Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier: Hvf9mkuLSGXk8CF9ymHenC8vn8O/aGc8Ogwq9jGou6Y=
Subject key identifier: B5:69:41:F6:9D:11:40:E8:FE:F1:3C:DC:68:33:1F:46:E0:AC:A5:32
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 019E1BD8987B8CFD6DCD1688408BF107E989
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number: 17CD
Signing time: Tue 12 May 2026 11:00:40 +0000
Manifest this update: Tue 12 May 2026 11:00:40 +0000
Manifest next update: Wed 13 May 2026 11:00:40 +0000
Files and hashes: 1: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: uwqaA3Z+FSmc8R++ieQ7mxJDBzFsS96IejzeotTsaE4=)
2: lOV0FvZ4UI1RmBR3zL2RaV_Elps.roa (hash: OQfXce7br5oDI4HR7IRbJp2FZmT/5i/l+05MQHFeiH4=)
3: xfISNhaNx-QdtidwC9e-_Q1kCgo.asa (hash: mXrj296pB/exm/joNYtGKERBhDpRLhpWbyAKIvLFAPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1b:d8:98:7b:8c:fd:6d:cd:16:88:40:8b:f1:07:e9:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: May 12 11:00:40 2026 GMT
Not After : May 13 11:00:40 2026 GMT
Subject: CN=b56941f69d1140e8fef13cdc68331f46e0aca532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c9:29:44:b9:57:32:6b:60:f6:19:b7:e0:70:
7a:87:0f:72:b3:f6:73:07:50:49:fe:74:9b:4d:a5:
7b:6e:36:05:ae:5d:b2:d9:73:23:a8:89:19:b0:7b:
c2:a2:7c:b4:3c:e9:92:c0:ec:81:a7:ce:90:de:d9:
1e:a8:d6:27:3e:80:9c:c0:6c:f8:ae:cb:03:64:63:
ee:2e:b4:f0:56:9a:9a:4f:5e:fb:88:00:fa:e5:97:
53:75:8e:b9:c7:9a:95:81:be:7d:09:14:54:20:55:
18:2a:1e:1b:ff:28:fe:93:cc:d3:66:be:8b:87:85:
d5:5d:a8:ae:77:a3:1d:64:a7:0f:6c:fd:f7:6e:dc:
7f:1d:f5:6f:04:cb:f0:71:e3:62:d0:ad:0b:6b:ff:
dd:94:b6:f2:c8:61:95:bd:99:4f:9d:28:20:62:b3:
1e:2b:45:bd:68:a8:08:c8:75:6d:cc:01:d7:47:44:
5d:45:43:f5:fa:bd:1c:ca:42:fb:c3:ba:ff:d4:6f:
19:20:1f:08:07:66:ba:59:70:24:68:77:be:7b:fb:
fc:da:63:24:59:4d:4f:66:9c:bc:d2:0e:9f:9a:44:
53:d9:b3:3e:d0:5f:be:91:ed:bf:d3:95:20:4f:88:
35:d5:26:37:61:a5:33:60:89:fe:45:e7:57:f2:92:
90:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:69:41:F6:9D:11:40:E8:FE:F1:3C:DC:68:33:1F:46:E0:AC:A5:32
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:30:3e:40:3a:26:a6:ec:91:5e:46:5b:58:0d:36:15:a1:88:
29:84:4d:d9:b5:05:17:08:45:97:73:2b:d9:3c:73:f2:99:72:
70:40:e9:7a:1a:de:7b:2e:19:f1:09:f3:76:da:92:bd:95:13:
c0:2c:32:78:47:92:ae:7e:20:3b:84:5d:ea:b2:0b:23:69:a4:
ad:26:9e:fa:18:1f:14:60:a1:3e:53:b3:af:e6:34:db:a9:21:
d5:55:d2:d7:27:42:57:54:dd:e5:7a:0f:96:e9:bf:2f:c4:11:
a6:87:24:f8:12:6b:11:c5:e0:6d:5b:2e:48:8b:a8:38:bf:e6:
da:df:32:f5:00:cc:31:7d:02:0f:02:60:c3:52:77:f2:c7:bf:
70:3a:70:b8:8f:f7:8c:26:d7:00:fb:c8:b3:16:64:56:9a:c6:
da:4c:15:25:90:95:61:28:a7:78:3e:4b:31:8e:50:19:60:6a:
76:a1:bc:eb:6d:8b:26:60:d3:f7:98:4c:dd:23:4a:14:76:05:
d8:f5:5e:05:95:c0:35:81:3b:70:43:2a:a6:ba:ec:62:c4:a1:
11:43:e2:9b:ff:57:66:60:af:d6:47:6f:71:87:2b:9f:c2:5c:
ea:2a:e5:09:1d:61:41:7e:f8:2d:c7:53:69:c4:77:8b:ed:1d:
1b:d3:ee:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:51:32 2026 by rpki-client