Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File: UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier: wgLFn+J7HIeAGkXOOOqWK1BJqHSsn3raLJ3Cp8ELFzw=
Subject key identifier: AB:0C:1C:AE:FD:E8:93:8D:1F:AB:5A:59:DE:44:2F:7F:3F:59:5E:D3
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 01A08CE8743FA770E712811A98A79BF4CBFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number: 0137
Signing time: Thu 10 Sep 2026 20:00:39 +0000
Manifest this update: Thu 10 Sep 2026 20:00:39 +0000
Manifest next update: Fri 11 Sep 2026 20:00:39 +0000
Files and hashes: 1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: dl6VTp5cQ9X/ExkdXjrrYGhSZeaV043UCRlCAKKYpyQ=)
2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e8:74:3f:a7:70:e7:12:81:1a:98:a7:9b:f4:cb:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: Sep 10 20:00:39 2026 GMT
Not After : Sep 11 20:00:39 2026 GMT
Subject: CN=ab0c1caefde8938d1fab5a59de442f7f3f595ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ae:9a:ae:d2:86:ac:a3:2f:56:10:9e:99:d9:
b5:31:f0:c4:ad:5d:96:82:73:b1:37:e3:13:1a:90:
7b:f6:a7:09:9d:c8:74:61:18:41:a8:88:b5:38:e6:
4e:99:24:64:4b:63:5a:6c:09:fb:8f:22:e1:08:2f:
3e:23:6b:4d:6b:dd:2a:80:57:5b:2e:48:be:20:61:
6b:b9:6a:18:3c:6c:29:eb:d2:90:21:3d:8a:b0:71:
0b:ad:4d:f3:fa:6f:7b:63:2a:da:0f:32:a3:7d:96:
07:d8:33:db:21:90:97:48:a6:fa:9f:ab:43:b8:dd:
33:95:19:87:a8:2d:54:66:66:93:a2:40:28:53:ca:
c7:14:19:b9:67:79:8d:8a:48:52:ec:bb:09:d3:36:
b9:93:84:ca:76:40:56:55:b6:22:6e:96:b2:02:75:
0e:0c:28:b8:43:6f:e7:de:f4:00:84:c9:02:5d:6a:
7c:78:e0:7c:c8:e3:53:23:88:d7:6c:3c:1f:67:0d:
b4:e7:53:eb:d1:f3:38:eb:4c:ed:28:d5:2c:a7:9e:
60:49:cf:d7:7a:92:b6:8a:c3:00:06:10:c3:de:8a:
47:c0:1b:53:c2:16:d7:eb:af:71:48:e1:57:55:08:
1a:b3:c4:e4:0f:de:bd:07:c0:b2:f3:ec:26:4b:04:
9a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0C:1C:AE:FD:E8:93:8D:1F:AB:5A:59:DE:44:2F:7F:3F:59:5E:D3
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:03:0b:0a:ac:2c:25:2b:55:0b:49:53:56:77:5c:bd:c8:a9:
07:51:c5:38:21:c5:84:8d:b9:fb:c0:08:18:b5:cb:48:92:c2:
e1:b7:79:48:fb:85:9c:2a:31:4e:31:48:19:55:14:25:eb:5b:
13:38:eb:73:e8:14:58:da:87:20:a1:54:99:8c:71:3d:b1:05:
a9:2b:93:7d:3c:af:74:18:e1:e7:81:52:01:36:bb:d2:90:6d:
5c:fd:de:7e:cf:b4:b0:19:a1:99:e3:61:63:ff:ea:d0:b7:30:
ee:ab:bb:c0:94:1f:7d:a5:6b:fb:b6:67:3e:aa:22:7f:7b:0f:
fb:cd:5b:b5:92:4e:69:59:4b:5b:44:c9:a2:43:65:6e:37:e1:
f4:d8:46:a4:f7:fa:ee:19:6e:b6:8b:b8:1b:aa:c8:3d:9b:12:
bf:97:97:b7:43:06:3d:15:fc:6b:1c:b8:b1:7b:8c:9e:44:32:
4f:36:f4:c9:70:91:ba:c6:1b:55:21:6d:5f:3c:31:b4:32:12:
f9:d1:14:ec:69:af:37:8c:38:c5:3b:82:ff:a2:ee:20:d8:36:
0b:c5:4d:be:57:7f:81:3f:49:ec:8a:6d:f3:06:0e:6a:c9:f7:
c8:db:c3:6e:83:b7:ab:75:a2:19:ff:99:b8:0d:54:bf:e3:eb:
e5:cc:4d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 05:58:15 2026 by rpki-client