Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: P+zm/q3w1iw+Kr1JPnEtygu4yBNH9jg92CDGRlOeg4Q=
Subject key identifier: A8:CB:A2:B7:D8:97:8F:08:FA:A7:DB:74:4D:53:42:48:74:36:8F:04
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 01A0F568BBABAEB3966FACCAD4FB535823ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 09B2
Signing time: Thu 01 Oct 2026 03:01:16 +0000
Manifest this update: Thu 01 Oct 2026 03:01:16 +0000
Manifest next update: Fri 02 Oct 2026 03:01:16 +0000
Files and hashes: 1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: fPDdrg4J49L5/gpjOUbUAA9MR+NAfmx9LULcGzbrjjU=)
3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 03:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f5:68:bb:ab:ae:b3:96:6f:ac:ca:d4:fb:53:58:23:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Oct 1 03:01:16 2026 GMT
Not After : Oct 2 03:01:16 2026 GMT
Subject: CN=a8cba2b7d8978f08faa7db744d53424874368f04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:9f:5f:51:77:da:c9:df:19:df:75:0a:2a:59:
77:75:70:f5:a9:fb:ec:6d:53:4c:cb:a0:f2:4e:1e:
47:8d:7f:0a:91:29:8a:ba:e2:47:5f:80:d2:58:29:
d8:3a:04:ba:05:c5:66:7b:22:c6:d2:35:94:93:cf:
92:dd:70:5e:2b:76:d7:cf:12:6e:91:ae:c8:fd:34:
49:5e:34:90:e7:f2:6d:ff:4e:e0:cb:ff:4d:47:27:
1b:22:61:f1:be:ad:43:db:5e:26:b3:d4:34:c3:4f:
64:56:48:31:e7:03:5e:b9:15:f6:8f:68:93:2b:df:
03:9f:03:1a:60:61:ce:eb:d6:b2:58:72:fe:40:d7:
32:d2:bb:78:ab:20:9f:96:3f:a4:64:dd:68:ad:ff:
39:29:cf:dc:fc:c3:3b:ab:5e:14:91:0e:4b:90:0b:
36:12:ca:d9:88:5b:8a:89:bf:ce:c5:70:f5:a8:4c:
db:3c:a9:58:ef:68:7a:97:ce:ea:5d:ac:25:71:d0:
71:51:a9:97:44:29:18:a2:50:26:d3:8c:21:a0:da:
ed:87:c7:e0:ad:37:77:f8:0d:fb:3d:b6:0a:5b:db:
3b:01:09:a1:b9:8b:9d:55:9c:2f:a4:ec:33:c6:1a:
8a:9b:bd:db:10:31:ac:48:96:ed:fd:30:87:2d:65:
35:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CB:A2:B7:D8:97:8F:08:FA:A7:DB:74:4D:53:42:48:74:36:8F:04
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:1c:be:0b:e9:2f:17:7d:4a:3e:03:c2:99:98:f0:5d:a6:03:
9c:84:ae:c8:01:9e:34:e0:53:ad:d1:43:4f:11:cb:d6:d1:e7:
4d:e7:df:e3:8c:d9:0b:bd:7d:08:08:54:b9:58:bb:fd:42:b5:
6c:6f:99:51:7f:20:98:9d:72:2c:e4:28:ca:60:1c:ba:ad:6f:
ee:b3:74:4a:d7:8f:1a:f9:71:af:1b:0b:90:a5:cb:30:c0:a6:
f6:0f:ec:d7:10:02:49:e8:c7:d8:6b:0d:82:24:cc:8f:a7:90:
65:4c:fd:b3:2a:32:e0:e9:7e:a4:56:10:f7:39:d8:a8:61:a9:
dd:1e:49:72:27:fe:ea:cd:02:2d:6e:89:e0:4d:79:32:b4:ba:
16:20:dd:91:82:01:08:e3:e8:24:2c:eb:a1:dd:00:6d:70:57:
34:37:a0:2c:b8:bb:12:2a:cd:8f:05:3c:d5:d6:55:e2:2c:20:
ee:6f:30:0d:66:3c:eb:8c:1e:46:97:68:79:81:93:55:9e:7f:
72:8e:c3:bf:42:b7:a7:4a:2a:f5:28:24:67:ca:5c:fc:7f:eb:
1d:4c:9b:77:4d:60:10:49:3b:f6:cb:cf:9c:bb:a5:5d:93:4c:
c2:1a:c5:82:19:5f:f4:54:b2:e6:f8:4e:cd:73:83:58:6d:89:
5d:9a:dc:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 13:55:32 2026 by rpki-client