Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File: UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier: olay3yORHf9wwqqOMOMCikdPJSawt/mkjmE/5DWQoYg=
Subject key identifier: D6:3F:50:2C:59:16:95:77:41:6E:78:E6:A0:70:5A:65:3E:60:29:BE
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 01A0D45CF13CAC6E7C2DB08FC2E7B416105E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number: 015C
Signing time: Thu 24 Sep 2026 17:00:55 +0000
Manifest this update: Thu 24 Sep 2026 17:00:55 +0000
Manifest next update: Fri 25 Sep 2026 17:00:55 +0000
Files and hashes: 1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: eic0kPuaAMvCpB0WD9PQiUXiBxxJplRsJL2v6Dhw/AQ=)
2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5c:f1:3c:ac:6e:7c:2d:b0:8f:c2:e7:b4:16:10:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: Sep 24 17:00:55 2026 GMT
Not After : Sep 25 17:00:55 2026 GMT
Subject: CN=d63f502c59169577416e78e6a0705a653e6029be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:06:1d:37:41:41:4a:e0:33:89:33:9a:d0:52:
56:b3:dd:a2:ff:f9:c1:68:84:e0:73:fd:9b:70:ec:
5e:ef:bb:cd:8c:d5:1a:86:05:e9:f2:d1:12:14:d2:
a4:46:2a:42:ee:5c:f3:3f:11:78:c9:00:de:d7:f7:
fe:0e:5b:21:46:39:78:bb:a9:7d:5f:63:23:d7:bf:
98:f9:69:b1:ab:94:a0:ef:d9:13:15:7a:42:8d:d5:
e8:b2:85:00:87:2e:7c:2d:06:99:8a:6b:9d:a8:d1:
8e:15:a6:5c:dc:67:6a:44:90:22:27:6e:6a:bd:b6:
e4:a5:eb:17:64:f9:d0:c0:6f:60:48:40:6a:c5:82:
31:10:2d:44:8b:10:21:e9:19:27:b7:70:38:b7:4a:
ca:f8:70:71:7a:9d:fb:81:b1:e1:e4:9b:05:91:38:
e5:cc:95:e5:52:af:92:88:59:92:b3:ea:9f:a1:bf:
90:87:81:17:a7:a3:93:09:84:a2:d6:cd:c1:12:e8:
05:e3:e7:df:ca:d1:74:82:48:d9:04:a7:8e:5a:0b:
ef:d5:98:2d:d8:16:b5:bc:ac:ea:90:3c:51:69:d5:
ad:3d:48:ed:bd:0a:f7:22:7f:16:47:7a:db:ec:5e:
de:69:bb:af:94:01:b6:f6:c9:14:68:a9:76:92:bf:
c3:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:3F:50:2C:59:16:95:77:41:6E:78:E6:A0:70:5A:65:3E:60:29:BE
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:72:4a:ce:53:f1:8d:b6:32:8c:87:99:6b:69:98:df:d5:9d:
e7:63:ab:a0:ad:8b:b3:30:cd:d2:6e:24:35:2b:36:b8:96:48:
aa:fe:32:c9:2a:a9:d5:6c:65:af:6a:5f:40:b8:1f:86:a1:78:
ad:ac:24:05:b8:e1:fb:d6:c4:a0:67:b1:5f:40:45:f3:4f:1d:
b4:57:df:88:27:a4:05:71:b8:ca:a2:bc:ac:08:68:66:97:d1:
2a:bc:0a:95:04:e8:ef:4a:35:83:21:cf:d1:b7:9a:e5:66:76:
01:ff:0a:87:2b:ec:5c:e1:f3:fe:46:c3:7f:87:ca:27:0c:67:
0c:13:67:d8:ff:f3:d2:0f:47:e3:33:ae:aa:93:0c:62:af:3f:
53:0d:72:98:55:25:64:a8:86:d3:a2:54:fc:30:70:9e:41:e1:
15:b9:51:40:7c:36:7e:06:fe:eb:58:74:14:30:72:12:ba:62:
86:8b:3a:51:51:18:da:41:ef:fa:73:8c:1e:c2:2b:90:3a:b5:
d1:03:b1:9f:c6:cf:8a:33:9f:0b:b3:43:fa:47:12:d7:c7:95:
5f:bb:f9:7c:9a:1b:e2:4e:46:0b:d1:bb:e7:c2:7a:bf:7c:95:
34:07:a5:64:33:e3:6f:3e:b3:56:f3:66:c4:26:66:a3:d4:d4:
2b:d8:5f:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:35:22 2026 by rpki-client