Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: tvqy3/sS+XlPftkPBnTfO0a1mZ91KJikKPCoRrpUqtw=
Subject key identifier: F2:17:A9:F4:DD:9D:04:93:2F:7C:35:20:BF:83:F7:40:8B:60:6D:22
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 01A0E3D0CA2584F7DDDC6F62576B6CFB0E14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 169D
Signing time: Sun 27 Sep 2026 17:01:46 +0000
Manifest this update: Sun 27 Sep 2026 17:01:46 +0000
Manifest next update: Mon 28 Sep 2026 17:01:46 +0000
Files and hashes: 1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: +90iuH+V8GibXMI+8cbwXCvn6btdmGJBkbITmGz6DLM=)
2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
3: r-wLcfbrV7gSA_iFZTlD40lbPxI.roa (hash: 9BuizisqfHZcVlGBCcKNw9NkVDpUfvizltmHgaebiwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:d0:ca:25:84:f7:dd:dc:6f:62:57:6b:6c:fb:0e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Sep 27 17:01:46 2026 GMT
Not After : Sep 28 17:01:46 2026 GMT
Subject: CN=f217a9f4dd9d04932f7c3520bf83f7408b606d22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:28:09:9f:0d:47:73:1c:46:e8:e7:96:0b:63:
76:53:f0:ac:64:ce:21:01:81:be:6d:f7:87:18:58:
cc:c7:b0:aa:49:f2:9b:d8:c4:6d:3f:22:6f:d8:34:
6d:be:ad:46:55:53:79:6a:ec:4e:e3:f4:52:b5:a4:
f8:35:e6:0f:7f:ff:6e:9a:2e:64:93:5c:26:a8:4a:
aa:7f:83:25:04:bb:27:13:dd:c2:74:a0:3d:e4:47:
af:6b:0d:e0:2e:87:db:65:cf:18:a6:4c:22:cc:91:
ca:2c:87:84:58:6e:c2:17:5e:83:2a:8d:9c:3e:d6:
b2:09:27:69:4c:10:bc:3a:f3:0d:13:9a:fd:a8:a1:
14:08:81:77:ec:0c:f2:69:71:8d:bb:62:c9:4b:6c:
a3:16:88:a1:81:e3:a5:af:df:e4:57:3b:37:0e:7a:
12:c4:53:79:ea:74:f3:11:db:23:ad:3d:82:8d:4d:
5b:b5:d0:e4:75:a1:6d:86:c7:a0:c8:d2:ee:10:e8:
01:3e:40:9a:1f:fb:e4:9f:f8:c0:bb:03:6e:6f:fa:
4f:03:54:6e:71:f0:dd:2c:e2:90:25:c7:94:83:a0:
0d:32:ec:6c:71:c8:88:5f:64:55:2e:5a:6e:60:a5:
fa:76:48:bc:9a:f7:93:bc:37:a1:cb:c6:6c:d9:fc:
b8:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:17:A9:F4:DD:9D:04:93:2F:7C:35:20:BF:83:F7:40:8B:60:6D:22
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:7d:69:91:07:38:d7:d4:20:ef:a6:d9:c3:7d:f4:7f:da:99:
28:e4:73:8f:ec:95:c9:06:51:05:82:f9:ee:69:2f:7c:42:47:
66:e5:c8:e9:53:df:23:c0:17:36:7f:de:34:a4:67:04:98:e3:
e7:09:26:af:0a:f5:87:a6:35:f5:83:e2:f0:da:3c:60:02:66:
69:5b:73:b5:58:bf:24:3c:06:66:42:13:d1:7e:e8:54:15:6a:
59:5b:ee:36:ed:ac:06:95:d0:fe:07:33:a9:12:52:93:e1:43:
12:6d:e2:dc:c3:a5:de:f1:2b:ad:0b:19:1b:36:c5:db:8b:03:
4d:58:ab:e3:b7:a4:86:8f:af:51:1e:8f:26:85:cb:d9:53:c3:
2c:0b:b1:75:46:45:3e:07:12:2b:1c:ae:e0:35:4e:54:53:bf:
01:77:4e:ed:f0:f9:a0:53:2d:1c:89:66:31:92:19:d1:b5:fb:
ea:4e:18:8e:41:66:12:05:39:80:88:8a:b4:d2:07:14:df:ec:
59:05:a0:1a:a7:29:98:06:b8:27:e4:9a:1e:44:9d:63:70:9f:
4d:74:6c:4d:6f:53:46:c5:80:c8:b6:dd:6b:c1:b5:3d:25:81:
e3:16:69:74:c1:95:06:a6:fa:f5:55:00:45:e8:eb:d3:e3:bd:
20:65:14:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:34:50 2026 by rpki-client