Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: UWb+a6cCn6X3X8EqglV58xQziq6Dsmj+N5yiKaAzEWE=
Subject key identifier: 6F:9A:61:16:4D:B3:F3:73:AA:64:E1:24:5D:BA:0A:CD:FC:A9:2C:5D
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019F939230AAE4937E207BCAEA74364F7729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 1057
Signing time: Fri 24 Jul 2026 10:00:59 +0000
Manifest this update: Fri 24 Jul 2026 10:00:59 +0000
Manifest next update: Sat 25 Jul 2026 10:00:59 +0000
Files and hashes: 1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: NKAK3vPfPhPDZzBqqBEuHdJZhFCAF4TgCqlBO7Fr018=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:92:30:aa:e4:93:7e:20:7b:ca:ea:74:36:4f:77:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Jul 24 10:00:59 2026 GMT
Not After : Jul 25 10:00:59 2026 GMT
Subject: CN=6f9a61164db3f373aa64e1245dba0acdfca92c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7d:35:45:98:d9:8c:c5:9f:ba:0c:ed:2e:1e:
f3:bb:70:1f:e2:60:78:80:eb:a4:d3:ff:2b:17:0d:
54:dc:b9:7d:d7:c2:c4:64:18:40:f9:a3:2e:a6:52:
2d:fd:ad:77:ee:c6:8c:3a:51:c1:af:89:8e:b4:66:
71:45:dd:f1:9d:56:77:09:a2:cf:47:1a:05:37:3d:
8b:1f:fa:68:cb:cc:2f:22:c1:a8:47:84:2e:ca:89:
eb:93:11:14:10:2e:0b:2c:55:24:8f:d3:21:e4:00:
42:4f:64:8f:e7:70:b0:19:f3:33:ec:a3:02:3b:8b:
b3:92:aa:6c:91:e9:62:d0:a6:87:60:0f:30:a6:94:
98:84:01:43:d5:92:48:44:14:37:6b:22:4b:74:8f:
86:3e:c5:f7:57:de:7c:e0:a2:d4:64:0e:3b:1d:af:
0a:ab:bc:df:07:40:cd:75:3a:5c:17:c4:80:95:97:
02:3d:b2:dc:bd:c2:a1:cd:54:01:0d:be:de:73:92:
4b:d0:8a:19:73:81:5b:9f:07:4e:b1:8e:f7:69:2b:
77:64:86:12:e5:84:52:67:2c:79:d1:72:22:9c:f7:
6d:e4:e2:2b:e7:2d:b0:ba:36:c0:df:3d:b6:95:81:
c4:ef:16:2c:f0:8d:45:ef:34:21:90:7a:ef:ab:3c:
8b:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:9A:61:16:4D:B3:F3:73:AA:64:E1:24:5D:BA:0A:CD:FC:A9:2C:5D
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:1b:4f:82:bc:38:e0:3d:ad:79:59:25:4c:93:f8:d6:fa:0a:
ac:f9:ce:ca:af:98:0d:36:ac:50:a4:6c:56:02:f9:a0:cf:2f:
d6:a7:8f:f6:88:9b:b3:08:17:b9:5a:8d:8e:79:16:f4:52:51:
40:d2:01:df:b5:f7:b8:05:64:0e:43:ee:fd:47:cf:d7:3d:b2:
d4:d7:ab:3f:81:9f:36:c1:fd:6b:92:05:dc:99:d0:d6:00:57:
61:79:3e:d2:e6:7d:10:10:c5:85:87:bc:5c:b0:91:96:a4:36:
59:3e:a1:b5:b9:52:4f:0a:b0:78:f6:e5:29:14:e3:79:90:a5:
d0:77:88:ca:db:b3:fb:44:ca:24:dd:7d:2e:bf:e9:f7:0d:be:
f9:7d:53:5e:ef:c6:3b:7f:0f:df:56:2f:a6:86:bd:f9:e8:f6:
80:3f:bd:f6:dc:2d:84:94:4e:3f:14:9c:04:b0:7f:7b:73:73:
9e:aa:af:0b:61:65:6f:4d:1f:5f:3f:65:21:23:54:f4:a3:d2:
5f:57:68:11:f5:c9:62:af:d2:69:f6:c9:fc:4f:90:06:d4:dd:
9d:3c:02:71:f1:b2:8f:6e:f9:13:fe:fc:ad:16:18:bb:57:fc:
ad:c0:6b:e3:9a:72:12:10:70:8a:d4:6e:cb:f4:e7:00:03:f5:
cb:37:b4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:54:34 2026 by rpki-client