Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: fDldrEOipZYE9ZVklu6f2riQb0Dln27Jtu07J0vFMGU=
Subject key identifier: FD:15:4B:1C:33:EE:D2:00:85:D3:5C:B2:FA:24:05:57:C9:AF:85:73
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019E9C29938BE43AB3AB03576FD644AA7892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0C28
Signing time: Sat 06 Jun 2026 09:00:30 +0000
Manifest this update: Sat 06 Jun 2026 09:00:30 +0000
Manifest next update: Sun 07 Jun 2026 09:00:30 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: RDasYbkbHbL48oXpNdew5rAWr3MisIqw6Cp/bRQb/+s=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:29:93:8b:e4:3a:b3:ab:03:57:6f:d6:44:aa:78:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Jun 6 09:00:30 2026 GMT
Not After : Jun 7 09:00:30 2026 GMT
Subject: CN=fd154b1c33eed20085d35cb2fa240557c9af8573
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:10:e0:9c:d3:97:04:88:7b:96:6d:1c:37:be:
11:c4:51:79:80:d7:a8:b1:49:68:63:31:a4:04:dd:
91:b3:d9:90:31:5f:06:75:d4:97:02:2e:65:2e:6e:
3a:63:62:f6:28:b9:ec:8c:d2:a8:f6:1c:89:71:56:
f5:6a:f1:ed:81:d4:02:44:34:d2:29:53:b2:5e:8f:
f9:9e:6e:db:ec:0a:d5:f6:53:a4:d3:74:a6:5b:9a:
e2:3a:7e:13:1a:12:41:09:77:25:69:45:44:5b:1b:
20:ec:b7:28:28:36:bd:28:16:6e:51:54:46:3f:9e:
bf:6b:b3:92:17:a3:4d:d7:ee:94:a2:9a:38:35:85:
d5:d6:42:e5:be:35:3e:45:7f:43:58:5b:db:4b:a5:
a3:ce:6a:12:81:39:61:07:7a:fe:9b:89:ad:b9:81:
56:6e:71:41:36:f3:be:5f:e8:2d:39:e0:82:57:ed:
03:04:6c:ea:fa:ae:61:eb:e4:3d:33:07:25:06:d9:
0b:4e:50:e3:9b:24:43:1f:2f:19:a3:cd:43:42:55:
52:6a:78:3c:00:02:5c:21:66:5a:a3:93:eb:c2:6a:
b6:62:ea:09:17:be:4f:5b:e3:e5:1d:20:35:eb:7a:
58:dc:e4:c5:87:60:67:96:f5:9a:34:9b:ed:1c:d4:
cb:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:15:4B:1C:33:EE:D2:00:85:D3:5C:B2:FA:24:05:57:C9:AF:85:73
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:e1:5f:18:39:3a:6f:8c:9b:e3:ab:21:f1:97:8d:d6:75:35:
e8:3b:f6:6a:88:b3:14:08:51:56:54:b4:0d:ff:28:cd:7e:1b:
05:6f:43:af:15:bf:2e:28:ff:c0:60:aa:0a:73:98:01:3f:94:
84:5a:fc:af:07:ca:98:08:69:b5:13:4e:5e:9d:8f:31:38:51:
4f:76:5b:1a:dd:0b:30:50:89:02:7b:3c:e9:ed:d9:ef:5e:ba:
d9:c7:5a:e8:c2:23:00:b1:21:21:52:e9:ab:23:1e:c5:79:83:
c8:73:12:51:86:ad:4e:de:ae:8b:d4:5c:5a:db:ef:94:e8:7b:
ee:71:03:71:77:e6:df:b8:97:09:1d:78:52:3e:79:70:4e:3c:
33:15:2d:54:a9:ae:f1:52:b8:d9:f5:98:c1:58:65:c1:43:79:
c7:a4:06:61:2d:8b:0d:75:9c:37:53:0f:73:7d:64:70:1f:9e:
d7:f3:8a:35:17:63:d6:c1:8a:47:39:d3:7f:22:d9:7c:12:bb:
12:63:2f:a6:d4:21:a1:d3:35:18:ad:3b:ff:48:db:75:53:91:
f5:db:c8:e3:09:28:d9:d3:8e:c4:34:ed:31:d8:b7:90:e4:3c:
09:55:e5:61:0e:8d:a3:1e:7e:1f:7f:21:bf:a7:97:3e:e1:8f:
42:ed:12:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 12:17:20 2026 by rpki-client