Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: sVmH29ndkkYNnzSWm/1qWXxo0P+3LpcZ1uYiZ0HZ/4g=
Subject key identifier: D6:34:37:7D:AF:E9:31:C8:78:EF:C5:F0:5F:EC:58:0D:EA:96:33:31
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 019F85D6007FDE8CD80C016975F8E02A1FCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 123F
Signing time: Tue 21 Jul 2026 18:00:22 +0000
Manifest this update: Tue 21 Jul 2026 18:00:22 +0000
Manifest next update: Wed 22 Jul 2026 18:00:22 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: 0xOfVQEg1rVzpNantjqEI9pQMQQxJS7WsoTOdwr10wg=)
2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:00:7f:de:8c:d8:0c:01:69:75:f8:e0:2a:1f:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Jul 21 18:00:22 2026 GMT
Not After : Jul 22 18:00:22 2026 GMT
Subject: CN=d634377dafe931c878efc5f05fec580dea963331
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:40:a1:96:1a:72:10:18:a4:d9:f7:6c:cd:
17:31:d7:62:43:74:bc:ec:72:9f:07:92:77:42:ea:
22:01:c0:e9:62:23:04:c0:c1:44:be:2e:8a:63:88:
d5:99:88:a1:11:58:9f:9a:4e:42:9e:f2:e8:a7:98:
e6:8f:e0:a9:09:20:64:39:1c:6f:0b:2a:ad:f9:00:
fd:68:20:12:7a:2e:ff:af:2f:d3:f8:ba:9c:cc:f5:
99:da:3b:12:fa:99:cc:66:70:e4:cf:39:8e:3c:6b:
0a:d8:1d:0d:e7:40:53:02:bc:a0:08:dc:b1:65:0e:
4d:15:2a:4a:b0:88:b1:4d:cb:86:77:5d:3a:72:00:
e5:cd:c2:84:a4:2e:e7:6d:4a:a6:23:f8:2a:43:ed:
ff:72:1a:e0:3d:15:f7:4f:95:f8:4e:9f:49:97:ab:
d9:b1:1a:82:d7:12:60:a4:9c:32:d8:aa:f4:7e:42:
0c:da:77:e2:a8:93:da:5d:d0:2f:52:0b:cd:e7:16:
7e:95:7c:96:aa:eb:70:0e:ec:17:be:1d:37:ca:6a:
9d:71:a5:e4:a5:47:3f:dd:94:6a:69:a1:27:fc:2a:
38:d9:b9:68:88:c4:51:28:a5:c5:36:72:ec:db:dd:
5d:f2:34:1d:6e:de:e7:cf:d8:dc:71:43:a0:b3:4c:
9a:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:34:37:7D:AF:E9:31:C8:78:EF:C5:F0:5F:EC:58:0D:EA:96:33:31
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:81:d2:e9:b8:36:d8:04:f2:a9:75:27:c9:df:aa:2d:e7:7b:
5b:e1:09:00:2f:24:a2:65:54:e4:a5:ca:ca:91:67:6c:a2:96:
96:c5:3f:78:89:ab:bd:0e:ef:d3:27:f7:d5:16:be:91:1b:6e:
1b:c1:b9:6f:86:f4:4a:e5:94:9a:98:53:21:d8:4c:a3:0c:29:
3b:1f:69:3c:cc:7d:6f:3c:3e:42:7f:22:96:e4:29:86:07:40:
ef:de:0e:01:7e:ea:0d:cb:c6:9f:19:69:8e:db:ab:73:f6:d0:
bd:f4:0a:1f:8b:9d:10:96:23:67:eb:89:3f:f5:a0:ca:25:f0:
28:16:d5:d5:a7:b2:29:72:f0:91:1b:eb:b0:a5:1e:c0:d4:d1:
9a:44:60:19:01:2f:ef:e4:31:db:6e:25:f5:2e:d0:38:be:ee:
ea:7d:de:2a:1f:29:c5:e2:4a:0c:6f:85:3e:81:8f:f7:dc:0d:
bb:7b:35:5d:74:60:66:8f:7e:25:97:1d:55:4e:db:fd:32:e6:
2b:23:f8:8a:c7:c5:17:99:0a:31:e4:21:ed:0e:33:5a:ce:ac:
a2:58:13:12:bf:d2:35:fc:07:d9:01:22:b8:12:9a:75:4d:b0:
43:fd:8b:a5:9b:58:d0:d3:10:8f:af:7b:8e:90:2b:bc:ce:3c:
7f:93:3c:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:47:06 2026 by rpki-client