Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: vKBIG/1eEiakN4bAnwzMLxS+EEMZmEZOL0U8KKKnnZw=
Subject key identifier: 4F:7F:E6:A6:63:6D:8C:8F:8B:A8:65:93:D9:FA:16:C1:24:EC:F7:8C
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 01A06D95D4922080E72377BE13598C083AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0D19
Signing time: Fri 04 Sep 2026 18:02:10 +0000
Manifest this update: Fri 04 Sep 2026 18:02:10 +0000
Manifest next update: Sat 05 Sep 2026 18:02:10 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: 0vZKxQa2Gl3p9+MCgX90ImKnUT0+GcYhC0swBcarNQk=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 18:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:d4:92:20:80:e7:23:77:be:13:59:8c:08:3a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Sep 4 18:02:10 2026 GMT
Not After : Sep 5 18:02:10 2026 GMT
Subject: CN=4f7fe6a6636d8c8f8ba86593d9fa16c124ecf78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:87:28:91:49:9a:a8:16:d8:50:95:8e:6e:c2:
96:b8:01:c0:f8:1b:fd:b5:86:2d:ab:e9:50:2c:25:
83:74:6a:30:f8:b6:1a:19:6e:5d:a0:4c:64:7a:18:
11:f2:ef:cc:6d:83:97:35:4f:1c:72:ef:4a:41:33:
5b:ad:ca:cf:fd:2a:90:ef:31:a1:01:b9:52:80:b9:
8b:cd:b2:1a:ac:00:47:b9:2a:0d:28:8a:85:8b:3a:
00:fe:1c:ab:d9:4a:67:b4:d7:6d:98:bf:45:b1:72:
46:53:33:57:b1:8f:07:84:e4:58:2d:70:af:e3:de:
58:9b:ef:5a:8b:23:d2:c3:b5:b7:3f:48:2a:82:80:
f3:48:e9:64:39:78:d4:03:68:1a:27:fd:68:8f:61:
01:37:b3:fb:6b:99:39:c1:60:3e:21:b2:da:1f:97:
41:0c:97:37:de:07:cf:13:f2:af:17:0b:28:a4:84:
9e:6f:c6:e5:48:90:34:66:e1:00:9c:e7:2f:8b:12:
6f:65:9d:9e:03:ce:27:29:38:65:51:04:e9:ae:36:
94:5c:79:3a:92:7a:1e:63:f0:a0:da:bc:0d:19:12:
5e:ee:77:cd:6d:fb:94:c5:1e:5d:85:97:98:b0:4f:
ba:ac:19:ac:8e:70:55:4f:04:10:d2:c4:b0:9c:4e:
ac:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:7F:E6:A6:63:6D:8C:8F:8B:A8:65:93:D9:FA:16:C1:24:EC:F7:8C
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:7d:dc:cc:56:87:f5:45:7c:77:6e:b5:60:e4:31:fc:11:d0:
35:ee:50:17:3b:56:1a:bd:29:04:e2:40:91:86:79:1a:d1:b3:
e7:5d:5f:18:f1:e5:a0:c9:e4:7a:e1:f5:2d:b8:d9:18:5b:fd:
2f:6d:32:09:a2:88:ca:3f:28:ff:59:d7:91:0d:ba:4d:2e:16:
b5:e1:7c:83:b3:f1:ae:ee:5c:1e:8c:3f:a3:c7:92:dc:2d:ca:
1d:05:e7:41:56:76:50:bb:25:3e:8e:13:5e:96:5e:80:2e:75:
17:76:53:d3:f7:80:98:23:ee:40:8a:36:e1:c1:f1:c4:a4:a9:
83:b3:bc:cf:b0:d7:5f:28:5e:0b:9a:5c:76:69:4e:2c:ca:6e:
5a:a9:f2:06:f6:60:08:83:1a:1c:81:aa:06:4a:a6:22:72:5f:
cd:3f:98:8c:1e:15:9f:6b:2a:79:d1:b5:fb:71:94:51:31:59:
74:8b:e8:4d:93:4c:0c:53:80:4c:1c:1d:b8:74:75:74:0f:af:
46:b8:9c:6e:78:09:1e:f4:23:6d:fe:77:d4:76:e9:82:6b:93:
65:bb:00:45:2a:37:87:66:9c:45:81:99:99:d2:b5:57:de:09:
10:bd:72:ab:51:17:23:e1:01:be:ac:86:be:66:ab:c7:7b:c0:
9e:61:a6:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:26:34 2026 by rpki-client