Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: TRMV0Ilj58VhqKYyE+i1wqO0wHvkn78kDFF37HonbdA=
Subject key identifier: 34:17:24:F7:B7:F0:1F:29:E0:7A:97:17:4C:90:71:3B:36:9A:0F:4D
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019E1D597C679BC016384F4C809B86804B55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 0839
Signing time: Tue 12 May 2026 18:01:04 +0000
Manifest this update: Tue 12 May 2026 18:01:04 +0000
Manifest next update: Wed 13 May 2026 18:01:04 +0000
Files and hashes: 1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: wG2LKHcGRahvGvXiaMhObaaov9S5wHH3pT7cyBWdy0o=)
3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:7c:67:9b:c0:16:38:4f:4c:80:9b:86:80:4b:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: May 12 18:01:04 2026 GMT
Not After : May 13 18:01:04 2026 GMT
Subject: CN=341724f7b7f01f29e07a97174c90713b369a0f4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:50:3b:44:13:b2:44:c1:0b:7c:91:6c:22:84:
6e:80:87:73:bb:94:70:dc:eb:64:46:fc:05:f7:01:
a7:87:e8:17:a9:f7:a8:6c:8c:b1:f3:76:3d:60:ed:
d8:ed:ae:43:a0:25:8a:a4:79:40:f7:d9:dd:8c:b1:
90:74:0d:38:71:ad:7f:8d:03:66:3d:16:96:6d:30:
b4:95:fc:b8:a5:6f:14:47:bb:78:20:85:b7:76:a4:
cd:0b:b9:a9:d7:62:39:7e:f7:71:77:ac:df:86:12:
01:de:a3:1e:be:80:21:bc:4e:fd:df:7a:0e:d4:b1:
fd:5a:d1:08:5d:38:ad:d5:7b:96:bd:f5:48:22:d4:
46:01:14:70:f6:36:da:77:47:f2:2e:9e:16:1a:b7:
d1:4c:6f:c2:38:03:21:49:62:09:c8:28:87:6c:67:
ef:68:15:35:b6:13:76:b2:0d:b9:fd:d2:82:81:63:
3a:01:bf:e6:24:44:98:df:97:ca:9c:5e:aa:e8:b8:
4e:12:16:f0:a4:2c:33:f3:9c:b0:14:b7:52:b3:2b:
27:00:a9:00:6e:40:b0:1c:72:ec:a8:6b:49:27:c8:
75:c7:13:cc:14:c9:d2:22:1a:ca:86:24:dc:65:f9:
e4:da:a8:fd:d0:a2:40:41:df:db:b0:88:09:cc:fc:
7a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:17:24:F7:B7:F0:1F:29:E0:7A:97:17:4C:90:71:3B:36:9A:0F:4D
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:79:1e:a2:f6:af:ea:e3:c2:29:08:1c:67:ff:f2:86:fd:ef:
c1:74:86:c8:73:48:1b:86:6f:e9:18:6f:72:b2:d7:0e:a2:69:
2a:f5:6c:64:b8:ea:b4:f8:a0:94:e6:05:6f:db:e0:5c:b9:db:
be:85:bb:7b:2b:a7:d1:d6:90:f4:20:66:05:04:18:42:db:0f:
34:a0:55:1c:70:95:84:b9:f8:41:bf:a0:1f:66:5b:32:20:b0:
2e:b2:15:fe:f1:0d:73:29:e0:3e:55:1b:01:97:54:fe:f2:b8:
8d:4e:0c:e9:45:d5:3a:74:1b:b5:51:98:e4:5b:28:6f:f6:df:
e8:33:3a:a5:30:41:80:59:21:82:7c:5f:29:bc:69:46:43:09:
5e:8a:dd:f8:9b:ee:3d:01:58:c3:71:5e:2f:42:46:73:4d:4e:
8c:18:0f:b6:1a:88:4a:b7:fa:67:8c:58:e6:b4:6d:1d:86:9f:
94:0e:44:98:6d:be:28:06:bd:87:28:28:a2:e4:f6:e1:a4:c4:
51:61:81:31:50:d8:b0:20:44:40:0d:57:f2:84:19:3e:4c:00:
a4:a6:2d:01:13:e3:54:31:19:d6:58:37:20:c6:dd:51:a2:53:
4f:b1:4b:ef:76:0a:53:b6:bf:55:a9:27:83:6d:7b:1d:e5:7c:
39:af:e2:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:54 2026 by rpki-client