Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: fIJ/vwJ0dQcKGtpm8c161Q7ZI1v8Pj0kU4yqfPCTcpQ=
Subject key identifier: 4D:90:F0:A1:05:21:2F:3A:61:D8:53:5C:08:7F:71:C6:88:ED:4A:8A
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 01A0D45D0A02F90C80D211FCDD41E8886CBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0EDA
Signing time: Thu 24 Sep 2026 17:01:02 +0000
Manifest this update: Thu 24 Sep 2026 17:01:02 +0000
Manifest next update: Fri 25 Sep 2026 17:01:02 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: FLzsLX/2UPfpbv2JQaFwmcQLtj9M+WObSpKvXBq1550=)
2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 17:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:0a:02:f9:0c:80:d2:11:fc:dd:41:e8:88:6c:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Sep 24 17:01:02 2026 GMT
Not After : Sep 25 17:01:02 2026 GMT
Subject: CN=4d90f0a105212f3a61d8535c087f71c688ed4a8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:2e:43:f9:70:14:1e:3a:e6:a4:b9:78:72:
93:3a:e6:72:d6:c4:a2:93:0b:d8:66:fb:98:37:6f:
c7:e2:c9:a0:e1:73:74:28:90:d3:18:71:18:b4:e2:
ce:e5:48:b2:58:d6:6f:ef:1a:fb:ee:01:e4:e2:48:
15:a6:1d:1a:e3:ef:9e:a1:ad:c7:38:34:00:62:5a:
22:c3:3b:0d:4a:78:02:d1:78:4e:f3:35:37:b5:b3:
93:c9:cf:6a:b1:58:25:3f:78:73:3e:7b:c3:e9:e3:
58:65:5f:77:66:a9:51:69:a4:95:d9:1d:0c:f5:a7:
f1:ee:42:52:b4:aa:43:46:fb:4d:0b:3e:b8:d5:5e:
7d:65:93:dd:e9:3a:55:0b:d2:e6:3a:10:d8:16:4f:
f2:4a:be:8b:b1:01:71:de:af:58:07:bc:10:d0:de:
4c:22:96:6e:ec:bc:0e:d8:8d:77:d1:47:ce:b7:92:
d3:b0:89:a1:3a:8d:d2:fd:18:4f:b5:88:a9:e1:58:
a3:34:32:68:0a:21:47:d4:71:64:bd:12:05:08:b4:
e8:0a:89:8b:d5:45:33:12:1d:ab:23:da:27:5c:99:
c4:2b:95:fc:80:d8:fc:5e:9d:9e:06:13:cd:c4:a0:
d0:e3:55:21:2a:36:b0:42:46:47:f0:dc:de:9e:30:
2b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:90:F0:A1:05:21:2F:3A:61:D8:53:5C:08:7F:71:C6:88:ED:4A:8A
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:1a:03:e8:99:43:50:34:96:25:18:21:6d:11:5a:b2:0b:bb:
1f:ab:3b:c4:e4:1c:34:45:15:51:b4:45:d2:fe:d2:9c:2b:61:
41:0b:04:1f:cf:11:78:df:9f:22:16:34:7c:72:bc:01:7d:c0:
34:88:4c:40:02:bd:94:fc:b3:28:24:30:26:17:40:ff:ee:1e:
d5:fe:7f:a9:19:31:08:ef:12:08:d0:43:13:52:ac:6b:99:90:
56:c1:26:fd:bc:a3:ba:3c:08:99:82:14:1d:2b:00:ad:88:af:
23:db:b8:b2:d4:9f:3f:02:4f:92:ca:cf:04:13:fd:5b:c7:d5:
eb:69:51:11:ce:62:77:8e:5d:e3:9e:75:b4:43:9d:8b:17:f0:
5c:31:c8:b0:b5:dc:53:f7:22:f4:58:23:68:25:85:dc:67:1b:
15:ed:57:5b:d6:15:55:7f:41:ac:5a:c7:65:ea:89:c4:54:4a:
b8:27:09:73:3a:0d:0c:d4:ea:65:b9:48:11:62:3c:b8:15:a0:
70:11:e2:c6:21:b5:48:5c:e8:79:4b:4b:0d:55:a3:0c:2e:a3:
c1:23:3a:96:21:36:95:59:8e:db:96:70:8f:16:5f:f7:bb:b6:
39:c1:1c:06:dc:fc:78:b2:9b:30:64:b2:a4:f5:4e:b6:72:6e:
84:08:e2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:45:27 2026 by rpki-client