Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
File: UiezboKeTYVl7WV0jhsck8zQDO4.mft (raw, json)
Hash identifier: pOMMIyA1Ar/7LoYqHk2CN6FByB0FHvEpKJkHD3LaNVE=
Subject key identifier: 03:88:5C:B6:0A:F2:E7:47:FF:BB:22:A3:4F:91:5B:15:D8:AF:7C:01
Authority key identifier: 52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
Certificate issuer: /CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Certificate serial: 019F92114EA621BC0EBB9C3165FA35AEE65B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
Manifest number: 13DA
Signing time: Fri 24 Jul 2026 03:00:35 +0000
Manifest this update: Fri 24 Jul 2026 03:00:35 +0000
Manifest next update: Sat 25 Jul 2026 03:00:35 +0000
Files and hashes: 1: P5QGU51MBWbq811ui2M903jDzeM.roa (hash: cl6QRl57KjA79TtkotpuwrlWUT5toZEw0rnOBUVQkL8=)
2: UiezboKeTYVl7WV0jhsck8zQDO4.crl (hash: 1pIR0x624fy2AXYb0u7E2Qi5Jbk8lYGolDagn3SfQGM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:4e:a6:21:bc:0e:bb:9c:31:65:fa:35:ae:e6:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5227b36e829e4d8565ed65748e1b1c93ccd00cee
Validity
Not Before: Jul 24 03:00:35 2026 GMT
Not After : Jul 25 03:00:35 2026 GMT
Subject: CN=03885cb60af2e747ffbb22a34f915b15d8af7c01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:47:46:f5:3c:02:88:b9:68:d8:26:7c:89:d8:
61:b7:aa:88:17:49:05:af:97:6f:d7:25:49:f4:b2:
6d:46:34:31:85:07:28:ff:88:5a:e6:d2:5a:6b:3c:
ad:e4:68:11:6a:60:06:a0:f3:a9:c7:78:98:d5:04:
f0:c1:f7:29:a4:c5:d7:95:ad:ba:dd:bc:bf:a6:4d:
66:4f:38:00:4f:09:54:a9:e9:a0:e4:10:91:7b:a6:
d2:d8:cf:00:84:76:19:31:d6:f3:f2:41:99:8c:41:
67:c7:94:fe:6a:bb:df:ab:05:61:58:d2:3c:4b:f9:
f3:a3:82:0c:8d:9d:21:b1:fa:64:3f:57:02:35:85:
fc:6b:64:28:54:67:c6:99:fd:52:ed:cb:c1:87:21:
f7:26:32:aa:a5:82:a9:77:45:a8:15:0e:21:22:b1:
7a:3f:dd:ae:ae:d1:27:13:11:e4:75:7e:a9:ad:c9:
60:2a:47:b3:99:a1:be:39:49:43:0c:10:2b:8a:a7:
69:f5:70:dd:6c:3e:54:c6:67:3b:40:e4:91:3e:a5:
f9:7d:92:44:03:43:88:c0:65:7c:f6:6b:e1:91:0f:
f1:96:53:18:d9:46:d4:50:4d:1b:5b:46:16:c4:47:
cc:1e:5e:6d:f5:cf:d1:98:f8:b3:3f:ff:d0:e8:e1:
5c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:88:5C:B6:0A:F2:E7:47:FF:BB:22:A3:4F:91:5B:15:D8:AF:7C:01
X509v3 Authority Key Identifier:
keyid:52:27:B3:6E:82:9E:4D:85:65:ED:65:74:8E:1B:1C:93:CC:D0:0C:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiezboKeTYVl7WV0jhsck8zQDO4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/a7ae11-121a-4f22-be3f-e907af07ff11/1/UiezboKeTYVl7WV0jhsck8zQDO4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:f8:9c:f3:49:41:24:d6:fd:45:a4:0e:af:cd:b5:0a:e2:3a:
3f:37:d9:1a:d1:0e:24:d1:7c:0d:02:6c:17:66:05:df:4d:95:
08:a7:29:be:74:a2:ed:e8:69:d3:6d:c1:ac:9e:44:0f:4e:a8:
e0:10:65:99:ba:c0:ea:bb:6b:5c:9e:7a:dd:76:2c:c5:82:dd:
62:d6:e5:fd:99:ca:5b:c1:29:af:c9:c7:11:49:36:53:8e:ff:
0a:c2:f9:48:3b:d1:09:07:82:61:4c:88:98:20:72:f1:cb:6b:
d3:5d:22:58:e8:24:b4:cd:70:53:8d:e6:81:70:93:b4:01:86:
69:b6:3b:d9:53:54:44:e3:9f:05:cc:4e:31:4c:ed:67:9c:98:
8e:23:f3:40:48:31:61:01:72:e3:10:1f:25:64:90:0b:1d:ec:
89:0b:d5:c6:d8:25:ef:da:85:2c:ce:87:82:40:82:62:17:07:
77:a5:32:dc:09:31:5c:e0:c8:d9:6c:a2:7b:eb:35:eb:a1:92:
9f:f4:4b:06:db:e3:42:13:ed:3a:ba:28:6f:eb:5b:ad:3c:88:
87:89:73:a7:cc:56:f5:61:5a:a7:a3:6c:49:d3:e4:30:1b:9a:
b8:57:51:ba:c8:3e:aa:8d:06:24:4c:8a:95:22:19:3e:7a:74:
cf:1b:ff:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:34 2026 by rpki-client