Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: +Kgg9+cOhkWT/nLYI13FRs4sV3YJPBwtiyFrGffmqV8=
Subject key identifier: 22:11:F2:AD:06:EB:1A:80:F8:35:DE:CD:56:72:74:AA:30:4B:7E:99
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01A08CE8A003ADBA5D2C2058922F71E4A491
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 1670
Signing time: Thu 10 Sep 2026 20:00:50 +0000
Manifest this update: Thu 10 Sep 2026 20:00:50 +0000
Manifest next update: Fri 11 Sep 2026 20:00:50 +0000
Files and hashes: 1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: DFNkbMROqvU7tG6fuaAxvr2XGwyueb88hPq4DS2BiTs=)
2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
3: r-wLcfbrV7gSA_iFZTlD40lbPxI.roa (hash: 9BuizisqfHZcVlGBCcKNw9NkVDpUfvizltmHgaebiwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:a0:03:ad:ba:5d:2c:20:58:92:2f:71:e4:a4:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Sep 10 20:00:50 2026 GMT
Not After : Sep 11 20:00:50 2026 GMT
Subject: CN=2211f2ad06eb1a80f835decd567274aa304b7e99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:b8:c7:4e:db:e0:87:8b:d6:88:f9:5a:ea:
d6:78:2a:db:15:93:52:b6:09:b0:8e:e1:e7:a4:fe:
0f:e5:9c:89:66:2c:a6:4e:86:e9:ce:4a:97:98:3c:
ab:84:11:56:69:09:a4:68:05:8a:e4:08:ae:04:b8:
c2:ea:95:66:54:c7:a7:4a:1f:ee:d2:ce:5e:45:91:
c2:cd:40:d2:ef:e0:c0:2f:dc:35:5a:8e:24:75:0c:
37:b3:71:04:95:3a:3b:97:42:22:8c:d5:ad:22:5e:
5d:a6:9b:ee:5f:37:bf:80:e3:bd:74:42:35:74:01:
23:a4:15:6c:d5:f6:27:66:8e:17:48:79:2d:a7:3d:
36:51:f7:85:ef:3e:d6:3f:a4:fa:df:1a:d6:f7:d3:
e7:da:92:e2:84:9d:c3:ab:d7:2e:cf:57:74:b3:bc:
2d:04:fc:1a:c7:62:2c:aa:27:89:ad:03:84:21:e3:
59:70:19:43:bb:58:49:cc:e3:46:8e:b8:0f:f3:29:
a5:0d:dd:81:df:f3:c1:d1:48:49:d6:b3:65:94:16:
d4:c8:4c:3a:1c:30:12:13:b6:82:d8:ab:5e:e0:b6:
6c:99:6a:31:1b:7b:e0:1f:16:84:0b:90:ae:0e:03:
f3:93:36:0d:9d:03:04:14:e7:03:21:eb:c5:47:e4:
07:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:11:F2:AD:06:EB:1A:80:F8:35:DE:CD:56:72:74:AA:30:4B:7E:99
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:66:6e:b5:18:44:dc:7a:4f:aa:41:56:f5:71:3d:01:7a:c5:
71:e6:10:42:b2:37:63:44:bc:99:8b:ac:e8:29:1c:c7:00:65:
e0:83:c1:37:09:fd:93:8a:23:89:3e:f7:84:d3:07:64:29:8e:
7c:23:ac:23:56:b4:02:81:58:e3:c7:92:16:2f:a1:17:98:8f:
6a:b9:c0:02:b1:fe:13:80:d9:30:e8:e6:2b:92:92:bd:0a:fc:
cf:22:24:98:43:85:41:ce:f5:94:8c:6b:55:db:a0:6e:b9:69:
49:38:d7:d2:b7:97:ed:c3:dd:39:c7:87:a1:8c:f3:6e:5d:52:
90:cb:2a:40:a5:0d:27:c1:a2:6d:46:32:c2:98:e5:eb:d0:cc:
38:54:29:a4:df:f9:97:a3:29:e6:62:de:ab:ba:2d:b8:64:9c:
fc:ac:a0:f6:2a:a5:d9:4c:ec:1e:2f:51:6c:5b:64:1f:17:7f:
38:b6:6e:66:7a:e9:90:dd:b9:88:8b:97:77:5f:f8:9a:c9:6f:
bd:9c:73:37:1f:b0:cb:2e:8a:56:8c:6f:1f:ed:fd:97:cc:a8:
c1:9c:a6:e9:4f:f5:24:27:99:6e:b1:80:96:f7:f3:78:fb:4c:
9e:a8:ea:a4:3f:e2:f1:49:90:b1:fd:cc:db:0b:3d:81:1e:c5:
b4:70:60:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:08:03 2026 by rpki-client