
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
File: UNpYj16aHCr1a-CPfmosmYGrYCY.mft (raw, json)
Hash identifier: TmJ883wKK6q/eb8xjnhOVquD53JuGds6xRNWsms3sRE=
Subject key identifier: 8B:58:91:6C:69:B9:CF:97:0F:9F:3B:41:AC:B0:84:E6:82:24:FA:5B
Authority key identifier: 50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
Certificate issuer: /CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Certificate serial: 01A1DCEFBE60B3BA872E6104C8FF5B9D0EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
Manifest number: 0F63
Signing time: Sun 15 Nov 2026 02:01:01 +0000
Manifest this update: Sun 15 Nov 2026 02:01:01 +0000
Manifest next update: Mon 16 Nov 2026 02:01:01 +0000
Files and hashes: 1: UNpYj16aHCr1a-CPfmosmYGrYCY.crl (hash: DgqRUDrthx9VhtCWf1TZsfAh7cq91soVRNkAe9KsT/c=)
2: e-at-P8xiBcITaRp9MWoA0_N7Yc.roa (hash: 9wLByEu5Ei2XqfeNnvQ5SxG/GiSaQBkbBEsIrzP6Rl8=)
3: uB1EV_9of9OBUO5nh6wjIcM7XYM.roa (hash: JxjVwCsJHpCurdGu1ulwE9pvdYXZMK7HdluGzn2poh0=)
4: zGkoogpOSV7OrRFE8ZxQlbFMmf0.roa (hash: Lv+rOmGoTKRisbrnO2jtdKQEexKh+o81CnIGv9g18ac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dc:ef:be:60:b3:ba:87:2e:61:04:c8:ff:5b:9d:0e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50da588f5e9a1c2af56be08f7e6a2c9981ab6026
Validity
Not Before: Nov 15 02:01:01 2026 GMT
Not After : Nov 16 02:01:01 2026 GMT
Subject: CN=8b58916c69b9cf970f9f3b41acb084e68224fa5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:6b:8d:c5:03:27:f6:ec:f6:23:68:49:1b:58:
12:49:89:85:58:39:33:b4:5e:f4:d2:f0:17:d5:7e:
db:a1:46:c0:87:a8:c8:6b:94:b9:da:90:f3:ad:6e:
42:bf:18:a3:6d:62:20:79:19:e2:08:9e:f1:b4:63:
27:29:95:16:64:06:27:cc:95:e6:3c:30:e0:50:83:
cc:cb:ce:25:7c:fd:82:21:d5:77:53:37:5f:fa:79:
15:c1:0a:2b:85:03:de:42:1e:cf:d8:be:49:d1:2b:
40:12:6c:2e:4c:98:5c:98:29:33:b1:bf:2b:c5:c0:
f7:0b:e2:e9:8e:ab:30:8b:bc:6d:26:d2:5a:d4:d1:
49:ce:37:98:c8:7e:c2:b7:6a:fb:ed:c6:27:d7:8a:
f3:01:f0:19:62:61:f7:ba:df:f8:a6:e8:e6:e9:ea:
ca:46:ca:f3:6f:13:41:4d:46:bf:1b:71:fd:be:d3:
4b:c9:e5:fc:59:21:76:11:e1:ee:fc:11:73:cb:c9:
c8:e1:0b:7e:3f:12:6f:c0:68:8a:b1:bd:00:4e:c6:
c2:e5:98:e6:71:90:15:f6:bc:ab:12:69:27:67:2a:
8e:d8:9f:d9:34:83:fb:f7:58:ec:27:8f:f8:14:06:
9e:ca:4d:4f:19:8a:c4:80:17:87:79:da:bf:d6:2d:
f1:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:58:91:6C:69:B9:CF:97:0F:9F:3B:41:AC:B0:84:E6:82:24:FA:5B
X509v3 Authority Key Identifier:
keyid:50:DA:58:8F:5E:9A:1C:2A:F5:6B:E0:8F:7E:6A:2C:99:81:AB:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UNpYj16aHCr1a-CPfmosmYGrYCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/731b4c-8ca8-497b-8a2b-43c1c61d02eb/1/UNpYj16aHCr1a-CPfmosmYGrYCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:0b:5f:f3:74:ff:96:a9:24:f9:62:66:b1:c1:df:68:b5:ce:
bf:b1:cb:94:33:f9:b4:73:5e:a9:cb:b9:f6:16:fa:ad:17:13:
a9:35:b2:e3:79:37:6c:67:23:fd:5f:c7:32:ad:64:37:86:b6:
0f:bd:b3:8e:4e:34:ef:57:a9:b9:88:50:6a:30:b0:df:10:73:
35:29:be:65:a4:57:d8:43:99:24:68:2b:ee:fb:51:bc:59:22:
79:c7:7b:10:42:ce:89:92:a6:03:f9:b3:84:84:f4:a5:26:c6:
f1:09:35:d0:04:f0:dc:4a:a8:90:ae:ad:90:41:c6:52:42:50:
eb:ab:7b:b5:a5:1c:c8:c1:72:7d:e0:91:9e:6c:c6:a7:5e:6a:
74:98:1b:2f:46:9b:c1:2e:d1:44:a4:14:89:1f:3e:60:81:bd:
51:88:43:f4:82:f1:8d:7d:da:b6:c3:cd:7d:39:af:06:0b:cc:
2e:44:36:af:26:f8:30:83:3e:48:0b:30:29:08:c2:49:9a:c4:
f8:96:28:e0:8d:bc:e0:fe:3c:de:6a:a3:8c:57:bf:20:ef:fb:
59:70:ad:8e:e8:a7:1f:9d:c5:60:9c:b9:87:49:2d:97:9b:50:
88:d8:a9:ab:f7:ba:32:64:48:a8:59:93:80:49:4c:d9:b8:2e:
f4:84:45:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:59:42 2026 by rpki-client