Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: Al7MkbmgGnbvawpZ2lZ8zKiwEPgp2ab0Oj8P5dcygvU=
Subject key identifier: 61:C7:CD:E4:56:8B:E2:6F:20:89:9C:CB:00:6D:FB:B1:E6:24:07:19
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01A08AFAC5039A45912A752263A2E95A651A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 166F
Signing time: Thu 10 Sep 2026 11:01:25 +0000
Manifest this update: Thu 10 Sep 2026 11:01:25 +0000
Manifest next update: Fri 11 Sep 2026 11:01:25 +0000
Files and hashes: 1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: GdN17rVbBf48zS6y6+el4cl4psGndncB3sSMC1Ykt7A=)
2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
3: r-wLcfbrV7gSA_iFZTlD40lbPxI.roa (hash: 9BuizisqfHZcVlGBCcKNw9NkVDpUfvizltmHgaebiwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:c5:03:9a:45:91:2a:75:22:63:a2:e9:5a:65:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Sep 10 11:01:25 2026 GMT
Not After : Sep 11 11:01:25 2026 GMT
Subject: CN=61c7cde4568be26f20899ccb006dfbb1e6240719
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:18:9e:da:47:3e:b9:19:89:9c:44:e4:f9:5c:
96:80:e7:56:68:21:89:d8:9a:e1:d1:da:7d:7d:2a:
01:9e:2e:b1:e8:8c:58:95:67:23:f2:da:80:fd:77:
db:71:1c:85:33:d4:42:ed:22:88:5a:da:c0:38:04:
7a:a6:a9:ae:9b:60:2d:c3:12:47:36:b4:cf:91:e6:
3d:21:73:79:8e:fd:21:a6:8b:c3:f2:38:3f:90:0a:
cb:c4:10:50:1f:62:cf:23:3e:84:25:c9:20:7e:de:
7d:e3:29:0f:da:88:13:05:df:58:40:95:5f:fc:f1:
f8:d7:9d:8d:bd:8d:f4:7d:96:74:6e:82:e1:50:5a:
4c:1a:e2:e5:9e:30:9f:35:ba:70:cd:bc:1d:83:ca:
5e:08:9b:16:c4:4a:8d:1e:ac:be:21:11:da:26:0d:
d2:7f:7d:18:74:f1:3b:1e:7e:24:9f:eb:47:ac:d8:
ad:a8:66:eb:17:09:fb:bb:14:ac:62:38:7c:60:99:
c4:9e:44:7f:d0:95:ed:3a:15:b9:81:12:1a:6a:c0:
e0:17:b3:e0:c8:ea:a3:39:c2:81:ee:0d:f8:54:74:
44:91:0a:20:61:4d:ea:88:f4:bc:61:c4:23:22:2d:
7e:08:3c:c3:93:75:3d:67:ca:6b:cd:71:f6:cb:5b:
5d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:C7:CD:E4:56:8B:E2:6F:20:89:9C:CB:00:6D:FB:B1:E6:24:07:19
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9f:d7:81:94:cd:97:e9:bd:1b:dd:02:5b:47:f2:d9:10:b5:
55:b4:e7:52:77:c0:34:ef:7e:f3:11:cd:b3:82:7e:79:d4:9e:
e6:64:7d:bd:c1:d0:c3:a0:f2:ba:6b:63:ca:ca:2a:f4:f3:0b:
1d:44:87:18:2e:86:91:aa:c2:8d:9d:36:b3:a9:42:de:d2:da:
39:e2:0b:e6:92:2e:9d:93:0f:08:67:81:79:48:fc:02:e9:fc:
dd:b0:51:a8:61:91:7f:8c:fe:dc:0e:05:79:4f:66:71:b7:ab:
81:f7:18:a8:fb:7f:4f:4c:bb:09:ad:e0:0b:e1:38:c0:32:fe:
27:45:98:87:5a:e4:97:db:5a:48:2f:f7:18:f4:9f:4d:9c:fc:
0d:b6:0d:19:b4:18:72:db:c3:28:ad:09:36:27:ca:d6:d7:ad:
aa:5c:19:c0:2e:c2:56:58:a4:65:b5:2b:62:06:64:a7:e9:86:
45:fe:a0:af:05:ba:2d:3d:39:dc:89:66:b8:15:d9:24:a7:24:
5c:d8:c2:8d:ef:64:83:55:27:53:90:f8:17:f7:05:8d:15:ed:
72:ac:2f:f6:a4:7c:63:69:23:c2:99:3b:21:9e:3b:52:93:cd:
bf:90:bb:30:18:03:ef:44:7d:02:9c:12:5d:8b:7a:e8:df:8e:
7e:2d:10:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCK+sUDmkWRKnUiY6LpWmUaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTQyZmJhMGMxN2I0MzkxZTMyOTZjNDM0YjVmZmYyM2E4
MjliNmUwHhcNMjYwOTEwMTEwMTI1WhcNMjYwOTExMTEwMTI1WjAzMTEwLwYDVQQD
Eyg2MWM3Y2RlNDU2OGJlMjZmMjA4OTljY2IwMDZkZmJiMWU2MjQwNzE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtxie2kc+uRmJnETk+VyWgOdWaCGJ
2Jrh0dp9fSoBni6x6IxYlWcj8tqA/XfbcRyFM9RC7SKIWtrAOAR6pqmum2AtwxJH
NrTPkeY9IXN5jv0hpovD8jg/kArLxBBQH2LPIz6EJckgft594ykP2ogTBd9YQJVf
/PH4152NvY30fZZ0boLhUFpMGuLlnjCfNbpwzbwdg8peCJsWxEqNHqy+IRHaJg3S
f30YdPE7Hn4kn+tHrNitqGbrFwn7uxSsYjh8YJnEnkR/0JXtOhW5gRIaasDgF7Pg
yOqjOcKB7g34VHREkQogYU3qiPS8YcQjIi1+CDzDk3U9Z8przXH2y1td4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGHHzeRWi+JvIImcywBt+7HmJAcZMB8GA1UdIwQY
MBaAFFBUL7oMF7Q5HjKWxDS1//I6gptuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgt
NWU5Nzg3YjZhZWFhLzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC9jYjJiZGQtMzI5MS00MGFmLThhODgtNWU5Nzg3YjZhZWFh
LzEvVUZRdnVnd1h0RGtlTXBiRU5MWF84anFDbTI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5/XgZTN
l+m9G90CW0fy2RC1VbTnUnfANO9+8xHNs4J+edSe5mR9vcHQw6Dyumtjysoq9PML
HUSHGC6GkarCjZ02s6lC3tLaOeIL5pIunZMPCGeBeUj8Aun83bBRqGGRf4z+3A4F
eU9mcbergfcYqPt/T0y7Ca3gC+E4wDL+J0WYh1rkl9taSC/3GPSfTZz8DbYNGbQY
ctvDKK0JNifK1tetqlwZwC7CVlikZbUrYgZkp+mGRf6grwW6LT053IlmuBXZJKck
XNjCje9kg1UnU5D4F/cFjRXtcqwv9qR8Y2kjwpk7IZ47UpPNv5C7MBgD70R9ApwS
XYt66N+Ofi0QeQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 19:14:20 2026 by rpki-client