Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
File: urXl5gHL9dGdENTbR2qSOzs2-Cc.mft (raw, json)
Hash identifier: OydbskV/4WZ+x17OdHnV6L14Cxn1iz6cJvwbudqTqY8=
Subject key identifier: 60:B3:47:1A:B9:00:77:B1:9C:EA:2F:33:F7:9C:08:3E:8C:6E:E1:D6
Authority key identifier: BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
Certificate issuer: /CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Certificate serial: 019F8F7CE415E28B697C134AB2C769D8BA42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
Manifest number: 19C9
Signing time: Thu 23 Jul 2026 14:59:14 +0000
Manifest this update: Thu 23 Jul 2026 14:59:14 +0000
Manifest next update: Fri 24 Jul 2026 14:59:14 +0000
Files and hashes: 1: 8AC5hr87IvNKc2uj2TEkr-2Z034.asa (hash: qt1zTECZT/ge+oHl/7hzl6IVpmrHO5U65Ej5M0jkaj4=)
2: aVA1AKv4zyiYGjxlH-mPLS_YW_U.roa (hash: SWC8hkYko2ZloQTKC6mTiTzHPA/u0KsHmhT+8vSmcgE=)
3: urXl5gHL9dGdENTbR2qSOzs2-Cc.crl (hash: RmdVEoAiaD7hIhV9N9GN/cbHEP8w7lh1fk+VhOo5uSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7c:e4:15:e2:8b:69:7c:13:4a:b2:c7:69:d8:ba:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bab5e5e601cbf5d19d10d4db476a923b3b36f827
Validity
Not Before: Jul 23 14:59:14 2026 GMT
Not After : Jul 24 14:59:14 2026 GMT
Subject: CN=60b3471ab90077b19cea2f33f79c083e8c6ee1d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ea:40:a1:6a:b3:db:92:89:63:f6:2d:a6:45:
66:7f:18:a8:6c:b2:cc:8f:4a:8e:a3:f9:17:a4:90:
73:17:c6:52:f2:a6:fd:d3:47:3f:3d:7d:d8:ea:f6:
16:2a:54:b4:06:ef:75:89:31:c3:22:17:d8:80:05:
07:d9:45:a0:62:9a:f6:33:91:fb:2e:45:1e:c4:29:
66:c1:79:a5:af:7b:26:2d:6b:db:59:08:3f:ae:e9:
a2:3e:fc:79:f2:a3:1b:91:3b:84:0e:86:ee:23:af:
9f:16:86:02:67:61:a6:77:37:25:2c:38:d6:42:f0:
43:b2:73:e2:7f:e0:50:78:e5:88:07:38:d7:db:72:
00:ce:5f:6c:a7:92:00:58:11:16:79:9e:67:4b:da:
39:55:26:93:1e:c1:5d:b6:9a:1b:73:6f:dd:6e:b8:
44:65:65:95:48:e6:8f:d8:dc:ee:98:90:51:16:fb:
57:1a:db:9f:cd:c2:c5:8a:95:55:f7:05:7a:19:60:
57:4f:79:8c:e9:82:77:2c:bd:f5:13:b2:52:b9:45:
95:a6:07:c8:65:d3:23:2c:1e:f4:b2:6d:96:b1:ac:
06:3b:44:59:04:9e:7e:a5:4f:4c:63:64:a4:a4:28:
19:97:1a:39:33:25:4f:44:1d:06:aa:a9:3b:b6:1a:
e1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B3:47:1A:B9:00:77:B1:9C:EA:2F:33:F7:9C:08:3E:8C:6E:E1:D6
X509v3 Authority Key Identifier:
keyid:BA:B5:E5:E6:01:CB:F5:D1:9D:10:D4:DB:47:6A:92:3B:3B:36:F8:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/urXl5gHL9dGdENTbR2qSOzs2-Cc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/00df29-5022-405e-895d-77ca89cf436a/1/urXl5gHL9dGdENTbR2qSOzs2-Cc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:6e:07:15:a0:e2:29:22:d3:d8:7c:4f:77:cb:0c:13:30:45:
f9:01:88:ee:56:36:84:ce:55:b7:9a:1a:ef:c9:24:4b:5c:b5:
ea:3e:03:1a:ad:4a:01:28:c0:1d:f0:78:9f:3a:7a:ba:5a:16:
bb:44:cd:45:64:89:92:67:5e:f2:e0:7b:05:f4:b9:a2:2c:ed:
13:09:4c:be:53:e3:70:46:87:d0:7e:28:f5:5d:fb:fe:29:94:
cf:ad:cc:b5:1e:fc:12:f0:b2:42:fd:f0:ac:ac:a2:68:c0:f5:
f2:e3:a8:0b:f1:c5:f0:58:38:67:ae:8f:56:19:24:ea:5b:3c:
96:26:3a:d6:da:20:5f:dc:f5:e6:5d:dc:ce:31:c4:c4:2f:a1:
57:64:ac:dc:fc:86:c1:27:40:4a:33:c0:b5:e4:cf:9f:43:21:
b7:d0:a2:51:75:7f:5c:26:0b:06:ca:ca:3f:85:ee:77:49:95:
f2:dd:6c:21:af:c4:2a:3a:9c:13:a4:8c:5a:a5:3d:07:b1:c4:
44:e0:94:03:0c:b5:0a:1e:84:fc:b8:8d:b8:0f:a1:0e:9f:8e:
79:f6:7d:2a:39:fa:e9:a0:75:73:53:21:d0:5b:98:14:8c:7c:
9f:bd:cd:5d:9b:b4:f8:70:4e:d2:6b:96:7d:6c:d7:63:db:65:
1a:32:69:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:43 2026 by rpki-client