
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier: qgr4iwqTgmyEW6aNGA6Bu4Z2uzKtO/5hC2ixN20Ohv4=
Subject key identifier: DD:C2:3F:7E:E2:95:68:E8:02:33:3A:16:B4:8C:94:08:A4:12:4D:B6
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 019D29972886AFF417638EEC08E153F7AD62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number: 174E
Signing time: Thu 26 Mar 2026 10:01:05 +0000
Manifest this update: Thu 26 Mar 2026 10:01:05 +0000
Manifest next update: Fri 27 Mar 2026 10:01:05 +0000
Files and hashes: 1: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: 9a3U8hXPqC/X+x1gwvURPotI8kiM7SIrIslBcxcFGn8=)
2: dR9tL359Jq4PTUxldPAbPoPg-fw.roa (hash: PUxcMJ2MZAwjyZvVJuJQ3lwg6WIyZODgR7GlmoRaalc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:28:86:af:f4:17:63:8e:ec:08:e1:53:f7:ad:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Mar 26 10:01:05 2026 GMT
Not After : Mar 27 10:01:05 2026 GMT
Subject: CN=ddc23f7ee29568e802333a16b48c9408a4124db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:83:27:a8:61:2b:ae:cf:09:3f:5b:4b:bd:18:
40:a8:73:34:f6:4a:63:e9:92:01:7c:0e:35:f5:12:
19:e2:8c:42:f4:10:ac:52:85:ea:41:35:ef:ad:c5:
61:51:96:d6:42:a8:6e:20:9e:bb:53:1e:3a:97:4e:
f9:b2:19:29:9a:e9:c1:5e:e2:65:b2:e9:b8:26:f6:
06:2a:a4:da:75:39:df:a9:8a:e4:81:9c:60:65:29:
ca:19:3f:ac:af:d8:15:a4:b3:89:6c:31:e4:0d:fe:
3f:de:35:fc:61:cc:38:d0:af:6b:0c:d4:f5:b9:7c:
30:51:f1:a7:53:84:4d:8e:c0:d6:18:fa:d5:5f:8d:
3e:95:20:8c:e6:87:32:96:f8:88:b0:0d:b3:95:8f:
b1:8a:77:fe:01:34:3d:f5:90:62:cb:8c:a2:ea:53:
c4:05:d9:cd:b3:48:a8:cb:fd:28:20:2b:10:09:49:
6b:f6:b8:86:bb:eb:a5:1f:41:9b:e7:4e:57:a8:70:
95:37:7b:45:7a:9e:20:7a:42:a9:6c:78:0c:cb:78:
60:b5:8f:7a:60:85:e7:a2:24:26:00:6e:1f:8a:43:
dc:49:a0:9a:d5:65:7c:86:12:49:aa:5e:cd:06:e1:
87:e7:17:6c:b3:90:7d:52:69:aa:32:fc:0b:f6:e5:
79:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:C2:3F:7E:E2:95:68:E8:02:33:3A:16:B4:8C:94:08:A4:12:4D:B6
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:60:f8:95:9c:89:4e:5f:20:a2:8d:4e:50:c2:12:f6:64:ec:
c6:d3:65:f6:fc:27:88:16:77:c0:0b:65:cf:d5:94:fb:ab:51:
25:82:13:35:be:56:3f:f8:1a:67:c4:ed:3d:ad:26:e4:49:22:
a2:6d:54:84:44:71:c3:ba:b9:b0:c8:f6:31:60:4a:7a:15:e5:
28:ab:ad:3c:f9:88:01:ec:dc:b0:cb:e2:e2:5a:9a:6a:92:71:
f8:29:e6:39:74:91:f8:40:29:78:0b:45:ac:be:5e:44:24:63:
90:b3:79:fb:fd:b9:39:f2:e6:c8:81:17:65:74:f2:42:39:67:
39:b1:c3:53:5f:3e:d8:fe:3d:c7:09:ba:ea:a2:c0:1e:c4:c2:
d0:8d:eb:47:d8:99:ab:6e:25:b7:ee:29:eb:62:47:a5:65:d7:
26:a9:83:c4:66:c3:5e:09:c0:cb:c1:30:e2:16:db:3a:f1:95:
3d:ee:ca:9c:2c:21:8c:e3:26:b9:0e:3e:15:f6:47:35:bf:49:
1d:a3:61:5e:ac:67:98:68:ca:d3:8c:a7:71:86:b1:10:93:c3:
8f:9c:61:91:52:f3:cd:73:89:4f:68:f6:90:b1:9b:b6:63:d3:
5c:38:67:4c:6a:65:ea:05:c3:96:da:d2:25:39:6e:26:17:07:
29:13:f7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:38:42 2026 by rpki-client