Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
File: U4LANwL31t1s72Zs4gUxU8mv6Us.mft (raw, json)
Hash identifier: +98AyxLb9sD+g8yNjM/OrDSQW3hrcRlEVo/BwJGruR0=
Subject key identifier: 71:3A:07:3F:76:B1:08:10:F4:CC:65:5A:DB:1C:BF:97:11:7B:54:E7
Authority key identifier: 53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
Certificate issuer: /CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Certificate serial: 019F8FB573724DACB4CF37E0419E2022D0C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
Manifest number: B3
Signing time: Thu 23 Jul 2026 16:01:01 +0000
Manifest this update: Thu 23 Jul 2026 16:01:01 +0000
Manifest next update: Fri 24 Jul 2026 16:01:01 +0000
Files and hashes: 1: U4LANwL31t1s72Zs4gUxU8mv6Us.crl (hash: cj7GNH2jCxFX3unutfdBUCd6m9dNx/PUtx+2goVCeb0=)
2: m_nKiCuVzTi2TKccGiONJSKEB70.roa (hash: S3r/rA3wAxsL4UrMnk+l9Ka3WgxOB/UdzMyaqt2gqiY=)
3: xNohHyHNAtZbFs1TNTPBi4HGfmM.asa (hash: RKzmJOhU01ix0w7bW/M3Ue48L0hu6xJh91dZNeFrjAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:b5:73:72:4d:ac:b4:cf:37:e0:41:9e:20:22:d0:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5382c03702f7d6dd6cef666ce2053153c9afe94b
Validity
Not Before: Jul 23 16:01:01 2026 GMT
Not After : Jul 24 16:01:01 2026 GMT
Subject: CN=713a073f76b10810f4cc655adb1cbf97117b54e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:b1:95:c5:96:d0:5b:74:9c:e7:b3:c2:3b:
98:7b:57:48:1a:c9:88:8c:25:b8:d0:c8:74:3f:86:
78:b1:75:72:3d:be:e6:8c:8b:17:fc:da:25:02:85:
d7:4d:a7:99:dd:08:42:79:3e:79:eb:40:f7:a6:f9:
0b:35:a9:b1:2f:46:88:4b:bd:d4:0c:b4:02:cd:01:
96:55:ef:e6:2e:72:61:74:c9:6b:a0:47:a4:9b:d6:
7a:e2:a5:5e:f2:4f:ea:e3:f8:a6:78:9e:7c:5a:3c:
06:db:21:8e:44:69:32:49:b7:e5:0d:a2:2d:5c:c9:
24:a0:0f:3b:fa:86:d9:86:ef:72:a9:26:94:3c:b9:
3d:71:e2:eb:75:1d:8d:74:e9:89:d7:5a:3a:4a:fb:
c1:22:4c:6a:72:f0:2c:7e:d5:0f:e1:26:36:e7:08:
e3:a9:fc:bf:2f:78:59:f7:36:9b:aa:df:6e:f4:e4:
85:1b:7e:4b:90:f4:e7:60:6a:bc:0e:e3:27:97:86:
21:28:4c:a0:9e:e0:05:4b:4a:90:0f:3c:05:ea:31:
2e:26:43:24:7c:e6:2a:85:b4:b2:a3:96:f4:41:a5:
64:96:25:be:e1:1d:21:f8:87:2f:de:d2:42:5c:a6:
f3:fc:5b:3e:fb:e8:56:90:d5:33:fb:3e:29:f8:8c:
1f:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:3A:07:3F:76:B1:08:10:F4:CC:65:5A:DB:1C:BF:97:11:7B:54:E7
X509v3 Authority Key Identifier:
keyid:53:82:C0:37:02:F7:D6:DD:6C:EF:66:6C:E2:05:31:53:C9:AF:E9:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U4LANwL31t1s72Zs4gUxU8mv6Us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/8dc97e-fefb-4e93-9809-a8aa670f11b5/1/U4LANwL31t1s72Zs4gUxU8mv6Us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:b0:48:c8:02:83:0b:3c:01:53:1b:2d:a3:35:95:0b:e7:7a:
3a:58:b5:5d:d5:b6:45:c9:56:68:10:a4:43:fe:f9:15:35:73:
6e:a2:09:29:4c:ce:22:eb:79:a3:d1:a9:e2:8b:55:7a:41:82:
4d:81:2d:11:74:8f:c7:e6:65:76:96:12:2a:d8:ef:c8:2e:be:
ee:2a:8c:96:b1:82:9d:2b:6e:cf:65:9f:23:3a:9c:9d:cf:26:
31:6a:4a:54:e9:d5:dc:6e:7d:f3:61:24:60:b1:dd:b9:bb:1c:
66:03:6b:ca:ef:8b:54:72:48:0d:6e:d6:ea:26:8b:97:b7:09:
de:d3:45:99:ac:f1:26:d5:83:c1:0c:0a:91:50:e0:04:98:c0:
51:2b:54:9b:49:05:ec:86:4e:41:44:93:be:bc:2e:91:03:ba:
c8:22:13:f4:42:6a:a3:38:ca:1a:5b:a2:93:e0:31:d8:3b:aa:
fe:f2:de:48:c0:11:bc:a1:e7:da:bc:48:ae:ed:60:f8:65:b7:
43:78:a5:36:82:d4:63:e0:ee:80:79:98:82:b7:8d:40:b9:f9:
b8:4a:9a:72:70:3e:43:c7:bd:f2:48:94:03:e4:25:73:4b:a3:
d2:4e:79:d5:60:10:7e:40:6f:4c:a8:26:1e:a2:99:4a:33:5e:
01:9b:2a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:56:18 2026 by rpki-client