Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
File: UEwHY-3Lox64nwmD3djdGIkYwu4.mft (raw, json)
Hash identifier: g54zVcvuKVCh6OQGSW3l8h+kOnajn1elCzEW1x4af0w=
Subject key identifier: 4D:9D:1E:76:7F:35:9D:BF:1B:C1:6E:19:5A:49:62:9A:A4:A3:B3:73
Authority key identifier: 50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
Certificate issuer: /CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Certificate serial: 01A08AC3130B791322988E5203409C80C83D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
Manifest number: 0D70
Signing time: Thu 10 Sep 2026 10:00:35 +0000
Manifest this update: Thu 10 Sep 2026 10:00:35 +0000
Manifest next update: Fri 11 Sep 2026 10:00:35 +0000
Files and hashes: 1: UEwHY-3Lox64nwmD3djdGIkYwu4.crl (hash: gUS3Oinc2utYLrDqlZY51WiItInwOs7tqHyTaVoWA2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 10:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:c3:13:0b:79:13:22:98:8e:52:03:40:9c:80:c8:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504c0763edcba31eb89f0983ddd8dd188918c2ee
Validity
Not Before: Sep 10 10:00:35 2026 GMT
Not After : Sep 11 10:00:35 2026 GMT
Subject: CN=4d9d1e767f359dbf1bc16e195a49629aa4a3b373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ef:df:9f:cb:b3:88:6c:87:30:b2:e8:ac:10:
59:6f:49:7d:bc:f4:ef:b7:a4:56:65:8b:27:c8:99:
3c:00:49:60:aa:da:12:b1:25:a5:1e:2e:46:77:41:
6f:df:85:c2:d6:85:bb:7f:61:7a:9f:1d:e8:c5:fa:
00:08:9b:77:98:11:66:12:b6:d8:ad:cc:d6:8b:bb:
4c:4d:62:77:6a:58:c0:e8:02:99:71:e8:d8:52:a0:
b8:62:51:e9:42:09:d5:a3:9c:73:36:e8:cc:51:3b:
9e:3b:f8:8b:11:66:bd:f4:cb:fd:26:e0:6e:fa:26:
6c:44:61:a8:ae:55:f4:1a:b4:62:3e:f8:b6:cb:5e:
72:bb:c3:07:68:82:8e:b5:4b:db:4d:d0:6a:31:87:
a1:48:bf:1a:3d:0b:71:59:87:c2:61:88:e5:fd:d5:
22:c9:52:49:fc:a1:8d:7f:3e:b0:30:ee:f7:77:2e:
a5:1a:b2:74:19:89:97:f0:f4:66:5b:2e:4b:a5:b5:
19:71:9b:db:87:66:e2:3c:5e:8f:83:6f:25:01:98:
bd:0d:4a:09:48:92:2f:3b:11:b3:66:f2:bd:9a:2c:
ad:19:61:80:9a:fe:b2:6c:97:05:69:fa:71:f1:4c:
ed:ef:ac:0a:e1:0c:6f:c3:be:7b:f9:39:cd:f9:34:
0f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9D:1E:76:7F:35:9D:BF:1B:C1:6E:19:5A:49:62:9A:A4:A3:B3:73
X509v3 Authority Key Identifier:
keyid:50:4C:07:63:ED:CB:A3:1E:B8:9F:09:83:DD:D8:DD:18:89:18:C2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEwHY-3Lox64nwmD3djdGIkYwu4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/e19a3f-05ac-4dca-a895-8662c71186c6/1/UEwHY-3Lox64nwmD3djdGIkYwu4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ef:ca:6b:ed:f6:cd:6a:86:12:1f:84:53:17:c4:74:fc:79:
31:78:ec:6e:b5:85:c3:aa:b9:6e:ce:fe:cf:69:6e:b3:ae:4b:
8d:e0:7f:ab:b3:68:c2:2b:f8:cb:7f:16:bf:c6:f2:fc:d6:0c:
b8:0a:89:b3:b2:86:2e:c4:22:5d:24:f7:61:c1:dc:fc:f9:30:
f9:d1:29:d2:5d:8d:dc:a5:af:10:82:42:ed:28:a8:0e:aa:79:
22:4f:b1:be:c8:05:7a:25:dc:5b:29:94:e1:85:b3:d5:c0:aa:
7e:52:dc:5c:1f:45:0e:b8:17:a3:2c:ce:8c:af:ca:8c:a0:e3:
47:6d:98:3b:f9:34:d3:11:6e:42:92:32:70:f6:9e:62:d1:5b:
7f:eb:46:7b:45:83:27:0a:db:f0:25:97:6f:09:74:da:36:68:
00:35:24:aa:b5:07:a3:4a:ce:46:8b:27:50:eb:5e:cf:cf:0e:
8e:48:bb:95:c1:ba:7c:e6:7a:9a:74:32:0c:de:b8:0e:2b:61:
a7:37:c5:7a:4d:32:f1:6d:bd:ea:b1:59:f1:c4:d9:49:a5:c2:
e0:41:8c:ec:61:a7:f3:4f:d3:53:1d:6e:3a:f5:7c:f2:3b:46:
59:b8:00:d9:50:19:c5:95:02:df:f6:52:42:60:c2:f9:ff:c6:
14:74:16:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:04:47 2026 by rpki-client