Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier: BvjS9u49kbtkO8TC6V3dc5Mbyl5BScxox3+L6h0Ze00=
Subject key identifier: 34:14:B9:9B:D4:4B:EB:60:B4:E4:52:56:75:28:14:D0:5A:AA:8F:D2
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 019FA9ABFFE73068C6BAF68B1741D4A9A3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number: 189B
Signing time: Tue 28 Jul 2026 17:00:49 +0000
Manifest this update: Tue 28 Jul 2026 17:00:49 +0000
Manifest next update: Wed 29 Jul 2026 17:00:49 +0000
Files and hashes: 1: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: vFJJB3Fu7kS5b4px7WrKXw0c5HCkJXQDSasMKvv9MI0=)
2: lOV0FvZ4UI1RmBR3zL2RaV_Elps.roa (hash: OQfXce7br5oDI4HR7IRbJp2FZmT/5i/l+05MQHFeiH4=)
3: xfISNhaNx-QdtidwC9e-_Q1kCgo.asa (hash: mXrj296pB/exm/joNYtGKERBhDpRLhpWbyAKIvLFAPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:ab:ff:e7:30:68:c6:ba:f6:8b:17:41:d4:a9:a3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Jul 28 17:00:49 2026 GMT
Not After : Jul 29 17:00:49 2026 GMT
Subject: CN=3414b99bd44beb60b4e45256752814d05aaa8fd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0e:e9:1f:5e:d0:d0:5c:23:82:43:a6:f4:21:
a5:f7:8b:d2:29:2d:a1:33:fd:34:4f:09:3d:e3:c5:
71:7c:b5:f3:e4:d9:e1:6e:c8:ae:39:96:8f:c1:58:
f3:57:3f:6f:c1:45:8e:11:32:0c:2b:60:84:18:0d:
e6:9b:68:88:68:13:bc:b3:ef:b2:0c:e6:c5:db:3e:
5d:fa:c1:7b:e6:65:45:9c:62:6c:b0:d9:7b:e7:1e:
2d:6a:5b:d8:d3:c0:3f:eb:72:15:82:46:f8:53:44:
a3:a3:ba:77:24:42:46:0d:e8:d1:86:8d:21:61:37:
e0:e9:9b:6f:ad:72:43:a5:6c:fa:8e:ef:fa:dc:79:
02:77:f2:9a:05:6b:be:8d:17:15:00:6d:2e:0d:81:
86:21:88:4d:8d:31:9f:ce:b3:b6:7e:e3:e5:f2:75:
3a:08:c2:5c:24:01:f7:4c:17:c5:a9:d2:c7:95:7d:
f1:80:1f:c2:54:ab:98:90:0b:d9:41:a1:38:b9:6a:
0f:12:45:ac:9f:5c:07:43:b8:cb:80:a3:f5:fe:25:
57:ab:1f:a5:b3:a1:29:d1:fa:58:f6:af:86:44:98:
bb:fc:47:21:22:3b:6e:73:cb:d3:27:1c:9a:d6:e2:
42:c8:02:37:5d:b7:62:cf:60:50:1f:4c:10:de:5f:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:14:B9:9B:D4:4B:EB:60:B4:E4:52:56:75:28:14:D0:5A:AA:8F:D2
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:f7:4b:64:ce:51:aa:b3:5c:88:a9:df:c1:c2:0e:aa:82:05:
62:0c:5f:3c:9c:05:57:08:bb:79:3d:22:01:30:f9:10:a9:29:
fd:0f:da:1d:68:f4:51:fb:7f:86:04:ae:cb:d8:a1:9c:2d:d4:
f6:1e:80:0f:01:6d:83:fa:d2:bd:7e:94:e7:f9:cd:e4:d2:e5:
d9:b4:59:a7:94:cd:db:fb:54:63:b5:60:0f:b7:2f:35:2e:da:
ac:60:ec:96:5f:d0:67:06:25:f0:fa:c2:a4:7c:34:56:33:03:
4b:a9:7d:ff:a5:6c:2e:5f:fe:d9:58:dc:a5:83:e2:64:86:0a:
b5:a4:86:20:42:81:86:3b:fe:bf:3d:67:62:ef:21:34:d2:82:
63:95:32:2f:79:37:62:73:e6:1d:a0:6c:71:f3:47:9d:3d:81:
b5:f3:64:e2:58:fd:81:d0:ca:c6:3b:d7:1a:eb:1d:06:60:7c:
0f:67:4b:f0:aa:40:2a:af:35:ca:f7:a2:57:22:9b:ad:68:f5:
18:67:a1:7e:30:f2:78:c9:c8:47:e1:13:f1:93:7e:80:7b:3a:
e6:3c:c4:f2:c8:23:28:b6:76:58:f4:bb:5f:7e:9d:c6:43:56:
bf:47:d1:27:e8:30:fc:23:c3:0e:a7:cd:ed:58:c7:dd:55:27:
ad:45:95:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 21:52:14 2026 by rpki-client