Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: hevf2FaW5LkTveVVKUuE2YhvSgUFXKuYNLrRSn4dxbw=
Subject key identifier: 3A:DA:43:40:93:03:C2:95:99:FA:78:2D:E4:68:03:3C:C8:2D:89:3A
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019DDF8D31AC8375EA79750E7C54A52EB7E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 0819
Signing time: Thu 30 Apr 2026 18:01:05 +0000
Manifest this update: Thu 30 Apr 2026 18:01:05 +0000
Manifest next update: Fri 01 May 2026 18:01:05 +0000
Files and hashes: 1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: JJDa4dvVlipnmq1Q+VkXS5UNV50e2FziU/6CdoYZu00=)
3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 14:07:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:df:8d:31:ac:83:75:ea:79:75:0e:7c:54:a5:2e:b7:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Apr 30 18:01:05 2026 GMT
Not After : May 1 18:01:05 2026 GMT
Subject: CN=3ada43409303c29599fa782de468033cc82d893a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6c:dc:d3:b3:d3:7c:6a:8a:37:a0:cf:52:62:
0c:45:e0:bc:13:63:df:39:7d:52:6e:44:3f:1c:3e:
14:82:32:fd:b1:6c:73:36:56:3e:fb:90:8a:e5:4d:
0e:92:cd:8d:9c:0c:b9:d2:9d:36:63:56:af:04:5d:
c4:de:8a:8a:0f:2d:c0:11:0a:10:a8:3d:b7:3b:5b:
9b:fb:8f:98:1a:f1:25:ea:33:3d:20:98:63:f2:36:
c1:95:30:69:50:25:21:c6:1e:5d:ce:44:5f:78:71:
ce:4c:db:bd:36:fc:e6:ca:ee:06:66:ba:8f:42:44:
dd:72:ae:3f:a6:bb:bf:79:ce:df:bf:7a:c6:13:b0:
27:c0:5d:5d:72:47:a6:26:b0:b1:23:45:12:2f:e1:
fc:91:e9:00:7b:2f:8e:08:d6:49:f5:3d:9a:33:fa:
24:5b:21:c6:34:67:dd:5b:30:3b:2a:53:5e:5f:92:
74:07:dd:a1:dd:51:67:ec:b7:8e:9e:00:1e:79:ed:
00:94:42:ed:6d:cd:13:f7:0a:c2:b5:e5:5b:f0:ae:
5d:77:fa:0f:0d:4f:21:96:00:a9:f5:90:b3:88:82:
67:44:0a:44:72:43:05:14:24:2e:16:8b:ee:91:4a:
d6:b4:66:bf:eb:d4:45:0b:1d:16:86:b9:33:5a:1b:
1f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:DA:43:40:93:03:C2:95:99:FA:78:2D:E4:68:03:3C:C8:2D:89:3A
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:56:59:9e:38:f5:80:e4:6c:d6:31:b4:92:fc:d0:63:4a:84:
e5:bd:53:53:5e:84:f3:5f:55:28:b6:97:fe:8d:83:21:74:f9:
78:37:f3:58:cf:a6:e6:69:b2:be:78:bf:0c:7b:1c:9f:fb:67:
26:fd:98:84:59:3c:ef:fc:19:e8:86:f4:9c:18:b9:1c:6e:53:
8c:99:8c:0e:a4:c0:59:c6:a8:91:c1:7e:a7:e1:d6:ce:0b:e3:
18:f8:a0:59:17:8e:ce:69:23:52:36:86:c7:0d:91:12:54:c9:
c8:18:e3:3f:44:87:e4:aa:7b:fc:74:52:9e:14:d0:09:d1:a1:
09:9d:af:dd:5a:73:5f:43:76:55:33:e0:c2:d7:b4:dc:22:76:
09:0a:6e:64:86:e5:c0:7d:97:49:ee:53:e0:b4:82:b4:07:82:
38:c0:35:90:ac:2f:e7:6d:81:1d:26:b0:b3:c9:c2:64:86:49:
e6:67:4e:a6:40:e0:f2:4a:ae:60:58:42:27:b6:f9:c6:ac:e2:
b4:18:f7:d3:e5:f7:ec:27:60:d9:af:4e:9c:ce:0a:f3:cb:4d:
87:0c:2a:82:d5:c8:0d:48:95:b9:1e:c6:02:d3:cd:00:36:36:
38:91:df:38:eb:42:b6:5c:d5:4f:c3:c5:5c:b4:07:fc:a2:8b:
8f:5f:6d:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 21:24:12 2026 by rpki-client