Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File: UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier: jkUSZiCPREiF0/9DVNm+pDWr2PJJ2SgnUtvnp8sPZ9w=
Subject key identifier: 41:67:C3:9F:39:CE:48:24:EA:97:FE:5B:94:48:5D:93:57:D3:F2:94
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 019FA14DF4A063A03884E4C31D1671B1C567
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number: BD
Signing time: Mon 27 Jul 2026 02:01:08 +0000
Manifest this update: Mon 27 Jul 2026 02:01:08 +0000
Manifest next update: Tue 28 Jul 2026 02:01:08 +0000
Files and hashes: 1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: TOYOzG8wilmYOTQoYy2bTyFTxRWoJEggW+Jy32cjjtE=)
2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:f4:a0:63:a0:38:84:e4:c3:1d:16:71:b1:c5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: Jul 27 02:01:08 2026 GMT
Not After : Jul 28 02:01:08 2026 GMT
Subject: CN=4167c39f39ce4824ea97fe5b94485d9357d3f294
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:b0:0b:92:70:c0:c4:0b:75:bd:fb:69:9e:
25:fd:a3:10:e9:ef:40:5d:63:dd:9d:fb:1f:0a:de:
d6:64:f6:90:f7:64:ec:fc:47:bd:ea:da:30:10:6d:
0a:f0:fa:b0:9f:89:66:18:5a:2e:e8:dc:98:a5:f4:
1b:d8:cb:6b:31:fc:17:48:16:a1:da:cd:22:98:d3:
dd:54:d2:0b:15:7a:5e:84:01:5c:1e:5b:93:95:85:
ab:cc:ce:fb:12:b2:4a:27:93:7d:f5:37:23:98:da:
30:05:07:2a:70:95:9f:22:ae:7d:d5:39:0e:a8:8d:
94:c0:c4:20:7a:2f:c2:d4:fd:f3:22:7d:5a:63:f2:
76:ab:dd:ee:d7:ff:ab:1b:94:95:8b:2e:e0:c9:38:
12:3b:47:96:76:b7:ea:1e:0a:c9:af:0a:da:6a:d7:
66:d1:49:00:ff:e3:6e:95:e9:0b:43:1b:d9:d5:0d:
d5:3d:9d:8a:ca:a3:82:fe:9a:dd:9a:d0:2e:8a:f4:
84:e6:28:9a:df:64:ed:a4:ec:8d:e3:1b:d6:b0:24:
46:84:a3:b0:d8:0b:dd:48:d2:b6:00:3b:7e:bf:02:
e0:0a:a1:b3:e5:b4:91:bb:be:3b:74:ab:e5:72:2a:
64:45:86:c1:d7:f8:03:b5:e5:61:f4:45:f5:73:c4:
3d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:67:C3:9F:39:CE:48:24:EA:97:FE:5B:94:48:5D:93:57:D3:F2:94
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:6f:bb:6f:46:e2:45:ee:9a:4d:01:ec:f0:fd:bf:56:d8:7f:
84:81:f2:9e:69:4f:24:9d:5e:b3:21:08:0c:5a:03:bb:f5:83:
24:72:4b:22:a6:5b:f2:ac:cf:59:d7:bf:21:e6:a5:0f:b6:90:
b3:f5:c4:98:bf:a5:26:a1:5a:90:c5:d4:54:ed:5c:e7:d6:0f:
d2:b4:64:3f:44:be:4f:ec:ec:c2:15:00:07:d4:11:71:2a:fe:
d5:6c:66:8d:97:a1:20:f1:e1:da:36:ab:47:d0:15:dc:e9:d4:
dc:90:25:6b:af:36:2d:4d:b9:42:d4:05:49:94:44:c5:d1:fa:
75:95:88:73:4d:3d:f6:05:8e:9b:69:ef:64:25:ab:3e:25:2c:
c7:24:7b:8c:ef:af:d8:78:77:13:cd:b9:02:12:61:36:7c:86:
dc:41:b6:1b:fb:74:8c:30:49:c0:58:e6:86:01:db:eb:28:43:
35:36:ec:67:df:88:9c:a0:c0:58:5b:fb:b5:c8:85:5e:9a:80:
dc:9e:06:0c:a3:6c:c8:69:70:1f:08:7f:fa:65:2d:36:ca:07:
f9:f6:50:0e:b5:47:8f:f3:9a:b7:fc:53:e0:1d:6a:cf:2c:32:
72:86:9d:f8:42:47:43:cc:b8:6c:ca:6b:5b:ee:4e:ea:b0:3e:
d9:72:61:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:15:04 2026 by rpki-client