Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier: iwvFvZTzCSzDktO+thM3vssb4Zb2ZIfwrDxGLawQPUw=
Subject key identifier: 8E:A4:71:E4:4E:3C:75:18:E4:0E:EC:EF:70:0E:16:53:BF:7D:EA:BB
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial: 019F94371B58313A2AF8109F7FF60471478A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number: 032A
Signing time: Fri 24 Jul 2026 13:01:07 +0000
Manifest this update: Fri 24 Jul 2026 13:01:07 +0000
Manifest next update: Sat 25 Jul 2026 13:01:07 +0000
Files and hashes: 1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: rTPx2LVUKkNnaQ3MpnM6QiHHF+zHXpg8hXoOoEO2o14=)
2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:37:1b:58:31:3a:2a:f8:10:9f:7f:f6:04:71:47:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Validity
Not Before: Jul 24 13:01:07 2026 GMT
Not After : Jul 25 13:01:07 2026 GMT
Subject: CN=8ea471e44e3c7518e40eecef700e1653bf7deabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:3d:ab:f8:1e:eb:65:c3:a3:cd:f1:f6:91:b8:
e5:4f:48:a6:4c:49:cd:7d:01:41:b4:ba:b6:f9:e0:
f2:a6:7b:81:6f:5a:e5:54:bf:26:21:48:c6:84:c0:
fa:e0:39:07:8c:d5:2c:c2:45:ff:66:d1:7a:4c:28:
e0:8c:79:c2:01:94:4f:65:ff:b6:fa:01:e3:8e:0f:
ba:38:94:bf:d3:51:bd:00:a8:53:ff:02:92:4e:f2:
f1:19:74:8d:29:dc:c8:69:d9:79:4f:21:ec:ab:09:
f4:a5:65:b3:36:db:3a:79:a0:4d:50:b8:95:13:52:
c1:a4:23:74:41:cb:6c:69:70:02:80:a4:e9:03:1d:
6d:61:1c:22:d1:ea:25:81:91:ee:2b:e5:c7:8e:bf:
47:ed:55:a7:92:5d:a8:f8:55:7c:59:c2:3a:62:39:
c1:76:44:d0:bb:0a:72:d8:74:2a:0c:96:45:99:09:
af:ea:5c:81:0b:b0:90:19:98:ec:5c:f0:dc:92:2d:
f4:44:2e:c9:61:6f:b3:1d:eb:73:ca:dd:c9:b4:96:
1d:9b:0f:c9:83:90:de:cc:ad:63:a9:b1:7c:be:b5:
f6:00:4d:0b:2d:64:cd:03:f2:11:c5:e6:aa:25:3c:
30:50:d4:a4:e7:44:f7:f8:4f:26:ba:24:5c:68:b2:
9f:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A4:71:E4:4E:3C:75:18:E4:0E:EC:EF:70:0E:16:53:BF:7D:EA:BB
X509v3 Authority Key Identifier:
keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5d:6f:18:00:58:8e:b0:08:3b:ce:de:cc:d1:a5:df:a4:c7:
2c:4f:c5:73:10:07:99:35:de:11:89:5e:03:79:3a:3e:cd:62:
d5:1a:48:5b:52:d2:99:57:a6:27:6d:be:8e:15:6d:b7:e7:59:
c6:46:fc:4a:8e:17:78:7e:b3:88:f7:62:1b:b5:b2:e4:fa:a4:
c7:d2:71:6b:9d:ed:f7:3d:5e:93:c2:49:54:d7:a1:e4:1d:3b:
0c:17:de:cf:c1:f1:37:e9:74:cc:c5:50:31:01:0f:bf:4b:8a:
b6:39:88:7e:e2:e3:4e:53:98:6f:b2:05:53:ec:07:43:ed:38:
52:e4:20:2c:e7:fc:25:6d:27:04:65:e9:8f:ef:01:0d:27:b4:
95:08:0f:17:f0:be:d4:6e:26:f1:92:68:83:b3:45:c0:1e:6a:
b6:cc:77:c0:ba:13:7e:ab:74:9e:4a:a2:03:96:05:64:85:27:
66:98:cf:c9:ee:19:f9:92:a1:a9:65:a5:a1:56:c8:ee:c4:52:
84:a3:03:c4:01:9e:19:69:41:8c:8a:a4:49:e1:86:11:eb:c1:
ec:5c:b8:c6:b1:76:e1:63:14:11:78:b5:60:16:16:ba:71:d3:
92:45:b9:36:b6:27:f5:d2:32:01:69:0f:ac:02:ba:79:7a:fa:
56:82:fe:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:56:31 2026 by rpki-client