Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier: LE7Oy3xbglGQNQTK0SOQ2wys9tjlpYNx1yLzEH1ZVcs=
Subject key identifier: 42:77:A4:93:91:44:73:09:B6:4A:CB:60:30:17:E7:6B:DE:93:0E:F1
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 01A03C718A3576B5C0F2222F8DCE7975C414
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number: 18E7
Signing time: Wed 26 Aug 2026 05:01:08 +0000
Manifest this update: Wed 26 Aug 2026 05:01:08 +0000
Manifest next update: Thu 27 Aug 2026 05:01:08 +0000
Files and hashes: 1: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: x/DcZ/fJGZ0fx8Ia94GGKftiZI0gdOMo459HaDnSUtE=)
2: lOV0FvZ4UI1RmBR3zL2RaV_Elps.roa (hash: OQfXce7br5oDI4HR7IRbJp2FZmT/5i/l+05MQHFeiH4=)
3: xfISNhaNx-QdtidwC9e-_Q1kCgo.asa (hash: mXrj296pB/exm/joNYtGKERBhDpRLhpWbyAKIvLFAPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 05:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3c:71:8a:35:76:b5:c0:f2:22:2f:8d:ce:79:75:c4:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Aug 26 05:01:08 2026 GMT
Not After : Aug 27 05:01:08 2026 GMT
Subject: CN=4277a49391447309b64acb603017e76bde930ef1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:f1:be:24:ee:9e:d2:fe:7e:29:4a:c6:3c:
cd:0c:67:14:16:b2:e8:cc:d5:fe:83:3a:e4:fb:e4:
64:1a:9d:7a:1e:e4:d0:44:47:1c:44:50:de:da:dc:
91:d7:ea:96:5c:e6:30:52:80:87:df:3b:ad:01:9d:
d8:75:d4:e1:82:af:9f:8a:10:9f:59:13:72:68:1e:
13:11:74:4e:e9:ba:75:a2:3e:43:63:b0:11:64:5c:
a6:73:56:9c:64:b0:9b:f6:f2:f3:e9:d2:00:7a:cc:
b6:c3:5a:e7:f6:05:2e:ed:f3:83:70:e8:68:64:db:
8d:a9:5c:bf:5e:3b:ce:82:c4:b9:59:60:36:e5:6d:
7c:aa:da:ed:bf:8a:6a:4d:a1:96:5f:a0:84:4c:59:
8c:3f:cd:c4:40:0a:6b:e8:a4:e6:a6:14:d4:b9:72:
3d:ac:f4:b6:65:a5:a4:4b:c3:bd:c0:ac:7c:dc:7a:
cb:49:15:41:ca:59:ed:de:91:ae:c6:d5:a9:cd:33:
7e:de:70:26:88:6c:0d:26:9d:47:4f:38:aa:8b:29:
a3:42:f4:4e:fe:e0:62:c6:71:b2:89:a1:53:62:1e:
6f:cd:34:ff:d8:8e:5a:36:ad:a7:16:62:1c:59:c6:
15:be:26:c1:07:57:41:9a:1a:01:ff:77:f2:36:97:
62:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:77:A4:93:91:44:73:09:B6:4A:CB:60:30:17:E7:6B:DE:93:0E:F1
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:fd:a7:d2:8f:4e:1b:bb:33:86:76:4d:4b:94:bd:f6:45:3e:
61:d1:a6:16:bc:64:06:de:06:41:1c:92:4d:c6:82:80:fd:f7:
07:25:bc:0a:de:60:1c:53:28:78:05:2d:16:36:c1:e8:2a:5b:
41:fc:13:a7:5c:f4:d7:44:cd:cb:5d:82:02:0a:ec:c0:a8:ab:
b5:58:b4:c6:ec:53:4b:e3:ae:51:ca:71:4e:d9:df:a8:82:77:
3f:13:26:a3:19:7b:bf:8a:c4:38:34:69:29:83:42:0f:1c:35:
62:3a:4b:1f:fb:bf:f4:12:b3:ce:0e:99:c4:7e:a2:3a:26:0d:
42:9f:e6:88:2f:ff:3b:ae:5b:86:08:32:db:ee:0f:57:56:ce:
f0:65:cc:38:65:ab:f3:47:d8:fb:91:eb:22:af:19:5d:a2:c5:
b7:fd:e2:6d:75:72:bf:d0:2e:de:57:41:b3:22:60:c7:66:9f:
47:e1:91:3a:76:b3:71:1f:f0:13:f9:b7:40:8e:06:f3:67:23:
05:96:3a:08:d3:8d:d1:01:fb:cf:73:0f:ec:e0:1f:d8:83:78:
3b:1c:d3:27:18:f1:e2:11:4e:35:67:c9:7b:d6:f1:b3:72:75:
06:48:5b:06:53:9a:91:f7:f8:6a:71:45:59:46:0e:31:aa:52:
fc:47:8c:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:06:10 2026 by rpki-client