Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
File: UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft (raw, json)
Hash identifier: o7XBUOBeTj3GtCdDONqGAfuJ02wgfjvGAfCLyFqpPe8=
Subject key identifier: 16:F8:32:D8:3A:F9:0C:E6:C3:33:05:64:C0:26:BD:73:51:87:49:25
Authority key identifier: 50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
Certificate issuer: /CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Certificate serial: 019D29CE487FE6C7969B73F8230E360B87CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
Manifest number: 0F8E
Signing time: Thu 26 Mar 2026 11:01:18 +0000
Manifest this update: Thu 26 Mar 2026 11:01:18 +0000
Manifest next update: Fri 27 Mar 2026 11:01:18 +0000
Files and hashes: 1: 5qnMhOIBTwB8o6XInGR4S35zi8o.roa (hash: y7FafzXY95fqgAjLfPP4p+mKq1OIvDb5CLfvYqhV8ro=)
2: UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl (hash: /oK1NdaZvlr3irKBxKodc14fi2vJwlBEVgzaL6turqw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:48:7f:e6:c7:96:9b:73:f8:23:0e:36:0b:87:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50aa99eb8c1b18b1aa7d4245ce481fb888fbf254
Validity
Not Before: Mar 26 11:01:18 2026 GMT
Not After : Mar 27 11:01:18 2026 GMT
Subject: CN=16f832d83af90ce6c3330564c026bd7351874925
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3c:3c:84:31:ee:3d:d2:f1:c6:08:ad:db:f1:
e9:eb:e8:96:02:41:df:50:8f:75:f6:9a:b2:c7:83:
16:d9:58:82:f2:1d:ea:17:92:16:a6:65:ed:be:12:
35:14:bc:e7:d4:1e:02:ac:c8:fd:b8:82:f4:10:9f:
86:3c:d9:68:c4:89:8f:8d:bd:d8:f4:ec:5b:09:df:
9f:c3:93:98:1c:70:09:e1:c4:34:1a:ca:b7:ed:54:
a1:f2:ef:36:95:49:39:68:9c:9f:6c:a4:40:e6:bd:
72:73:46:c2:01:7e:e0:45:0a:7d:5e:5d:f0:24:e2:
55:85:b5:f3:e4:86:17:6f:3d:2e:d1:50:f9:4e:2e:
4b:d2:0c:f2:a1:21:a2:44:ab:9a:5b:a5:36:7c:64:
eb:b5:db:43:07:79:7e:36:0e:04:62:4e:b0:ef:5d:
64:8b:14:85:53:83:69:ac:e8:4d:c4:d4:9c:9d:0e:
81:78:78:53:c2:ab:96:b9:7d:6d:80:6f:04:11:e3:
6b:c7:d6:4d:43:37:db:fe:ee:99:c8:58:b2:28:4d:
01:f9:fc:e8:0d:16:35:99:41:0c:39:55:c4:dd:95:
52:9d:d4:63:7b:c6:62:cf:04:8d:66:16:82:95:27:
3c:0a:aa:a4:69:0a:7d:da:d4:23:4b:7e:b6:59:3f:
89:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F8:32:D8:3A:F9:0C:E6:C3:33:05:64:C0:26:BD:73:51:87:49:25
X509v3 Authority Key Identifier:
keyid:50:AA:99:EB:8C:1B:18:B1:AA:7D:42:45:CE:48:1F:B8:88:FB:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKqZ64wbGLGqfUJFzkgfuIj78lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/088677-80be-4130-b360-1cf6fd9f80fa/1/UKqZ64wbGLGqfUJFzkgfuIj78lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:7e:16:2b:91:57:15:13:b7:33:77:59:80:dc:b3:cc:1c:fb:
d9:3d:98:39:ba:ea:16:3a:bf:39:a1:69:f4:44:01:0d:71:6c:
98:a0:2c:65:f5:96:cb:ae:99:1a:42:f6:ba:59:e5:e2:57:b3:
19:fd:82:10:d7:89:88:d0:7a:3c:fc:65:3b:02:a6:8e:4a:e7:
f4:07:e8:66:fe:70:ee:b5:0b:a9:e9:87:54:53:fa:f1:c5:a8:
41:5a:f7:03:b8:eb:09:2c:87:9f:44:66:26:e5:f8:f7:f0:f8:
90:96:d4:35:91:ae:de:29:70:f7:b5:6a:8f:75:2b:2e:40:3d:
76:e9:b4:85:89:32:6a:31:a6:41:b2:8e:6b:05:98:00:00:0c:
77:f6:e8:40:33:cf:75:66:92:8a:79:1e:96:80:0f:9f:c2:29:
41:11:19:17:d2:0b:47:4c:af:1e:47:7a:44:05:a0:db:98:08:
81:70:4b:63:f1:f8:11:3e:4e:a7:45:d4:21:31:1b:d6:a6:68:
27:58:9d:2d:a6:f3:6b:0c:63:8c:86:de:72:4c:1c:ec:1e:db:
ab:e7:aa:94:88:28:85:07:fc:5f:3a:b9:41:01:d8:94:3c:51:
78:76:06:d7:f2:4e:89:68:56:81:7c:db:96:36:6b:5f:94:b0:
1f:8c:77:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:07:12 2026 by rpki-client