Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: Nxz1ghpzCn13VCtvqdHnkh/7f7AR1yRaqIo+CubdwqU=
Subject key identifier: 40:C3:84:0E:72:E1:F8:B6:25:DD:4D:2C:74:87:CC:1C:F5:6A:28:6A
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01A17EBD33B351441B1016F16A7C6E6E61B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 16EE
Signing time: Tue 27 Oct 2026 19:01:31 +0000
Manifest this update: Tue 27 Oct 2026 19:01:31 +0000
Manifest next update: Wed 28 Oct 2026 19:01:31 +0000
Files and hashes: 1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: lACc0TFzGV1uThuaWS1ELXXCz5Xfg8bO3ou2Oh8+Rjc=)
2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7e:bd:33:b3:51:44:1b:10:16:f1:6a:7c:6e:6e:61:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Oct 27 19:01:31 2026 GMT
Not After : Oct 28 19:01:31 2026 GMT
Subject: CN=40c3840e72e1f8b625dd4d2c7487cc1cf56a286a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:14:7c:60:15:96:55:39:a7:08:50:4e:f4:08:
67:20:0a:ee:00:10:aa:6b:6d:35:03:62:1b:33:72:
83:7b:aa:af:ee:84:31:37:9a:44:9f:15:32:f8:06:
f3:e6:63:cc:a5:b9:fa:a9:fe:29:28:d7:80:ac:a3:
cb:dd:73:c0:1a:7e:20:81:6e:2f:87:23:e7:52:50:
7b:92:3a:b0:a0:ce:42:09:69:06:3d:b4:77:04:d8:
06:bc:38:58:24:4e:fb:82:cd:4a:19:d5:53:11:b8:
5a:d6:22:3e:4a:32:0d:da:02:63:f1:76:1d:85:80:
0f:8c:b0:1b:ac:8f:59:6d:a9:ff:1d:b1:a5:73:96:
d1:ff:95:b2:4c:af:c5:c1:f5:df:c0:13:1b:36:53:
5a:60:1a:b3:5f:9f:f8:a8:91:72:48:21:cb:ce:bd:
90:50:a0:b3:52:be:d0:7e:a9:63:eb:30:40:f3:e0:
c0:d0:8a:d0:31:2e:b2:70:26:1c:43:b6:cb:15:8a:
ea:02:9e:da:df:65:d1:8d:d1:41:00:67:c4:14:8b:
14:92:2a:8c:a2:e8:29:a2:16:5a:bf:73:72:16:51:
a5:5d:a7:cf:5d:c8:91:cb:1c:db:f4:cf:04:e7:62:
77:c7:87:eb:9a:1d:3c:2d:d1:ac:33:7c:be:67:5c:
b9:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C3:84:0E:72:E1:F8:B6:25:DD:4D:2C:74:87:CC:1C:F5:6A:28:6A
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:4e:64:e4:3e:ab:ca:c8:95:03:49:ec:6c:ad:a3:5d:ce:90:
1a:36:38:0d:73:2c:7a:71:2a:47:0f:fa:45:4c:2b:97:bd:9b:
80:b1:1d:40:38:99:d6:c1:4c:9c:f3:ed:b8:d1:83:a8:28:ab:
d0:bb:7d:6c:2d:ab:6c:cd:55:36:f7:2b:4d:88:f0:28:af:60:
1f:16:4a:e6:23:28:ba:2b:2e:bb:28:f0:f0:0b:91:96:8d:ae:
cc:90:31:dc:cf:5b:b7:08:00:1b:60:19:57:fc:a8:46:e9:1b:
38:b9:31:29:d2:9e:16:fe:6e:5e:e1:dc:04:ba:f7:45:96:8e:
d0:26:c1:de:f3:88:6b:27:83:39:b0:e7:a4:c9:e3:fa:46:7a:
3e:05:5c:8c:b2:e4:a3:f3:e4:0f:28:37:ed:14:f2:6a:77:f9:
fa:5e:6f:1e:22:f4:5f:dd:6c:0a:26:39:c7:de:45:df:cc:b8:
14:f3:1c:2a:2b:c4:d4:c0:63:a2:c5:d1:01:7d:84:a5:eb:fc:
42:b5:a4:b7:06:b8:13:30:d0:f3:60:bb:8d:f6:75:af:d1:b6:
af:98:ed:85:e5:8d:02:c4:cf:32:ed:32:64:1b:1f:7e:18:1e:
1e:dc:10:e5:1d:70:91:d4:a8:4e:b8:20:84:52:c8:6b:de:1a:
e8:64:1e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:12:12 2026 by rpki-client