Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: w6UYQEg5Hx7wW7kPWfQ3WumkG8NNG1qKPh6h1aPeVJA=
Subject key identifier: 7B:EC:0D:5F:F3:3D:2C:C2:AC:35:01:24:00:12:C9:C0:EF:10:69:6E
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019F9211686EA7998F16248B2E8DACCD8C1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 08FA
Signing time: Fri 24 Jul 2026 03:00:42 +0000
Manifest this update: Fri 24 Jul 2026 03:00:42 +0000
Manifest next update: Sat 25 Jul 2026 03:00:42 +0000
Files and hashes: 1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: C10Qiaz8/6z/N32ruLMGHY/vQO5EiX5wcrmlao8mzaU=)
3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:11:68:6e:a7:99:8f:16:24:8b:2e:8d:ac:cd:8c:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Jul 24 03:00:42 2026 GMT
Not After : Jul 25 03:00:42 2026 GMT
Subject: CN=7bec0d5ff33d2cc2ac3501240012c9c0ef10696e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:cd:65:86:a0:b3:79:51:40:5a:9a:27:a2:
0c:bc:b8:da:27:4e:de:10:d2:80:d4:a2:50:18:ac:
c8:3e:02:f6:c6:56:46:60:e4:c4:c8:48:38:f4:12:
7b:a7:b1:b1:61:2c:78:e0:b6:ed:38:ca:f2:7e:be:
a7:30:53:45:95:ba:ea:fb:41:4c:12:f8:cc:3f:6b:
70:c8:03:ae:8d:10:a0:ec:ce:8c:01:ee:bb:b4:96:
91:f6:d4:66:48:f4:4b:f4:95:9f:a5:c2:54:83:8f:
12:6e:e7:63:74:ab:98:0c:13:06:bf:c8:f4:89:c4:
be:07:e1:83:ef:62:3d:bd:02:10:0e:d4:9f:98:e5:
55:43:62:b0:1c:f4:2f:97:f8:c6:d2:c3:a6:63:db:
e9:e1:ba:bd:15:d7:95:14:21:d7:3b:27:d0:92:0d:
9e:10:a7:38:1b:93:84:33:84:2a:b1:eb:c3:e8:e1:
f7:84:2a:27:04:4d:e6:eb:bd:b5:ac:9f:31:33:88:
91:1d:05:ff:43:23:94:8b:09:2f:b9:c2:cb:4e:c2:
b1:22:42:9d:ab:f1:3e:9c:ec:4a:8d:26:25:45:71:
35:56:3b:35:21:c9:f8:98:48:70:5a:52:f5:67:57:
09:b7:fb:81:d4:1d:89:3d:3b:a1:b8:7a:4c:e2:86:
56:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:EC:0D:5F:F3:3D:2C:C2:AC:35:01:24:00:12:C9:C0:EF:10:69:6E
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e5:10:43:e8:83:f4:a0:6d:59:0a:db:03:dd:e4:dc:94:c3:
31:21:11:27:7d:cf:50:16:4e:72:ce:e3:9b:b9:40:a5:cb:dd:
25:aa:bb:cd:38:dc:97:b3:b3:90:c9:ec:24:22:ef:50:6a:71:
63:38:ab:88:13:20:19:4c:d6:b3:7f:3e:77:17:f3:02:29:27:
77:45:80:cb:c4:1c:7f:fd:80:7e:62:a7:d2:dc:95:5c:30:12:
65:3b:a4:07:09:54:7d:c2:77:a5:92:d7:05:78:e4:7e:13:32:
65:c6:3b:b4:d2:19:5a:d7:1c:3a:e9:b3:ba:f6:e2:ba:40:a5:
be:06:58:8f:59:01:9b:df:0d:61:2d:02:b8:ed:6f:52:8f:38:
44:0b:e4:38:10:f8:d8:d8:fc:af:b2:10:90:45:a2:38:c9:aa:
7a:2c:3d:e4:0c:f9:16:19:4d:80:42:6e:ab:5d:af:b5:23:ae:
19:66:d2:c8:b3:b2:39:10:0c:9e:0d:d6:e5:f7:ea:32:f5:c1:
1b:ca:a3:9b:fb:b5:d6:f5:eb:4d:b4:97:4f:4c:89:97:90:ec:
81:ef:a5:4f:a4:bb:9b:8b:9f:2b:12:ae:b6:47:09:4e:e4:39:
5a:b9:ef:02:b0:80:ce:d3:53:a8:52:c6:dc:40:6f:cc:c6:ce:
ab:fc:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:54:24 2026 by rpki-client