Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File: UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier: 0V7jZNt/e/LKm8O3jx8gwX1jvMqNZZieSkYa+LVPrKc=
Subject key identifier: 74:5B:E2:DC:AE:E7:A7:F7:D9:1B:89:A9:DD:C2:BE:7E:9C:D8:17:A3
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 01A1803D3DFCDEA2ECEFE87D0EF73D265BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number: 01B5
Signing time: Wed 28 Oct 2026 02:00:59 +0000
Manifest this update: Wed 28 Oct 2026 02:00:59 +0000
Manifest next update: Thu 29 Oct 2026 02:00:59 +0000
Files and hashes: 1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: WW3JRo2ZTtkEtTRyCMkOOi9rgQ+S6jnRqNaAZw6od8Q=)
2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:3d:3d:fc:de:a2:ec:ef:e8:7d:0e:f7:3d:26:5b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: Oct 28 02:00:59 2026 GMT
Not After : Oct 29 02:00:59 2026 GMT
Subject: CN=745be2dcaee7a7f7d91b89a9ddc2be7e9cd817a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:b1:b9:a4:d8:19:eb:ca:26:19:5a:ca:89:4d:
ac:ca:b2:1e:cc:e5:b7:14:08:67:48:51:80:18:53:
59:52:0f:e1:b6:e6:a6:7f:d7:86:3b:ca:1b:f2:6b:
65:2d:fa:dd:8f:26:68:d7:8c:fc:7c:ea:19:25:de:
df:c4:61:f0:dd:ef:ba:97:12:97:c6:55:0f:f9:c6:
8d:cd:cc:8d:0e:c1:7e:35:0d:6a:4c:26:b7:a1:40:
96:e3:e2:3a:e0:13:6d:6a:54:d5:f2:28:fd:79:5b:
2e:9c:13:1b:b1:14:70:c6:a2:78:b7:39:a0:37:9a:
b5:30:2b:86:1b:43:59:54:fb:e7:2c:a0:8f:17:3e:
9f:81:9a:84:ff:ea:65:c9:ce:63:17:9e:51:7e:f1:
97:af:54:c8:13:8e:ae:4b:5a:7a:80:f4:9c:f2:b6:
17:c9:6c:97:4f:51:57:33:21:e0:3e:e8:51:d7:87:
f7:b4:e6:e9:44:7b:ad:6b:44:9e:d9:60:14:37:89:
60:b2:c6:42:a6:02:b8:dc:4b:dd:88:56:03:f2:7e:
de:17:f8:fd:56:c8:1f:ed:4d:4e:92:e8:31:5d:a3:
ff:4d:e0:6c:00:77:f7:c7:9d:dd:d7:b5:08:a9:62:
e0:ec:bf:17:34:9f:1c:70:0b:38:99:dd:ca:a1:a4:
5b:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:5B:E2:DC:AE:E7:A7:F7:D9:1B:89:A9:DD:C2:BE:7E:9C:D8:17:A3
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7d:2d:c2:69:58:1f:a0:60:17:3a:18:45:23:e9:c4:6c:e9:
c7:fc:78:ce:53:4a:f5:8d:5e:78:de:8d:a8:04:b3:15:65:97:
1f:40:f0:b9:33:ec:f5:c1:df:fc:64:35:20:53:67:4b:d2:f7:
63:0f:b0:dd:f3:dd:7c:93:2b:16:96:c3:28:1c:0e:2e:21:55:
78:b1:4b:49:bb:15:e2:ef:53:9b:33:58:a5:f1:66:0c:ac:da:
00:1d:f0:94:85:7c:58:79:8e:44:92:f2:7d:0c:49:16:97:ec:
79:50:d7:fa:41:57:e3:8e:6f:70:5f:7a:c8:17:a1:43:5f:e1:
7d:36:f0:94:66:2f:e8:e4:98:88:0e:54:03:ae:29:69:09:36:
9d:c2:53:8e:5a:2e:b0:cd:f1:01:cb:3b:53:2a:59:5e:a3:09:
78:33:5f:86:f2:7b:f5:59:74:42:f2:43:a6:35:14:36:9e:c0:
e9:f1:98:cd:50:7d:d2:b5:7a:62:f9:d7:c9:4b:16:4c:ab:70:
4c:ff:c4:75:02:a0:c2:84:e6:c5:47:df:0b:03:d6:30:87:9d:
72:fe:52:da:d2:a6:ae:89:6a:6b:32:0f:cb:78:eb:e2:76:e3:
34:1a:45:80:ab:4d:2a:50:79:b5:1b:0d:d0:0d:21:55:72:0e:
6d:06:d1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 05:20:57 2026 by rpki-client