Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: +j6jQJssWCbqFH4l9gMw74x/dszs7Lca/ksW8Z7hvaY=
Subject key identifier: E9:FB:48:B6:4C:A5:55:3A:BD:25:FE:FD:6A:62:56:D8:0E:F4:AD:90
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 01A1724B27CD041008524976EE8A821557D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0DA0
Signing time: Sun 25 Oct 2026 09:01:30 +0000
Manifest this update: Sun 25 Oct 2026 09:01:30 +0000
Manifest next update: Mon 26 Oct 2026 09:01:30 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: Ffb2LPhtUzze9sBeY/ftQXoFq54Uq3d5gocm455IS5Q=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 08:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:72:4b:27:cd:04:10:08:52:49:76:ee:8a:82:15:57:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Oct 25 09:01:30 2026 GMT
Not After : Oct 26 09:01:30 2026 GMT
Subject: CN=e9fb48b64ca5553abd25fefd6a6256d80ef4ad90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:10:10:aa:cc:00:7c:f2:9e:99:3c:d3:eb:12:
2e:f6:5d:0e:69:e4:2c:de:72:9f:d0:ed:e6:62:5f:
5d:d3:b2:59:48:6f:0e:16:e2:6a:f2:94:dd:bb:6e:
69:96:3a:f7:b6:04:ac:d7:37:dc:d4:17:77:b7:d1:
cc:7a:f4:87:58:66:93:4c:74:17:2e:bb:af:f7:96:
05:b1:1a:ce:3c:2f:2a:48:83:0c:9c:24:5f:d7:6e:
44:42:ad:4a:f9:30:76:17:b0:61:be:3e:da:c9:3d:
f3:7e:50:9e:ad:5c:8d:33:d0:91:2f:b0:f2:af:63:
b4:2a:b5:e8:59:11:e7:dd:1b:e9:3a:8d:91:08:95:
df:3a:0b:f8:9b:1e:d4:46:15:63:27:12:12:fe:3d:
0e:30:21:8a:ec:c6:1d:ea:90:33:37:82:7e:db:04:
26:f3:73:c8:db:d1:02:40:e4:2a:8a:1e:00:31:db:
c5:19:7b:a1:ac:8e:a1:16:a7:c7:58:55:3a:9c:ee:
15:57:81:de:de:c3:91:da:aa:97:f9:fb:e6:b0:2f:
c2:5a:22:63:5a:0c:10:66:ea:2c:ab:8d:26:f7:27:
9c:d7:53:6d:58:b0:5c:c4:64:1b:58:7e:a2:d0:0c:
13:96:2e:fd:87:b4:3a:4a:37:0c:48:c0:e1:7f:14:
19:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:FB:48:B6:4C:A5:55:3A:BD:25:FE:FD:6A:62:56:D8:0E:F4:AD:90
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d2:89:dd:a3:f6:8e:18:36:cb:ef:55:91:41:8d:7e:95:36:
69:41:40:38:e4:1f:1d:74:33:fb:ea:cf:64:f1:52:56:8c:0e:
f5:0b:d1:f1:61:ce:1c:89:61:11:d8:1e:bf:5b:17:49:64:f5:
94:2a:6d:3d:2c:69:7b:ef:7b:b1:80:9b:44:90:27:9d:c1:4b:
ee:16:45:ca:f6:d1:da:1c:0a:bb:ab:0e:5e:05:18:5d:87:a3:
b7:0f:20:25:e4:d2:a6:d2:95:eb:bf:03:cf:a8:41:eb:9b:b7:
20:06:fc:48:de:0b:e0:49:4c:fc:8b:20:a5:9d:d4:71:a8:c0:
f6:70:4e:29:47:7d:d7:fc:7a:27:ea:fe:6b:a3:a3:b7:3e:58:
69:ea:c5:0a:2a:ed:c7:12:03:81:aa:50:3f:0e:07:68:a4:04:
25:9c:f5:4f:0c:3b:62:ce:0f:9f:8c:1c:8b:e2:c7:b4:1e:5c:
49:da:48:eb:be:7a:9c:cb:c4:cf:50:71:37:a1:4f:af:46:5a:
b3:83:cb:30:f5:d1:44:6e:31:92:e1:78:d4:28:3d:1d:99:27:
ab:09:3e:13:31:a3:a8:43:36:a0:db:8e:3f:1b:21:ce:0d:ab:
2a:34:84:98:cd:d0:f9:e7:4a:dc:c5:91:7b:b2:70:85:02:11:
41:69:74:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:15:14 2026 by rpki-client