-7198-4af6-a632-d0cfe43016de/1/UkEeUtq30L4mdDE7a10udL0RNg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:15:a0:0d:35:6e:7b:98:5d:c6:bc:f7:8f:00:1d:1a:94:b0:
d8:a3:ba:24:5e:a9:5a:25:69:f6:f4:a1:ca:6d:b1:67:d6:6d:
ff:5d:75:aa:6f:30:a9:0a:a7:8f:a4:98:32:ba:bd:39:46:2c:
b7:85:17:c2:24:fa:9a:f3:8b:f1:2f:6c:8f:22:30:1d:ce:d1:
01:47:48:c8:c3:05:97:c7:f1:60:ae:43:a9:90:6f:8a:f2:f5:
06:a2:51:fd:46:b5:37:18:c8:00:0d:82:7d:12:05:ec:03:4e:
e1:e3:c8:2e:3a:7b:b5:30:2e:80:66:fb:cc:d7:ec:13:6e:d8:
54:b5:c3:4d:0a:ab:9c:52:59:64:d2:6f:06:12:91:15:e1:5d:
e8:59:5b:38:a1:3e:03:ca:df:39:b9:15:ce:77:e3:d5:aa:2c:
84:f9:88:d0:7b:f2:d9:30:65:78:52:eb:a8:00:d4:a3:fb:b0:
a5:03:d1:7c:4e:35:c9:95:10:a4:d0:52:4a:24:23:22:09:f8:
8a:b0:33:01:ee:01:b1:7d:a9:c3:e0:b8:2b:5c:11:f9:41:de:
1a:bc:15:3c:5a:5b:89:7f:e9:03:b1:74:e9:cd:69:e3:e0:39:
50:33:9b:01:2c:86:91:e2:7f:e5:6a:d2:64:51:23:55:47:84:
c4:d6:d0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:17:09 2026 by rpki-client