Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: kWuxhD4k43AutMldKcestvchTjHKHFcT+6Z4N4iCS7g=
Subject key identifier: AD:FC:FA:76:1F:45:A9:C5:02:6A:8A:CF:3E:C8:98:6E:28:70:94:C0
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019F85D6E7B605F81AEBB3FD012F3124F9BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0CA1
Signing time: Tue 21 Jul 2026 18:01:21 +0000
Manifest this update: Tue 21 Jul 2026 18:01:21 +0000
Manifest next update: Wed 22 Jul 2026 18:01:21 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: ykzIMDEHcRW6U9eDTQ7w/Uyf9BH5D7fWYhET0WUb9BE=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:85:d6:e7:b6:05:f8:1a:eb:b3:fd:01:2f:31:24:f9:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Jul 21 18:01:21 2026 GMT
Not After : Jul 22 18:01:21 2026 GMT
Subject: CN=adfcfa761f45a9c5026a8acf3ec8986e287094c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:f8:6d:0d:4c:a0:1d:b0:2e:e8:45:96:db:b4:
8a:74:e8:db:fa:2b:b7:74:c8:be:45:81:a5:3d:7d:
6a:11:46:c0:89:35:13:5d:c1:47:b9:20:2d:7f:1d:
3c:37:0b:c8:f9:33:1f:ba:ce:52:72:0b:ce:bd:0b:
6d:8d:51:f9:eb:d2:0f:09:77:88:80:3e:40:82:d0:
be:c5:1b:0d:54:42:c4:2b:25:2d:3d:51:3c:12:bc:
f5:b1:a0:63:e3:0a:64:fa:23:e5:4d:ff:93:64:34:
11:33:07:a1:0f:2e:0d:55:23:19:28:df:62:c9:88:
81:c2:c8:c5:b9:36:89:d6:9a:7a:20:8f:7a:64:f0:
6d:e0:93:1e:08:0a:ff:93:85:d9:68:37:75:a6:61:
5f:4b:5a:6d:dc:75:be:ed:c3:c2:aa:c7:f5:b2:9e:
fa:99:3a:8a:96:8a:e1:d1:32:d0:d6:0a:ba:f8:4c:
8b:e5:44:a0:5a:a6:bd:ec:96:25:f7:e5:dd:d8:f4:
84:f4:e2:43:d3:26:b9:d8:ed:55:28:3e:c1:f2:7f:
d4:55:de:e3:dc:d7:13:98:e4:a8:c1:ae:06:c6:d8:
5e:35:c2:37:ee:c2:cc:1a:75:8a:e3:b0:0f:a4:a5:
6a:19:7b:24:37:63:a2:cc:50:19:47:c4:48:01:ac:
97:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:FC:FA:76:1F:45:A9:C5:02:6A:8A:CF:3E:C8:98:6E:28:70:94:C0
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:e5:3c:24:db:65:18:a2:08:11:3f:3c:dd:1d:45:0c:b6:a0:
4f:68:7f:06:de:41:c7:2e:66:ef:56:d4:cf:65:19:8b:c0:e7:
e8:3b:e4:31:01:5f:22:e0:97:37:4c:49:46:ee:03:b0:15:49:
f6:46:c6:ef:51:5e:1a:66:dc:9d:a0:51:74:d3:83:81:bb:70:
53:89:bc:4f:79:e5:bf:c3:6b:a6:0c:2f:5a:8f:8d:99:4a:11:
73:74:d0:1c:7a:cf:ed:c5:7e:4e:22:33:4b:2b:a5:d6:b0:19:
a9:04:a6:49:c4:8d:8b:be:52:e9:2e:fc:33:05:c4:a0:67:cd:
66:8e:e3:4f:5c:3b:4f:99:33:d0:0e:35:41:24:36:ce:ba:6b:
b2:f7:6b:c1:f6:02:0a:1c:e3:24:d8:2a:93:54:77:08:0f:6b:
0a:be:84:f5:56:47:6c:78:43:f1:b7:66:97:18:08:7a:32:02:
40:ea:34:76:e3:d0:fd:8c:2e:97:78:b2:a5:25:67:99:c5:75:
67:43:f7:10:37:07:55:9f:5c:e2:94:25:97:91:15:b5:aa:6c:
9d:01:9b:3e:06:d4:46:cf:2c:a9:fa:30:e6:8c:0c:8f:e2:aa:
0f:46:23:ba:59:d0:19:ff:1b:9e:ae:1a:07:98:23:fd:91:2d:
9f:da:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:42:56 2026 by rpki-client