Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File: UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier: IjxMLytkMkGDLxuWOqOFBax6uKSAq3dN0ysRrX26rKw=
Subject key identifier: 25:E9:9F:ED:74:A0:6A:A1:A6:0E:1C:06:75:80:C7:A7:72:D7:DB:C5
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial: 019D31F5AFF72E7929C94887988F199194EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number: 188C
Signing time: Sat 28 Mar 2026 01:01:18 +0000
Manifest this update: Sat 28 Mar 2026 01:01:18 +0000
Manifest next update: Sun 29 Mar 2026 01:01:18 +0000
Files and hashes: 1: Qjcz_PS0tGHgVp4sFdHi9YmmanQ.roa (hash: bNCXCGEDvdLCDKAMMYQGu7EJRHAHnyr4sSGJfowyZWg=)
2: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: Ga4j0/MXQuU4P9eDicMVWvBl6OEeN4PDvUaWrqQo3BU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:31:f5:af:f7:2e:79:29:c9:48:87:98:8f:19:91:94:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Validity
Not Before: Mar 28 01:01:18 2026 GMT
Not After : Mar 29 01:01:18 2026 GMT
Subject: CN=25e99fed74a06aa1a60e1c067580c7a772d7dbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:30:f4:01:cd:ba:31:54:5a:bf:f0:7b:d0:bb:
75:d8:18:55:ea:86:fb:5e:6f:88:fc:b1:c0:c7:67:
1a:eb:fb:bc:5a:a6:fa:40:20:52:c0:38:ad:ec:6c:
dc:1f:b6:f5:30:44:e5:12:7f:a8:fc:50:06:e5:ea:
85:42:c2:e0:b9:d6:dc:52:59:e4:15:77:a4:29:af:
34:a2:eb:42:09:d8:0b:1b:4d:e8:b9:d1:f4:18:80:
78:fb:1a:3f:1f:b2:03:d2:c5:3b:f7:9f:c7:d9:47:
35:02:1a:0e:d1:ae:05:89:b9:8e:64:e2:47:da:34:
42:07:91:1e:cf:6a:ac:e6:64:09:d1:73:0c:52:02:
62:bc:e7:55:fd:b4:8a:80:c5:3e:ef:ec:90:68:0e:
5e:ec:f6:64:28:a3:f7:58:84:84:63:08:13:42:27:
9e:8e:fa:92:26:18:0c:c1:ef:c4:ad:36:8a:33:6d:
83:90:63:2d:f9:c9:b5:79:c4:f7:5d:7a:8e:9b:d4:
11:af:3d:23:eb:83:36:5e:e8:31:5b:37:90:89:50:
39:d5:a9:80:3d:98:8d:a7:da:95:73:c2:d5:2c:4e:
30:a2:d4:26:33:fa:ac:20:ae:6f:ee:df:08:e0:14:
d4:00:b3:1f:18:d4:73:69:b1:ae:ca:e6:f7:11:19:
91:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:E9:9F:ED:74:A0:6A:A1:A6:0E:1C:06:75:80:C7:A7:72:D7:DB:C5
X509v3 Authority Key Identifier:
keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:44:3e:09:82:8e:70:48:f9:da:26:25:23:aa:f3:52:a5:cd:
97:c8:4a:cc:f1:6b:62:86:59:b4:03:91:9d:cf:ce:99:1b:4a:
36:76:b2:6e:1c:4b:4e:cd:e3:0a:fe:0e:dd:9c:ec:bc:f8:73:
b6:fd:40:92:27:b7:9b:83:c8:cb:63:89:44:f9:47:d9:1e:46:
00:da:d6:2c:d1:83:23:fe:3b:48:53:d3:53:50:d4:80:1c:0b:
d5:14:7c:4d:70:40:80:61:d8:c5:43:12:e9:f4:ab:7c:e1:ae:
aa:7c:54:93:ed:e3:fd:7e:17:c4:d0:6c:e6:03:0c:aa:ea:ff:
20:29:2c:7b:3b:12:f8:4e:b6:98:0d:23:02:43:40:8b:2a:93:
44:f3:fa:fa:55:f3:65:95:80:ae:bf:9f:08:24:33:24:32:68:
bc:17:83:c0:19:83:32:61:8a:3e:cf:b3:2b:c3:13:5b:c2:75:
21:2b:39:c4:13:e3:3f:72:ae:da:a9:60:be:04:d7:b4:a4:dc:
33:d1:78:99:80:ff:eb:ec:08:7d:03:20:2c:57:37:d2:03:d6:
c5:b1:bb:0a:13:38:6f:5c:8e:b1:d8:da:15:84:5c:5f:2b:08:
e0:c5:fd:6d:a7:6d:57:cc:20:23:1f:95:47:de:4b:17:43:47:
e3:0b:26:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:34:56 2026 by rpki-client