Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: fmkmzrVzAobFtFA2rYL3Wmf62oNy+a0s0vibHF8CJXU=
Subject key identifier: 02:32:DE:0A:D2:E7:74:B0:3F:35:A6:F7:F6:EF:A3:24:03:4B:7B:C6
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019F94DC4503D001B5EC58BEEA83874180A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 16:01:31 +0000
Manifest this update: Fri 24 Jul 2026 16:01:31 +0000
Manifest next update: Sat 25 Jul 2026 16:01:31 +0000
Files and hashes: 1: S_bLPS21FFHSFgzqZbLQgGjdapU.roa (hash: ntP7qUH7mD4+qqNvUodX6WEcYgeevuhwX8/sIbaDqz4=)
2: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: 9GSBwzXhfU6NWbv3EB8QTe8se8lc1JOkXSZqwHqTJNQ=)
3: vuogQOiw-NsRjP2TO25Dr4VGU1g.roa (hash: /xeIMQbmMftTFD0OnGKJGQk5eie+bKtG5JesE4wKpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:dc:45:03:d0:01:b5:ec:58:be:ea:83:87:41:80:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Jul 24 16:01:31 2026 GMT
Not After : Jul 25 16:01:31 2026 GMT
Subject: CN=0232de0ad2e774b03f35a6f7f6efa324034b7bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:85:ec:b5:a9:34:a3:25:f1:bc:9f:19:d7:dd:
ab:18:98:0a:dc:6d:94:a5:ee:5e:a4:bd:c0:3a:b6:
8a:1a:93:b8:b6:cc:ef:ce:90:1b:ad:fd:82:b6:69:
24:db:85:5a:56:1f:1a:cc:65:2a:55:64:12:04:47:
02:4f:b8:cb:6d:90:f2:3a:dc:1c:f6:69:7e:5a:dd:
26:55:e4:e0:a6:f5:91:1f:1f:aa:09:97:3d:61:bc:
84:23:7d:bd:fc:3b:b5:de:a6:9b:a5:32:78:1a:b4:
d4:5d:c2:da:56:8c:01:98:88:17:af:a1:8f:e6:13:
06:fb:62:5b:d4:2d:d4:91:54:21:56:e4:94:50:32:
ea:f5:09:71:3c:35:19:da:95:92:3d:fc:09:6d:84:
cb:e6:8d:17:45:0c:3a:3a:91:eb:40:22:45:39:7b:
11:35:70:ed:e0:55:35:fc:0b:92:a8:f4:b1:82:05:
f7:a9:d7:25:47:ed:a6:db:e2:0b:37:31:e8:63:63:
22:10:3a:24:3e:40:e2:2d:9f:ab:43:b6:9b:7d:ae:
4a:b8:80:59:f6:6d:9c:4b:5c:da:d1:45:06:8f:d2:
19:93:76:43:74:17:1b:b2:52:44:b8:29:2d:20:69:
df:dd:16:3f:22:09:9f:7b:13:2a:cb:6c:ca:84:dc:
8b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:32:DE:0A:D2:E7:74:B0:3F:35:A6:F7:F6:EF:A3:24:03:4B:7B:C6
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:62:4a:02:a2:6d:94:be:8d:be:bd:c7:60:f9:4e:e7:71:d9:
be:4a:fa:54:7e:0e:81:e4:5b:ca:d5:1c:7f:03:7c:61:cc:2c:
a3:4b:d8:c9:20:4e:33:cd:71:17:9a:b2:18:a5:79:e8:7c:35:
14:9e:2b:55:11:45:d2:ac:f7:d2:bd:8b:27:87:dc:a0:f1:b4:
87:ce:93:90:36:22:67:61:a8:d4:c0:f1:a3:5d:55:8a:c4:46:
72:14:53:b4:06:13:68:f7:5d:68:b4:70:2c:db:82:eb:ce:eb:
5f:33:c2:82:25:6a:41:f5:49:4d:03:49:45:c4:ba:1c:57:d1:
60:a3:40:44:df:4a:7a:2d:f6:27:3f:c6:bf:e8:11:2a:b6:31:
db:7e:fc:56:c4:64:ff:46:64:c0:7c:6f:05:cd:88:19:a6:23:
c4:e2:b7:f2:1c:d5:f3:27:fd:9d:01:b1:e1:f4:0d:e7:21:59:
8e:f1:df:fa:e1:0c:a8:be:b5:c5:53:e5:5a:c4:ef:88:63:2c:
74:fd:55:e1:93:8b:cf:f2:80:e7:04:17:1e:90:d9:34:82:6c:
c4:51:34:95:20:72:20:e3:06:b5:49:6b:01:a9:4d:d3:3a:f6:
f0:60:bd:39:c9:db:75:17:11:19:0f:7d:d0:f5:62:9b:df:ee:
2b:88:77:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:31:32 2026 by rpki-client