Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: zhodQmID8px1vfGkxegDIDX4xYiy+H7YfVeOanyZ3IM=
Subject key identifier: A3:C6:CE:2C:3F:D6:CF:D6:44:48:77:DD:F6:B9:2B:88:C0:2B:D8:04
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 01A0EDAF93153C2F0426AD38EFE810B73D36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 09AE
Signing time: Tue 29 Sep 2026 15:01:41 +0000
Manifest this update: Tue 29 Sep 2026 15:01:41 +0000
Manifest next update: Wed 30 Sep 2026 15:01:41 +0000
Files and hashes: 1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: qOHmPgujNUvlHg2TYNaUstaLX+zjHsA8pb9ha5sZ4q4=)
3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 15:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:af:93:15:3c:2f:04:26:ad:38:ef:e8:10:b7:3d:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Sep 29 15:01:41 2026 GMT
Not After : Sep 30 15:01:41 2026 GMT
Subject: CN=a3c6ce2c3fd6cfd6444877ddf6b92b88c02bd804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e2:ed:27:01:31:55:47:c5:ca:10:9d:a4:07:
2e:6d:55:d2:d4:c1:8b:d7:ae:ce:8a:6d:4d:2e:7d:
76:a7:42:8e:29:a2:e2:e2:ba:11:bf:35:57:35:3c:
d9:05:52:a3:39:02:f8:20:37:37:63:60:b4:ca:bc:
6a:95:09:e7:fd:ba:22:bc:48:47:41:1f:1d:f0:42:
2c:df:95:44:51:f6:e1:47:14:05:16:5c:76:e2:3a:
de:e3:90:63:ab:b1:93:0a:be:10:4f:1d:95:4d:6c:
b6:8b:c8:d1:06:39:2e:b4:da:31:64:e5:25:34:59:
89:17:29:a5:4d:12:4a:57:d0:77:3c:85:e6:1e:c2:
36:07:dc:ea:1a:45:13:d0:b2:c2:82:bb:db:a9:e2:
38:8e:c7:5b:53:85:ed:62:51:df:8c:0e:87:cc:24:
f7:37:50:9a:64:6d:2b:f6:16:7e:40:e5:c1:4f:52:
a1:0f:a2:a9:12:a9:c1:38:07:fc:d6:89:ca:af:27:
98:fe:9d:74:59:6a:f7:21:bc:b7:77:a5:c5:3b:78:
20:8d:de:07:74:d0:e0:e1:3f:8f:e5:87:df:27:73:
7a:24:b2:90:c4:03:36:7e:d7:cd:29:b1:09:b3:6c:
c5:f3:2b:fe:4e:13:6d:28:f4:ef:db:06:7f:bc:cb:
4b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C6:CE:2C:3F:D6:CF:D6:44:48:77:DD:F6:B9:2B:88:C0:2B:D8:04
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e6:ee:2b:78:90:9a:51:cb:d3:6b:54:2d:ff:a6:b5:70:56:
65:f8:4f:4b:a9:4a:e5:93:c2:5b:60:d4:27:9b:e1:1b:ee:4f:
a8:b0:4c:b5:dd:44:c0:50:37:32:64:2b:cc:97:90:ac:41:e4:
e8:ca:60:ff:de:4e:a9:56:62:fd:0a:d4:07:1f:5a:13:e7:87:
91:5f:80:9a:a2:27:88:ba:20:81:9c:0f:5c:c3:6f:6e:1c:ce:
ba:7b:29:23:b4:2e:69:b3:c8:20:8c:22:07:0b:7d:61:98:ae:
9a:d5:9d:94:55:4c:af:8f:87:a0:12:54:bb:e6:17:48:b6:86:
33:8d:90:d3:b7:5a:aa:cd:f6:49:ee:a6:9e:96:6f:52:89:e1:
65:af:76:a2:c8:a2:bc:07:ce:15:f4:e8:67:e5:2f:e9:88:91:
15:17:a5:1a:11:5a:cb:61:20:69:05:7e:89:d7:fb:a0:2c:84:
31:27:6d:94:41:ac:fa:e1:40:2e:3a:7f:65:38:af:0b:43:73:
3a:15:41:ba:a1:7e:d1:93:0c:a1:4d:35:78:d3:34:1c:56:a0:
b7:81:1a:17:88:0d:a1:a4:3b:2b:ff:02:c2:11:9e:14:10:9a:
aa:f2:5c:ec:04:4f:f2:df:1e:33:74:75:d2:17:36:7c:11:2f:
89:f4:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 20:00:32 2026 by rpki-client