Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
File: UHeXmaO44PDx48dJjAWjP4X7u80.mft (raw, json)
Hash identifier: 8jCA49sFgBOf44oDDL3AJNR0DgpyEUTlmzYWD2/OiEA=
Subject key identifier: 77:E4:D4:39:71:12:A9:0E:AE:00:B5:29:42:9B:31:1E:4B:94:B9:21
Authority key identifier: 50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
Certificate issuer: /CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Certificate serial: 01A0BDD4CC8340D06551D58392AF9E972169
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
Manifest number: 192A
Signing time: Sun 20 Sep 2026 08:00:34 +0000
Manifest this update: Sun 20 Sep 2026 08:00:34 +0000
Manifest next update: Mon 21 Sep 2026 08:00:34 +0000
Files and hashes: 1: UHeXmaO44PDx48dJjAWjP4X7u80.crl (hash: fadOzbPCrJXfUz+s3YFLUi9CZ5PiZ9e1Bhd04jWOLhs=)
2: lOV0FvZ4UI1RmBR3zL2RaV_Elps.roa (hash: OQfXce7br5oDI4HR7IRbJp2FZmT/5i/l+05MQHFeiH4=)
3: xfISNhaNx-QdtidwC9e-_Q1kCgo.asa (hash: mXrj296pB/exm/joNYtGKERBhDpRLhpWbyAKIvLFAPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 08:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:cc:83:40:d0:65:51:d5:83:92:af:9e:97:21:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50779799a3b8e0f0f1e3c7498c05a33f85fbbbcd
Validity
Not Before: Sep 20 08:00:34 2026 GMT
Not After : Sep 21 08:00:34 2026 GMT
Subject: CN=77e4d4397112a90eae00b529429b311e4b94b921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:4d:20:91:b5:71:8a:32:2f:63:04:2f:ba:78:
15:35:ea:52:f6:d7:3e:1b:50:a1:d9:68:b9:90:21:
35:cd:7a:b6:20:e7:a7:64:59:0d:eb:84:82:4e:2e:
bc:28:64:89:a6:64:74:15:58:fa:32:01:0e:70:6b:
f3:32:65:cc:66:05:66:9e:50:fa:97:6f:94:67:30:
69:18:61:e8:24:83:f1:28:b4:8d:1d:32:5f:88:28:
6b:bc:2b:cf:7f:34:f4:e0:87:c6:ad:bc:07:50:4e:
c7:5a:2c:36:9a:dd:fb:cc:5f:57:d5:93:4d:37:58:
87:bf:c7:3f:70:08:f6:cf:d0:3b:4e:23:0b:19:0e:
04:53:e9:f6:c5:9e:82:f0:2f:5b:ae:32:73:ce:99:
19:16:35:b6:1c:ad:ca:da:8a:d0:15:db:54:ee:8a:
74:fa:11:83:c5:2f:a8:bd:c7:4b:58:da:98:0f:d3:
30:a0:ae:a4:b7:84:82:f0:2d:25:7a:71:a0:9d:8f:
f0:02:40:1b:19:a4:74:e5:58:fd:b2:52:32:49:8b:
f4:29:5a:fa:e7:24:84:ab:42:a5:2b:ee:1c:94:a4:
58:bd:96:43:97:0a:89:23:ac:ef:1a:64:7d:9c:52:
ef:a7:24:c4:2b:db:5b:41:8d:16:7c:f5:69:73:c2:
44:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:E4:D4:39:71:12:A9:0E:AE:00:B5:29:42:9B:31:1E:4B:94:B9:21
X509v3 Authority Key Identifier:
keyid:50:77:97:99:A3:B8:E0:F0:F1:E3:C7:49:8C:05:A3:3F:85:FB:BB:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UHeXmaO44PDx48dJjAWjP4X7u80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/244958-aa2d-478c-b0ff-69efad6c3a80/1/UHeXmaO44PDx48dJjAWjP4X7u80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fa:c5:63:65:57:da:e7:4a:64:88:3f:92:53:38:b5:d8:34:
c5:2b:59:db:9c:e8:73:96:8b:8d:d8:f7:b4:46:18:2b:ec:c3:
0b:62:4c:68:46:58:58:b8:77:51:9c:ff:88:b6:ab:21:d1:98:
16:5e:bc:9b:67:aa:ff:70:19:ca:e0:11:db:54:92:09:ea:41:
9f:b3:41:eb:7c:c0:88:c5:90:f0:8d:66:de:5f:bb:82:6f:7f:
33:80:99:b8:2f:b7:ba:8b:c7:7c:21:a6:5e:33:8a:0a:8a:e9:
be:a3:ed:e3:c1:6f:a2:c3:ec:ff:11:6d:8a:ff:60:0f:80:39:
24:f2:66:d9:c1:45:36:86:ed:c4:98:92:52:9c:49:f5:dc:88:
ef:fa:2b:1d:cf:77:72:b0:dd:60:c3:e7:f4:61:ab:99:68:39:
f4:c0:06:b4:0c:d3:c5:51:4d:96:7c:d2:61:42:02:35:a6:6b:
ce:15:22:05:fa:8b:eb:8c:21:f6:89:f4:f3:3e:25:2f:ff:40:
53:c0:ed:6e:b1:1b:0f:3a:ef:23:67:d9:e3:18:ab:bc:c0:c7:
19:dc:f3:d8:c5:80:ae:f1:92:02:71:d2:30:4a:cb:58:b3:26:
65:cc:68:d3:5d:76:87:2a:8a:4a:d1:8f:db:39:d4:d0:32:d9:
38:da:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:51:17 2026 by rpki-client