Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
File: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft (raw, json)
Hash identifier: NppfmWQc1sceqSQP4a4+WDPre6N5bU4w66hTmSABKZY=
Subject key identifier: BC:BB:51:D5:38:5A:D8:CA:5C:94:52:A1:45:1B:88:FF:1E:51:FA:0C
Authority key identifier: 53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
Certificate issuer: /CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Certificate serial: 019F91DA6A2DB215B47CF82B74FA3279E79C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
Manifest number: 19C9
Signing time: Fri 24 Jul 2026 02:00:37 +0000
Manifest this update: Fri 24 Jul 2026 02:00:37 +0000
Manifest next update: Sat 25 Jul 2026 02:00:37 +0000
Files and hashes: 1: IvGUn_2-YX3IhLfXSvYGkrdm6NU.roa (hash: tNs9qrcIboBy4IbyGsAG+6ZLzNLrX28RoLdHaH5fRLc=)
2: U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl (hash: ojxOPHAQ2xvWjc98wxW5svXvJ05WgV8Wt7z3v87WBjA=)
3: ykl9L1ieIhGIofGi7fpGhZ_4q9o.roa (hash: SVH2fs99Ob8T2U4b3+XfOBMnnh8VK7bnsIv441zI1CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:6a:2d:b2:15:b4:7c:f8:2b:74:fa:32:79:e7:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5376467ef0921c51190e2ea60f2abb3bd6e9c19f
Validity
Not Before: Jul 24 02:00:37 2026 GMT
Not After : Jul 25 02:00:37 2026 GMT
Subject: CN=bcbb51d5385ad8ca5c9452a1451b88ff1e51fa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:61:39:e2:fd:49:ca:d3:f4:cf:97:43:aa:
d5:ad:cd:64:0e:b6:6b:44:0f:a3:76:49:6c:1a:f7:
b6:7f:53:64:aa:fa:f2:51:f0:87:c8:b5:af:30:d0:
90:68:3f:d2:2f:65:a6:9c:10:b1:e7:0a:3a:20:28:
84:39:fe:91:29:f3:83:14:2b:ad:76:3a:cc:b0:d2:
79:f5:ea:a2:1f:f8:8d:a3:2f:35:4a:b1:86:92:b2:
f2:0f:41:7d:b6:6a:dc:6b:5a:3d:07:4b:79:fa:69:
84:90:aa:fe:e3:f7:f8:ca:ce:ed:9a:c7:ef:40:8d:
9f:08:e9:07:b4:26:f2:09:a8:48:89:bd:56:5b:7a:
fd:9d:12:3b:2d:fa:a7:4c:cd:cb:d1:ae:44:c6:d2:
44:48:7b:1f:57:07:ce:5f:bd:9d:77:12:c6:92:56:
a5:d4:c3:2c:70:31:92:70:70:5a:49:31:8b:20:ec:
cc:45:03:03:f2:72:4e:46:c7:55:15:08:4c:d0:5a:
bb:3b:0a:a7:61:e6:ad:fd:17:c8:b7:4a:d5:08:54:
0d:de:5a:8e:64:84:9d:c9:41:14:de:23:e2:d0:29:
02:cd:ae:13:cc:45:d9:52:aa:d3:9a:88:90:34:e2:
b1:81:11:9f:f2:31:d8:04:35:e2:ef:b0:dc:88:0c:
9f:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:BB:51:D5:38:5A:D8:CA:5C:94:52:A1:45:1B:88:FF:1E:51:FA:0C
X509v3 Authority Key Identifier:
keyid:53:76:46:7E:F0:92:1C:51:19:0E:2E:A6:0F:2A:BB:3B:D6:E9:C1:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/c9db0e-903e-485e-b67f-2c7a2a746279/1/U3ZGfvCSHFEZDi6mDyq7O9bpwZ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3a:d2:67:3c:3c:04:78:4a:8a:67:cf:39:9e:be:d2:09:1c:
45:4f:11:40:30:db:f8:ac:69:f0:bb:57:86:4c:cd:88:6d:c0:
da:db:60:a5:7e:a9:fa:26:51:45:e0:e7:10:9d:e8:01:59:92:
d4:6a:96:34:34:bf:f7:1a:8a:f1:5a:ca:fd:1d:a7:aa:d0:9f:
93:45:d8:d2:8a:d1:b1:7a:3b:f8:2f:a0:f5:98:68:7e:24:f8:
f4:49:3d:21:54:53:00:59:62:7f:06:52:23:4c:2e:20:2b:38:
51:8d:a4:a9:a3:ed:2f:2c:5e:93:ab:ac:f9:0a:98:ac:69:3c:
03:e9:ec:01:e1:ca:ec:5e:e0:80:a0:48:13:a8:fb:49:3e:15:
fe:98:3d:22:aa:18:33:91:81:ca:c4:4f:71:53:68:fd:8d:75:
f5:7f:2e:24:67:9d:2f:e1:dd:ea:7f:84:91:34:b7:4e:08:50:
4c:14:fa:64:dd:16:9a:b3:5e:2b:7f:64:40:4f:a9:be:c6:e7:
20:51:e3:38:cb:f8:4c:12:af:14:aa:2e:98:e8:b5:22:97:f5:
82:ea:55:f8:11:a7:e6:cd:aa:c4:e8:95:53:3d:71:68:4f:91:
a3:77:a7:78:c1:51:c7:ee:70:32:f0:cc:4f:4f:a6:68:94:89:
df:9e:3f:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:16:41 2026 by rpki-client