Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: xmh4fCB8rpLgTWkRfhQTT9DfH7N8GLjvPn4umPoZxy0=
Subject key identifier: 20:85:E4:80:1F:1F:D8:9D:4D:41:BC:10:12:65:1D:84:53:6F:91:0D
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 019EA64011F49A3A1F072CE85CB8352CEBC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0DB9
Signing time: Mon 08 Jun 2026 08:01:17 +0000
Manifest this update: Mon 08 Jun 2026 08:01:17 +0000
Manifest next update: Tue 09 Jun 2026 08:01:17 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: KpRjnsYUKyerQuhX9ffUsCG2DYmI336jWtVNJHye63k=)
2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:40:11:f4:9a:3a:1f:07:2c:e8:5c:b8:35:2c:eb:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Jun 8 08:01:17 2026 GMT
Not After : Jun 9 08:01:17 2026 GMT
Subject: CN=2085e4801f1fd89d4d41bc1012651d84536f910d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0f:12:e4:8e:83:0a:a6:1b:90:12:42:9f:de:
9d:b0:58:5e:00:c7:2f:b7:a7:39:6b:ba:de:b0:ce:
bf:66:82:f9:f6:f1:f6:81:c9:a9:d2:50:a9:a3:c3:
6b:96:5f:16:25:16:af:d2:ab:27:f8:d1:dd:65:a8:
db:72:af:4d:13:88:50:99:09:48:b9:48:69:d9:88:
86:b2:97:ce:50:2b:b6:37:e4:9e:93:ae:a5:e3:72:
df:42:b7:21:b7:ef:a5:83:12:97:b8:c1:dc:4a:83:
69:0e:de:95:f8:dd:d1:a1:cf:fc:28:f3:1a:e4:3b:
39:59:ff:d0:cb:f9:98:11:b0:7e:40:b4:8c:10:1a:
91:86:d7:eb:52:83:3c:ad:b6:57:3c:cd:3e:0b:c9:
9b:47:5e:d6:d1:dd:92:6e:b5:b3:2d:21:20:8e:56:
92:5d:ec:ab:01:b0:7d:fb:7f:67:62:b8:33:0a:88:
e4:f7:37:e7:a9:55:2d:d8:fc:05:d0:fd:9f:a8:32:
06:d3:bf:63:7e:1e:84:38:23:ab:82:2d:03:8d:b7:
5f:fd:a2:b4:94:14:e3:31:93:b5:40:38:eb:05:26:
d0:30:9a:4f:60:df:68:9c:3e:40:93:f7:64:e3:84:
d2:cb:78:44:9d:2e:55:42:af:ed:1a:88:3a:1c:a8:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:85:E4:80:1F:1F:D8:9D:4D:41:BC:10:12:65:1D:84:53:6F:91:0D
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:d6:6a:0d:d0:83:47:0f:73:12:7f:e5:97:de:9e:91:a9:2a:
6c:87:5d:4b:d6:5f:52:3f:22:35:4c:fb:49:51:6b:fc:61:12:
06:5b:38:98:84:33:f6:49:71:53:7b:8c:12:4d:83:91:06:81:
c7:5d:95:bc:c4:a4:02:f4:53:85:02:11:bb:3f:8e:28:fb:de:
ca:47:91:d6:a6:b2:f3:a9:ae:c3:4a:d5:ab:73:64:7d:d2:e1:
94:ac:53:c3:25:f0:17:59:45:fa:00:d3:6d:0f:ef:bd:f3:b1:
a9:80:4f:01:1a:e6:f9:e9:2c:a3:f6:d8:ea:80:e2:24:7c:94:
21:bc:92:b7:c8:f7:7a:37:cf:4a:82:7c:80:7b:0a:91:02:9c:
bb:74:41:d2:16:10:96:6b:04:be:8b:43:a7:1d:53:3b:7c:13:
02:2d:5c:1b:bd:38:98:3d:dd:2c:0e:ab:40:11:79:2b:e7:82:
d6:3e:2a:6d:59:08:f6:c5:44:57:20:98:d9:04:40:94:b2:36:
96:1d:91:77:6c:27:99:82:75:11:34:5b:f8:00:b3:f5:24:b8:
d8:56:20:2e:4b:ce:07:1d:77:19:03:f8:bc:2e:cb:50:8a:cd:
5a:3c:c5:29:f8:e4:71:36:6a:dd:38:f3:60:eb:44:a6:41:ef:
e6:03:f5:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6mQBH0mjofByzoXLg1LOvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZGE1ODhmNWU5YTFjMmFmNTZiZTA4ZjdlNmEyYzk5ODFh
YjYwMjYwHhcNMjYwNjA4MDgwMTE3WhcNMjYwNjA5MDgwMTE3WjAzMTEwLwYDVQQD
EygyMDg1ZTQ4MDFmMWZkODlkNGQ0MWJjMTAxMjY1MWQ4NDUzNmY5MTBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmA8S5I6DCqYbkBJCn96dsFheAMcv
t6c5a7resM6/ZoL59vH2gcmp0lCpo8Nrll8WJRav0qsn+NHdZajbcq9NE4hQmQlI
uUhp2YiGspfOUCu2N+Sek66l43LfQrcht++lgxKXuMHcSoNpDt6V+N3Roc/8KPMa
5Ds5Wf/Qy/mYEbB+QLSMEBqRhtfrUoM8rbZXPM0+C8mbR17W0d2SbrWzLSEgjlaS
XeyrAbB9+39nYrgzCojk9zfnqVUt2PwF0P2fqDIG079jfh6EOCOrgi0Djbdf/aK0
lBTjMZO1QDjrBSbQMJpPYN9onD5Ak/dk44TSy3hEnS5VQq/tGog6HKi37wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCF5IAfH9idTUG8EBJlHYRTb5ENMB8GA1UdIwQY
MBaAFFDaWI9emhwq9Wvgj35qLJmBq2AmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmIt
NDNjMWM2MWQwMmViLzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy83MzFiNGMtOGNhOC00OTdiLThhMmItNDNjMWM2MWQwMmVi
LzEvVU5wWWoxNmFIQ3IxYS1DUGZtb3NtWUdyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMtZqDdCD
Rw9zEn/ll96ekakqbIddS9ZfUj8iNUz7SVFr/GESBls4mIQz9klxU3uMEk2DkQaB
x12VvMSkAvRThQIRuz+OKPveykeR1qay86muw0rVq3NkfdLhlKxTwyXwF1lF+gDT
bQ/vvfOxqYBPARrm+ekso/bY6oDiJHyUIbySt8j3ejfPSoJ8gHsKkQKcu3RB0hYQ
lmsEvotDpx1TO3wTAi1cG704mD3dLA6rQBF5K+eC1j4qbVkI9sVEVyCY2QRAlLI2
lh2Rd2wnmYJ1ETRb+ACz9SS42FYgLkvOBx13GQP4vC7LUIrNWjzFKfjkcTZq3Tjz
YOtEpkHv5gP1iQ==
-----END CERTIFICATE-----
Generated at Mon Jun 8 18:55:00 2026 by rpki-client