Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File: UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier: ahZwEENFWao1OBnSp9/XQGaxFo9p983J7N3fAKOmm4M=
Subject key identifier: A5:2F:B1:4D:73:6D:B0:A2:3A:2E:61:E9:27:0D:21:BD:25:FB:2A:0A
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial: 01A10135D2E7AACC4126B4BE6B903132AB7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number: 1A85
Signing time: Sat 03 Oct 2026 10:01:06 +0000
Manifest this update: Sat 03 Oct 2026 10:01:06 +0000
Manifest next update: Sun 04 Oct 2026 10:01:06 +0000
Files and hashes: 1: Qjcz_PS0tGHgVp4sFdHi9YmmanQ.roa (hash: bNCXCGEDvdLCDKAMMYQGu7EJRHAHnyr4sSGJfowyZWg=)
2: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: goBqF9jjZ9O4V0MUArwWo6OC7Y7xSUSpqMuBy8Y/Auk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 10:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:35:d2:e7:aa:cc:41:26:b4:be:6b:90:31:32:ab:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Validity
Not Before: Oct 3 10:01:06 2026 GMT
Not After : Oct 4 10:01:06 2026 GMT
Subject: CN=a52fb14d736db0a23a2e61e9270d21bd25fb2a0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:1e:24:3d:47:10:4d:8c:bc:4d:01:cd:0c:2e:
97:7a:93:de:de:65:45:8c:22:ac:36:a8:d5:d3:31:
36:b0:81:cb:a4:03:ea:2c:e2:5d:ff:bb:4f:a5:27:
8b:ae:64:f3:4d:72:66:87:65:4b:89:39:af:b0:da:
b5:cb:cd:c9:f5:03:04:64:6d:c4:f3:0e:bc:23:7c:
dd:a4:0b:96:7c:38:65:d6:28:e6:69:96:37:39:33:
3f:9e:53:b6:5a:db:67:c3:7f:b4:61:af:8d:e5:3b:
af:01:4d:fb:3d:43:d6:e8:56:71:d3:6c:19:95:67:
85:44:30:88:ae:ac:fe:3b:4f:9c:f4:f4:3e:83:2e:
0d:95:35:39:98:ff:be:07:4e:01:a5:b6:4b:c6:89:
f3:28:d1:1f:6b:7a:18:b2:20:16:d6:18:24:76:68:
70:1b:f8:b2:9d:44:4e:4b:65:19:12:23:6d:c6:c2:
ed:30:ee:66:74:23:8c:cd:6a:08:48:84:4e:c0:dc:
66:b7:c3:9a:ea:b6:be:7f:93:fa:9d:47:11:21:e6:
8a:37:2b:5a:9a:9b:39:3e:6f:94:54:cb:e9:7c:04:
d0:d2:de:65:75:91:d7:2f:fd:7e:b2:6a:11:4c:51:
ce:91:ff:0f:94:1e:9f:d7:ed:47:8a:08:db:0c:26:
ce:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:2F:B1:4D:73:6D:B0:A2:3A:2E:61:E9:27:0D:21:BD:25:FB:2A:0A
X509v3 Authority Key Identifier:
keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:cd:bf:97:b3:27:d7:dc:6e:48:a4:d7:8c:b9:07:20:5a:3f:
45:05:b9:5b:24:fe:a1:3b:1b:b2:7b:d3:e4:f8:2a:7f:a3:1b:
ff:fa:b0:0a:ef:4c:2f:c3:a5:ca:92:12:92:69:e1:79:85:f9:
71:a0:78:9f:24:65:47:b4:0b:ea:76:16:db:b7:fe:ff:6b:25:
c8:e4:2a:ee:ea:d2:c9:cb:8c:81:79:49:04:5f:01:43:f8:9b:
5c:fc:d6:4a:75:4b:dd:42:42:ef:20:41:8d:b7:1d:c7:83:69:
9e:0c:f2:f1:46:e7:01:33:78:17:2d:de:73:65:64:30:79:ef:
d9:95:b1:c6:aa:c5:84:43:ff:8d:14:cf:73:33:a8:4e:07:8c:
3a:d2:09:ac:ba:5c:94:97:31:33:8d:c5:24:47:d0:56:82:25:
27:26:44:6b:5d:68:a2:d7:45:4a:87:f9:86:31:a9:0f:8b:a1:
d1:76:d4:27:71:dd:08:5e:71:52:11:96:ba:91:bf:21:37:b5:
64:20:88:64:98:ee:d2:a0:48:ba:7b:c5:80:5b:34:7e:8b:7f:
98:22:78:e5:8d:df:ea:aa:03:fb:fd:59:6c:e8:97:6b:75:6a:
df:0e:49:6d:64:9e:95:3f:a6:99:65:c3:74:0f:71:b6:5b:fe:
ad:74:ed:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 15:58:39 2026 by rpki-client