Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: 3jdbe8s6GLcM6v1JY1NNnONtF0bRinFXELrNgmZxsYY=
Subject key identifier: 17:1F:20:00:F5:49:35:13:30:75:17:11:84:BF:8F:80:E9:0A:9E:64
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019F9135C3119F40881849D8ED6BFAD6F966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 19D0
Signing time: Thu 23 Jul 2026 23:00:47 +0000
Manifest this update: Thu 23 Jul 2026 23:00:47 +0000
Manifest next update: Fri 24 Jul 2026 23:00:47 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: JhLR+PcmrSBJmLz475/VFrN9teNoA5zHKkYQgTL4epc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:c3:11:9f:40:88:18:49:d8:ed:6b:fa:d6:f9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jul 23 23:00:47 2026 GMT
Not After : Jul 24 23:00:47 2026 GMT
Subject: CN=171f2000f54935133075171184bf8f80e90a9e64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:fc:4c:09:b2:31:11:83:22:eb:de:4e:0b:ae:
98:9f:d1:97:95:47:81:31:e0:25:83:12:12:5b:17:
c5:fd:52:9d:e3:14:b5:2d:d4:1f:d5:22:4c:7e:68:
73:50:59:fa:72:a8:02:bd:35:52:63:f0:68:ea:b8:
0e:01:66:eb:db:c6:ba:c5:e6:1e:d9:46:3f:3e:2e:
00:dd:37:04:03:6e:13:d4:31:ad:74:ea:25:33:5d:
c3:6d:4d:2c:32:56:df:f0:ce:af:03:f3:47:ab:e2:
03:7c:a8:5a:21:8a:12:cf:fb:6a:5b:12:74:0c:4b:
1c:0e:94:11:13:ae:a3:22:b9:8d:dd:6f:bb:df:08:
8f:ad:75:94:45:9a:bb:ce:fc:ee:ff:d8:71:df:4d:
d3:5f:82:3d:f2:bc:f9:52:1f:dc:48:98:31:9a:6f:
2b:2a:92:6c:67:de:a7:ea:c8:c1:4f:89:96:87:fb:
22:1e:8e:5b:c7:ac:1e:ed:97:90:4a:88:55:15:f1:
bb:22:5a:81:5c:60:e9:3a:01:ed:76:26:a9:9b:48:
f9:47:ef:8c:2f:d3:31:1a:8e:3a:80:c8:3c:50:15:
8f:72:1d:ba:c9:f8:0a:c9:2f:3c:fc:84:13:3d:73:
d5:c0:ba:68:42:0a:f5:03:ec:8b:72:45:bc:c7:fd:
e5:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:1F:20:00:F5:49:35:13:30:75:17:11:84:BF:8F:80:E9:0A:9E:64
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:19:71:a8:e2:9d:45:79:6b:92:a5:a8:85:6c:c3:6e:01:43:
28:f3:2a:7e:ae:5b:d1:00:75:31:de:0d:31:4b:69:90:71:71:
5b:1f:1b:1d:ef:4b:37:de:f7:86:1e:18:c1:6a:20:28:6e:af:
ef:c6:40:09:bd:06:ce:96:d2:bf:80:e3:3b:b8:67:9e:a3:27:
eb:c5:1d:cc:b5:ba:28:14:69:fe:07:89:f9:c0:63:cf:08:40:
ea:9f:83:88:66:4c:ea:b1:31:a4:b6:39:31:e2:bd:94:4f:5c:
7d:9b:df:e3:37:bd:fe:8d:93:f5:ec:4e:7a:b1:72:aa:a6:83:
f3:16:69:96:f0:24:c2:e9:94:06:53:69:08:59:65:d7:48:09:
6e:c3:5f:3e:14:57:bc:23:71:a5:ed:6a:66:a0:97:dd:2d:20:
77:fe:4b:2c:f1:2b:ce:fb:b0:1f:8e:12:c3:10:7b:ac:93:c3:
ab:e0:44:d5:f8:31:75:68:e2:91:3b:4f:6f:14:60:6f:25:a2:
14:98:fb:e7:e7:16:33:be:c2:30:96:58:4d:84:bc:f7:7d:53:
b1:88:ca:08:e8:62:8d:31:3b:80:63:26:c6:b1:b1:a9:c8:e8:
2d:83:9e:ce:7f:65:28:25:0f:30:74:31:33:09:23:4f:82:4a:
86:0f:7c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:43:28 2026 by rpki-client