Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: yQL/IAkjLUUD+vdw/6KaOEdmysb18q/AXnALI5t42aY=
Subject key identifier: 3A:20:C0:B4:8C:AD:21:1C:CA:C4:C1:3C:CE:F0:3D:68:57:3E:35:F1
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 019F93C93EA5B6757ECA80F6570DB501E929
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0E34
Signing time: Fri 24 Jul 2026 11:01:07 +0000
Manifest this update: Fri 24 Jul 2026 11:01:07 +0000
Manifest next update: Sat 25 Jul 2026 11:01:07 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: GjC+wpNNxBLRa0du2o66/yKm1Ju/iYsN02Vgj6yeCLw=)
2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:3e:a5:b6:75:7e:ca:80:f6:57:0d:b5:01:e9:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Jul 24 11:01:07 2026 GMT
Not After : Jul 25 11:01:07 2026 GMT
Subject: CN=3a20c0b48cad211ccac4c13ccef03d68573e35f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:92:61:0b:2a:e3:cd:7b:82:8f:15:76:1e:9d:
3d:f0:0c:37:67:da:42:db:21:14:fe:05:cd:44:b2:
69:33:25:52:86:01:59:0f:52:4d:27:0d:24:a2:d6:
f8:c4:10:eb:ee:b3:fb:a1:64:04:8a:f4:ad:31:7a:
87:0c:36:db:8e:9f:0c:6b:70:66:46:7f:0d:de:1c:
c0:fe:85:54:09:8b:2d:d4:35:c5:2a:a8:eb:3c:95:
c0:ba:4c:06:d2:d2:8d:d9:2b:66:66:d9:fa:58:70:
dc:71:8d:0f:36:93:7a:93:f9:76:9b:b9:76:53:7f:
bb:57:87:de:23:25:28:3d:12:27:74:ed:cc:57:ed:
e5:b6:71:17:a4:c1:fd:93:d1:ea:c7:65:84:22:55:
d0:41:8c:10:36:7d:bd:f3:bb:16:8c:e8:97:d5:96:
d7:7c:95:0b:f8:86:25:72:ab:20:b6:1e:9f:61:b3:
0a:7f:80:13:88:b7:bf:2f:dc:72:34:03:f6:93:b7:
10:bf:fd:ce:c0:4b:1e:24:f0:2d:0a:65:98:a1:41:
10:2b:0b:46:32:4c:99:36:63:ac:19:b0:cf:90:bb:
d7:4b:29:e0:93:f7:05:a5:16:32:29:88:1a:fc:98:
1e:80:27:89:b0:22:19:5c:16:f2:ab:a7:3b:ba:8d:
ba:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:20:C0:B4:8C:AD:21:1C:CA:C4:C1:3C:CE:F0:3D:68:57:3E:35:F1
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:af:f4:0c:44:6a:f7:13:13:58:34:96:52:e7:9b:29:f0:15:
29:05:f2:74:0f:e3:94:6c:83:43:a0:f3:e7:e5:89:55:2f:ae:
6e:d6:27:be:2f:24:6b:5c:23:dc:46:09:14:44:0b:f0:fa:fc:
9c:0d:91:1a:ba:29:f2:0b:68:0a:55:5f:a4:ad:91:2d:c9:d6:
33:9c:61:19:a3:2c:28:c8:b5:b0:9e:84:ef:5c:a4:8d:6b:16:
99:9a:a1:05:62:9c:c5:84:bb:81:85:cd:44:b6:20:15:09:a5:
4f:fa:8a:15:be:39:5c:ec:28:14:d6:87:2d:5f:e8:25:45:74:
cd:0e:ba:75:f9:7b:55:bd:b6:be:f0:4a:f9:89:9d:95:0d:2f:
ac:59:4d:dc:e9:42:a6:5f:5f:da:1e:f2:12:ce:20:30:a8:f5:
f7:a8:16:d5:61:0f:55:4b:8e:0c:b7:53:06:4b:21:e1:42:81:
6d:bd:f9:7d:47:ea:fc:d4:13:77:cb:95:76:67:38:70:51:64:
39:1d:4d:62:da:f4:b8:75:43:a8:44:af:85:1e:a5:96:79:dc:
a0:95:a5:66:05:40:2c:72:19:76:22:3f:86:ae:19:31:8c:6f:
00:b5:bc:3d:85:8c:e0:30:0f:3f:ba:65:40:80:1a:6c:da:c8:
4a:10:ed:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:51:52 2026 by rpki-client