Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
File: UOpay0R7LOuTKgPykAgtx2-OQOM.mft (raw, json)
Hash identifier: IP8pFzqh+Yr9KCKAWEsqky7Vfsb1CoMAovux13Y40vY=
Subject key identifier: A6:66:FF:FE:42:F2:50:0D:4D:DC:EE:71:89:37:DB:79:75:2D:54:78
Authority key identifier: 50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
Certificate issuer: /CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Certificate serial: 01A140F0720734DCE9DB9197A1BC43417579
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
Manifest number: 1AA6
Signing time: Thu 15 Oct 2026 19:01:01 +0000
Manifest this update: Thu 15 Oct 2026 19:01:01 +0000
Manifest next update: Fri 16 Oct 2026 19:01:01 +0000
Files and hashes: 1: Qjcz_PS0tGHgVp4sFdHi9YmmanQ.roa (hash: bNCXCGEDvdLCDKAMMYQGu7EJRHAHnyr4sSGJfowyZWg=)
2: UOpay0R7LOuTKgPykAgtx2-OQOM.crl (hash: NOEVFMEyzYFYY3sDpu0BujZRZuOPbweONvHWlMgb6iM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:f0:72:07:34:dc:e9:db:91:97:a1:bc:43:41:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ea5acb447b2ceb932a03f290082dc76f8e40e3
Validity
Not Before: Oct 15 19:01:01 2026 GMT
Not After : Oct 16 19:01:01 2026 GMT
Subject: CN=a666fffe42f2500d4ddcee718937db79752d5478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:a5:eb:f2:a9:35:a6:8b:d6:87:88:08:04:85:
b7:ad:97:14:7a:ee:ed:3a:47:35:41:ca:49:f8:1f:
3d:ed:b5:13:2c:b1:73:e9:5c:8a:d7:05:19:ba:67:
52:f4:e1:6b:ba:f1:8f:9b:fd:33:33:84:df:31:2e:
50:64:21:63:cc:a5:03:74:69:2e:fb:8b:c2:60:92:
3a:29:0e:ac:90:22:f3:8d:66:11:d5:bd:f0:b7:4e:
a9:4b:79:8f:10:0e:3d:c9:51:d8:a1:3c:9c:b1:65:
76:73:57:a8:0b:81:c7:83:69:fa:e2:82:d1:37:45:
20:1b:ca:c5:e2:cf:69:f9:0a:d7:cb:94:03:8f:70:
3b:d7:7f:7f:e6:73:32:b8:f8:6e:50:0f:84:02:8f:
0d:65:ee:5f:0c:0c:41:26:7c:ed:9b:95:c6:83:bd:
63:b9:4d:5b:d4:b0:7c:96:e5:f2:0c:f8:8f:e2:ac:
12:26:cf:b8:9d:06:d3:e0:03:3b:f7:23:16:5f:d3:
05:a5:c9:b3:d1:70:64:e1:5b:79:cb:b7:09:b8:14:
8d:d2:fd:ee:cd:59:df:ca:2b:c1:b3:55:d5:ff:05:
c1:14:80:ba:e1:c5:61:0c:91:55:f6:7d:98:71:d2:
25:0a:1a:0a:85:78:71:9e:c9:d0:c4:f0:de:dd:14:
66:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:66:FF:FE:42:F2:50:0D:4D:DC:EE:71:89:37:DB:79:75:2D:54:78
X509v3 Authority Key Identifier:
keyid:50:EA:5A:CB:44:7B:2C:EB:93:2A:03:F2:90:08:2D:C7:6F:8E:40:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOpay0R7LOuTKgPykAgtx2-OQOM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/10edef-253d-49b1-969e-5ca8ac18096d/1/UOpay0R7LOuTKgPykAgtx2-OQOM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:24:7b:3b:d2:a0:57:39:fa:ec:4b:ee:c8:59:62:aa:f9:1c:
50:b0:20:d1:cc:7d:62:db:c7:db:45:10:93:18:fd:f2:34:80:
ec:99:57:de:be:51:7b:56:d6:24:c6:5e:e2:d2:09:c4:d7:78:
e4:42:b1:6a:7c:e0:26:2f:f7:00:02:0f:38:ce:c7:4d:28:10:
f3:77:e1:53:8f:bb:19:5e:b5:d6:de:ee:34:22:1b:2a:52:c7:
21:8c:51:07:73:91:6f:29:cc:9b:aa:40:82:dc:bf:01:79:a9:
51:bf:91:8f:75:dd:0f:95:be:f2:31:82:c9:ee:77:b8:88:f2:
51:8f:a4:f7:47:79:80:c3:a6:75:24:f9:f7:2e:3e:87:d7:7c:
71:5c:55:9a:0a:5e:5e:05:0e:f9:a8:25:e2:21:5b:d4:4d:1b:
d5:0f:90:40:c5:d8:43:a7:1f:5a:d5:5b:1f:ca:bd:9e:22:b9:
66:73:54:9c:5f:eb:5f:aa:fd:d3:ee:37:38:6e:76:7b:48:12:
ad:0f:6e:17:ea:d8:48:c9:28:9c:cb:47:1a:a7:06:ac:3c:2b:
5c:c7:10:87:d9:8c:1c:96:fe:45:da:82:5c:66:69:e6:b5:b6:
b3:74:33:fd:23:e2:09:da:eb:4c:b6:a4:f7:3e:65:ad:e4:66:
26:e5:95:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 02:53:02 2026 by rpki-client