Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File: UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier: w/zkYmB31c4TdP7Qcdc8ItZA8MxaTSJMZ+cKT7wYD6k=
Subject key identifier: CA:41:43:4C:CF:B1:BE:2F:94:91:A2:6A:4B:B8:80:BC:A4:63:B7:28
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 019EB7A0EA54605A4C05D568EA39DB813B3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number: 44
Signing time: Thu 11 Jun 2026 17:00:36 +0000
Manifest this update: Thu 11 Jun 2026 17:00:36 +0000
Manifest next update: Fri 12 Jun 2026 17:00:36 +0000
Files and hashes: 1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: 6ua3e+dBreftxKuNq05i0VR7L+oRLNceoqRIUQNgZMw=)
2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:a0:ea:54:60:5a:4c:05:d5:68:ea:39:db:81:3b:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: Jun 11 17:00:36 2026 GMT
Not After : Jun 12 17:00:36 2026 GMT
Subject: CN=ca41434ccfb1be2f9491a26a4bb880bca463b728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:1d:43:e6:df:bf:94:80:1c:24:0d:62:96:fe:
0f:48:e0:22:bd:a4:c4:47:02:c5:a5:7a:66:61:99:
7c:c6:20:b1:cf:65:94:09:5e:70:ff:2d:e2:b4:03:
59:cd:97:43:0f:0f:a2:14:1e:f0:15:40:03:c5:ab:
2c:2e:26:7c:46:c8:de:94:5c:01:48:50:53:f8:25:
a4:6f:14:3c:b7:c6:04:07:78:49:1b:07:f6:2a:51:
0f:fc:71:e3:03:b8:86:3e:20:37:18:45:84:41:b7:
fe:d7:a6:4f:f0:da:fa:af:5b:ba:b2:36:0a:9c:e4:
30:c2:dd:e2:37:ba:ec:42:23:31:2b:12:44:cc:30:
7b:b9:6c:99:e6:0d:d0:82:7e:52:e7:59:2b:35:82:
f6:45:49:29:12:41:dc:ff:d4:23:70:05:ae:95:7a:
88:90:b7:e2:c4:ea:5b:b7:24:db:6a:97:d5:40:6a:
3e:90:44:0f:93:67:21:d7:b2:4a:fd:51:41:d8:ec:
9f:8d:c4:d4:a1:1e:2e:f3:98:52:f7:53:ed:f7:c6:
7a:90:99:56:2a:dc:e6:59:f0:e2:2a:45:12:75:97:
41:0e:0f:a6:be:60:6e:0c:85:0e:69:17:f9:10:51:
31:8d:f2:2e:30:00:e6:6a:95:68:a4:18:04:13:0c:
85:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:41:43:4C:CF:B1:BE:2F:94:91:A2:6A:4B:B8:80:BC:A4:63:B7:28
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:a4:97:ca:ac:d7:e6:f4:4b:bc:f3:63:fd:8e:e1:ef:3a:1d:
87:1a:d7:7a:2d:35:d6:f4:aa:02:bd:02:11:4a:08:00:fc:cc:
47:ac:d0:d7:cc:22:e4:63:4d:c2:c9:63:05:49:4b:15:11:65:
86:00:d3:35:3a:57:7b:bc:49:86:a5:dd:96:c1:e2:31:25:08:
de:c4:f8:54:e8:d2:d1:b0:df:b5:d4:c6:f6:11:28:91:2b:34:
62:a4:ff:71:eb:25:26:23:fb:6d:79:57:5b:d8:c7:4b:e3:12:
ec:ab:ba:4e:68:b4:ca:80:21:13:0e:44:98:20:84:c6:3b:ca:
b8:1c:cd:eb:14:34:dc:45:7c:91:84:68:ca:df:96:93:75:21:
37:de:7a:40:4b:20:53:71:c7:e8:4f:73:28:3e:c8:99:3d:e6:
76:27:08:80:b6:44:03:67:ce:49:79:fa:0f:8c:30:25:ff:57:
ac:ef:8e:73:83:50:0d:1e:16:1c:38:c4:33:05:15:8b:4f:13:
7e:7d:d0:fe:2f:a6:8c:8f:2c:51:70:2f:25:7b:d0:bd:90:d4:
80:7b:5b:42:a2:3c:34:6e:11:0b:06:28:1f:a7:ff:93:64:33:
63:51:3e:ac:bc:48:be:ce:47:52:b4:70:69:ec:6a:d5:09:80:
12:f1:1d:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ63oOpUYFpMBdVo6jnbgTs8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZTE3MjIyYTIyZmM5NTc5ZDdkMDk1ZDVkNDNmOGRiMGVj
ZTU3MjkwHhcNMjYwNjExMTcwMDM2WhcNMjYwNjEyMTcwMDM2WjAzMTEwLwYDVQQD
EyhjYTQxNDM0Y2NmYjFiZTJmOTQ5MWEyNmE0YmI4ODBiY2E0NjNiNzI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwB1D5t+/lIAcJA1ilv4PSOAivaTE
RwLFpXpmYZl8xiCxz2WUCV5w/y3itANZzZdDDw+iFB7wFUADxassLiZ8RsjelFwB
SFBT+CWkbxQ8t8YEB3hJGwf2KlEP/HHjA7iGPiA3GEWEQbf+16ZP8Nr6r1u6sjYK
nOQwwt3iN7rsQiMxKxJEzDB7uWyZ5g3Qgn5S51krNYL2RUkpEkHc/9QjcAWulXqI
kLfixOpbtyTbapfVQGo+kEQPk2ch17JK/VFB2OyfjcTUoR4u85hS91Pt98Z6kJlW
KtzmWfDiKkUSdZdBDg+mvmBuDIUOaRf5EFExjfIuMADmapVopBgEEwyFQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMpBQ0zPsb4vlJGiaku4gLykY7coMB8GA1UdIwQY
MBaAFFDhciKiL8lXnX0JXV1D+NsOzlcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9GeUlxSXZ5VmVkZlFsZFhVUDQydzdPVnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wNjYzYzMtYTk3My00NzBmLTk4MTAt
MDBmYWQ3ZTBjOWE5LzEvVU9GeUlxSXZ5VmVkZlFsZFhVUDQydzdPVnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wNjYzYzMtYTk3My00NzBmLTk4MTAtMDBmYWQ3ZTBjOWE5
LzEvVU9GeUlxSXZ5VmVkZlFsZFhVUDQydzdPVnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdaSXyqzX
5vRLvPNj/Y7h7zodhxrXei011vSqAr0CEUoIAPzMR6zQ18wi5GNNwsljBUlLFRFl
hgDTNTpXe7xJhqXdlsHiMSUI3sT4VOjS0bDftdTG9hEokSs0YqT/ceslJiP7bXlX
W9jHS+MS7Ku6Tmi0yoAhEw5EmCCExjvKuBzN6xQ03EV8kYRoyt+Wk3UhN956QEsg
U3HH6E9zKD7ImT3mdicIgLZEA2fOSXn6D4wwJf9XrO+Oc4NQDR4WHDjEMwUVi08T
fn3Q/i+mjI8sUXAvJXvQvZDUgHtbQqI8NG4RCwYoH6f/k2QzY1E+rLxIvs5HUrRw
aexq1QmAEvEdpg==
-----END CERTIFICATE-----
Generated at Thu Jun 11 22:14:38 2026 by rpki-client