Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: 4fR+LZOxTxLysbaMdZLMvE3l4jrNAGXfz/YxrRA5tFQ=
Subject key identifier: B2:5D:42:47:64:21:C6:06:18:68:D2:CD:D2:2F:52:A1:81:67:DA:EB
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 019F927EE59C78F7662F68326A9FB879B448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0B59
Signing time: Fri 24 Jul 2026 05:00:17 +0000
Manifest this update: Fri 24 Jul 2026 05:00:17 +0000
Manifest next update: Sat 25 Jul 2026 05:00:17 +0000
Files and hashes: 1: Efm2bGrofvD9TKo6fR0hCwXyZZY.roa (hash: 8/kSaahEbvJMwKWK7IV2ZU7p4mFsDitwaZrJNwqZgFY=)
2: NDmwsiusftzbyMWBTWDJVW16t3w.roa (hash: vo2FWAXvXazwyLT6897L+Sclc/TCo4ut41EBl8NTSUY=)
3: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: ba4cKGO3Cnrofi4skYpaz3rb3nuFEVNvW+J92I+urTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:7e:e5:9c:78:f7:66:2f:68:32:6a:9f:b8:79:b4:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Jul 24 05:00:17 2026 GMT
Not After : Jul 25 05:00:17 2026 GMT
Subject: CN=b25d42476421c6061868d2cdd22f52a18167daeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:30:72:ed:ba:d0:16:87:fa:8e:99:f0:29:
fb:4c:3e:30:f7:a5:a4:fd:23:79:6c:b0:7c:40:e2:
04:96:f4:08:93:ca:aa:b0:4c:ea:6e:3a:94:bb:13:
3e:5e:ec:0c:e5:0f:5a:3a:43:09:ad:bc:f4:e8:6d:
f0:88:bd:41:4a:5c:23:f9:f5:7f:b8:18:79:25:58:
0d:86:02:44:bf:aa:9c:00:47:01:55:c2:3a:83:f1:
2b:9c:dc:0a:0f:09:84:a0:b8:48:e2:c4:f5:dc:30:
97:4f:9a:be:67:1e:0a:20:7c:64:b9:e2:42:c1:f2:
a7:ca:a9:b5:1e:6e:41:14:47:38:67:dd:28:94:d3:
8f:2d:1e:cd:f9:59:75:c5:93:ce:b9:a0:96:b0:dd:
6c:cf:62:6c:e6:fe:7d:57:f2:fa:ee:17:4a:3f:fa:
de:ef:71:51:2c:c3:6e:3c:65:78:54:ac:1c:0e:8e:
7b:68:e0:76:8f:9c:32:5d:fc:a9:d1:d7:66:65:9c:
50:3d:ff:a2:cd:09:8d:e1:74:67:24:4f:ba:70:43:
f7:f9:45:d5:ef:37:e7:f9:a9:1b:4e:e2:4e:47:de:
c3:ef:f5:0c:f8:9d:12:36:97:c5:ca:63:43:70:c5:
91:0d:f9:43:2e:03:c6:77:b8:70:ad:b2:35:0c:c1:
e9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:5D:42:47:64:21:C6:06:18:68:D2:CD:D2:2F:52:A1:81:67:DA:EB
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:15:c5:6c:b6:c1:c2:09:b9:46:a4:67:ee:0f:5a:55:8d:f0:
ce:0b:90:8b:ce:7f:b5:8c:54:26:66:57:15:75:03:91:6e:4e:
80:c9:28:f0:2e:7a:1d:40:ae:3a:c7:38:50:6f:04:20:9f:ee:
d3:11:c8:6e:04:94:ad:be:dd:48:d0:5e:fd:a0:86:9e:71:4b:
20:de:cc:13:80:42:89:2d:cf:66:ec:a3:40:2f:48:2a:6e:3d:
8b:a5:dd:5a:23:11:a2:d3:9e:71:90:01:aa:5d:08:7b:a0:c7:
70:53:48:bc:11:c4:6b:f9:0f:7d:71:70:1e:d1:cf:a1:cb:4a:
fa:cf:03:07:db:82:e3:11:73:a3:5c:14:c9:98:31:5a:10:59:
12:c1:a5:df:71:df:75:3e:b9:d6:f7:72:5f:e5:4c:12:af:4f:
8c:8c:a7:28:9f:77:7c:b4:0f:3f:0c:38:a0:e5:ac:12:f7:96:
fd:b7:87:53:62:b8:1c:a3:fd:1e:67:10:6f:31:2c:6d:26:e3:
8f:bd:a4:2f:fc:2a:84:e6:7d:87:4f:92:39:24:9e:55:b2:97:
47:5f:57:a8:d6:d3:49:80:11:76:42:6b:b8:97:b2:e8:d7:40:
1c:a1:c1:d3:e4:64:4d:56:fb:fa:ff:60:8d:18:58:d8:86:55:
63:5f:a7:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SfuWcePdmL2gyap+4ebRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyNWQxYzQ5NTViMmVmYmYwMDllOWU0MWIxZTcyZWE2ZGZm
ODI0YjMwHhcNMjYwNzI0MDUwMDE3WhcNMjYwNzI1MDUwMDE3WjAzMTEwLwYDVQQD
EyhiMjVkNDI0NzY0MjFjNjA2MTg2OGQyY2RkMjJmNTJhMTgxNjdkYWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu5Iwcu260BaH+o6Z8Cn7TD4w96Wk
/SN5bLB8QOIElvQIk8qqsEzqbjqUuxM+XuwM5Q9aOkMJrbz06G3wiL1BSlwj+fV/
uBh5JVgNhgJEv6qcAEcBVcI6g/ErnNwKDwmEoLhI4sT13DCXT5q+Zx4KIHxkueJC
wfKnyqm1Hm5BFEc4Z90olNOPLR7N+Vl1xZPOuaCWsN1sz2Js5v59V/L67hdKP/re
73FRLMNuPGV4VKwcDo57aOB2j5wyXfyp0ddmZZxQPf+izQmN4XRnJE+6cEP3+UXV
7zfn+akbTuJOR97D7/UM+J0SNpfFymNDcMWRDflDLgPGd7hwrbI1DMHpdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJdQkdkIcYGGGjSzdIvUqGBZ9rrMB8GA1UdIwQY
MBaAFFJdHElVsu+/AJ6eQbHnLqbf+CSzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQt
NjYyN2E0ZWI1OTYzLzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84MTk1YjMtYzQ3NS00Y2E0LWI0MmQtNjYyN2E0ZWI1OTYz
LzEvVWwwY1NWV3k3NzhBbnA1QnNlY3VwdF80SkxNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADxXFbLbB
wgm5RqRn7g9aVY3wzguQi85/tYxUJmZXFXUDkW5OgMko8C56HUCuOsc4UG8EIJ/u
0xHIbgSUrb7dSNBe/aCGnnFLIN7ME4BCiS3PZuyjQC9IKm49i6XdWiMRotOecZAB
ql0Ie6DHcFNIvBHEa/kPfXFwHtHPoctK+s8DB9uC4xFzo1wUyZgxWhBZEsGl33Hf
dT651vdyX+VMEq9PjIynKJ93fLQPPww4oOWsEveW/beHU2K4HKP9HmcQbzEsbSbj
j72kL/wqhOZ9h0+SOSSeVbKXR19XqNbTSYARdkJruJey6NdAHKHB0+RkTVb7+v9g
jRhY2IZVY1+nYA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:22 2026 by rpki-client