Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: 1PHsyEZkZeDtyhUS34N2d45KmgU2zg0fRkn/tjRm2vM=
Subject key identifier: 56:23:D0:AE:4D:57:52:10:D6:7E:12:C3:84:11:BD:A2:28:9D:83:71
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019CF7CF23CD370A33631CA27DB9577E0091
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 07A1
Signing time: Mon 16 Mar 2026 18:01:13 +0000
Manifest this update: Mon 16 Mar 2026 18:01:13 +0000
Manifest next update: Tue 17 Mar 2026 18:01:13 +0000
Files and hashes: 1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: CnP85+zol5fRkS/3EQ+Jn4WYxs9FGHPTlKBI5OGea28=)
3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Mar 2026 15:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:cf:23:cd:37:0a:33:63:1c:a2:7d:b9:57:7e:00:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Mar 16 18:01:13 2026 GMT
Not After : Mar 17 18:01:13 2026 GMT
Subject: CN=5623d0ae4d575210d67e12c38411bda2289d8371
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:45:dd:53:e1:22:d6:16:d1:61:3b:af:35:ff:
f0:86:c9:e5:b1:38:2c:ca:6b:3d:3e:65:20:8f:2b:
aa:7d:21:70:80:e5:70:52:6e:b6:fd:33:21:52:53:
81:ff:94:ec:75:1e:ca:1e:3c:2d:16:bf:09:2b:bf:
cd:14:6c:86:4c:d3:36:32:bc:d1:ea:02:7a:20:a4:
4b:72:92:86:c8:f7:b6:30:fa:d6:2c:82:a3:2e:3e:
5d:f8:43:c0:93:a8:3e:ab:3e:83:95:50:5a:3f:a9:
b9:3e:e9:b5:ad:19:d3:fb:67:63:66:d5:4d:cf:c8:
73:d7:4b:f9:c2:ef:8f:9f:06:68:94:6d:22:75:df:
7d:70:91:27:e3:fb:f5:94:7c:b5:e2:33:b6:bc:e2:
13:30:df:43:e5:b1:87:dc:88:e5:c6:28:b3:d9:1f:
7e:c2:96:4d:a0:ff:15:9e:fe:48:15:0a:95:9f:41:
12:e5:38:d0:78:f0:2b:14:84:7c:84:c0:46:9a:72:
d2:e9:cf:8e:e1:b8:62:04:b3:3e:ce:96:78:08:d1:
34:90:56:ff:2a:bc:03:6e:60:05:32:db:c5:34:cf:
d2:e3:81:39:d1:b5:54:0d:3b:0a:f1:bf:db:54:57:
8d:9b:5c:f8:71:c3:63:b4:83:fb:06:bf:69:1a:ff:
d0:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:23:D0:AE:4D:57:52:10:D6:7E:12:C3:84:11:BD:A2:28:9D:83:71
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:73:70:61:86:1b:3a:fb:5e:43:99:5c:42:ca:7b:1f:ed:07:
a6:98:80:67:13:5e:69:80:3e:d7:56:1f:11:3f:f8:dd:a4:fb:
fc:3c:86:01:91:6d:29:af:f5:9c:60:b4:73:69:f2:de:d0:96:
d9:8c:a2:40:e9:65:85:82:6d:b8:8c:a8:00:9a:0c:37:99:d6:
b1:aa:44:c5:ed:de:d9:10:17:75:8a:45:3f:4f:1b:ab:17:60:
12:13:d0:f9:48:54:7f:07:6f:a2:e9:1d:af:5d:36:93:31:d1:
2f:5f:08:8c:ae:52:2c:d6:5e:59:a7:01:3f:b6:e6:ce:76:0c:
b9:04:8d:71:4d:4f:87:3a:cb:9e:c3:5c:0e:8e:6a:55:d7:bb:
54:7f:ee:12:6d:ac:ed:f4:01:4d:68:cc:c9:7e:f9:ea:c0:f0:
a8:0f:b3:20:62:a0:07:37:d2:0c:4e:43:4f:8b:a7:80:32:4c:
2b:c3:40:43:b8:12:26:58:84:f6:2e:00:8e:64:ea:38:d7:bf:
ae:84:32:c7:4f:a7:aa:2f:00:b0:86:1c:63:7c:f1:dd:a5:53:
32:09:64:19:49:ef:42:6c:8c:eb:dc:ec:9d:03:6d:88:3b:7a:
f7:77:e5:6d:26:a7:27:70:d2:f0:82:48:90:10:a9:d0:be:c9:
6c:8b:74:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 16 20:34:21 2026 by rpki-client