Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: w7INYHXCIMqhsVZLzTqoSGv0hj1rNFXV+zHDcc6DTTY=
Subject key identifier: 87:DF:2F:1D:E4:FE:E4:2B:5D:FF:4A:9B:6A:91:5E:8D:61:61:C0:2B
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019F93C97A9AD24ADECC3F7476C04C1ACB74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 15EF
Signing time: Fri 24 Jul 2026 11:01:22 +0000
Manifest this update: Fri 24 Jul 2026 11:01:22 +0000
Manifest next update: Sat 25 Jul 2026 11:01:22 +0000
Files and hashes: 1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: 9393MRzWPY3245YybLwXlp/0X95BzrMELF15xJiwcq4=)
2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
3: r-wLcfbrV7gSA_iFZTlD40lbPxI.roa (hash: 9BuizisqfHZcVlGBCcKNw9NkVDpUfvizltmHgaebiwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:c9:7a:9a:d2:4a:de:cc:3f:74:76:c0:4c:1a:cb:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jul 24 11:01:22 2026 GMT
Not After : Jul 25 11:01:22 2026 GMT
Subject: CN=87df2f1de4fee42b5dff4a9b6a915e8d6161c02b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7f:99:75:e4:fd:91:5f:fb:5f:b4:df:25:9a:
a0:7a:cb:e4:20:b0:ee:ce:a9:28:44:a3:78:23:8f:
ae:8c:ab:9f:a8:d8:3f:c7:6b:06:35:80:b0:9b:61:
48:13:5e:7e:bf:a5:cd:b6:f9:cb:b7:e4:46:78:b4:
31:74:8e:f8:fa:1f:9d:54:44:53:bc:3f:ba:91:15:
51:5b:7b:d4:d3:8d:6f:53:70:11:85:c3:ae:21:63:
7f:ea:e4:98:ff:16:ff:0e:a9:5b:df:15:f5:5d:07:
90:2b:4b:f1:2a:52:81:4d:69:ab:de:6c:92:c3:c7:
a7:55:ba:ee:d6:6e:0c:af:87:8a:ad:bc:21:5b:0a:
f2:6a:b4:43:89:c9:58:4b:5a:2c:3e:05:70:43:48:
a8:d8:f7:00:3e:a4:3d:2a:b5:9d:5c:9a:38:21:43:
58:8d:17:7f:64:d0:92:81:c5:f5:ed:1c:32:91:49:
17:b2:49:7b:26:5c:ba:a4:87:e7:a6:4c:6c:35:4d:
85:78:c0:db:18:21:b8:0c:e9:fe:98:73:33:b1:9a:
ee:d7:33:b5:75:b0:7e:1f:4b:31:4b:7b:02:30:cb:
be:97:87:2b:61:ca:05:b0:6d:ae:52:47:d0:2e:16:
fd:6e:1f:57:db:08:ec:6e:9d:d9:4d:66:a3:30:b2:
e0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:DF:2F:1D:E4:FE:E4:2B:5D:FF:4A:9B:6A:91:5E:8D:61:61:C0:2B
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d3:2e:b8:34:06:a0:e0:b3:53:98:9f:ea:26:6d:45:c7:31:
51:9f:35:ba:95:d5:f0:4b:6a:4e:c8:a1:c8:4b:41:82:1a:e7:
7b:f4:d7:98:ab:ca:09:ec:47:ad:5d:db:ac:18:cc:16:6f:83:
92:aa:d4:31:5d:54:29:87:c9:6f:5a:e1:ae:4c:cf:f3:5d:c8:
07:10:91:83:5a:de:73:6a:5d:ef:4d:36:18:9a:da:cc:7a:50:
59:d0:15:d3:3a:4e:a3:31:f5:80:c3:2c:6d:00:86:ea:ff:74:
4c:e4:82:d6:a0:b3:27:03:6e:8b:a7:fd:9e:4a:c2:6a:d8:e9:
3a:9d:21:65:26:05:0b:c4:97:f5:79:ac:10:0a:a1:7a:4b:0f:
2d:c8:51:1f:2d:07:cb:12:3f:e8:ea:7f:37:d9:d5:81:a2:59:
54:bf:cc:fd:62:94:9e:03:32:56:86:40:36:f7:69:ed:40:61:
f5:30:dd:65:96:31:f5:d6:eb:0f:9d:64:ab:82:68:af:88:04:
18:e2:1e:1a:87:ec:a3:1f:2a:55:26:99:65:dc:8b:2b:2a:d0:
1d:11:f9:d6:5f:af:33:44:35:0a:ea:b4:b7:4c:85:55:37:9a:
7b:2b:25:eb:02:64:b4:f4:bb:ca:f8:25:5f:d8:e5:88:11:c5:
63:d5:c9:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:03:27 2026 by rpki-client