Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
File: UFQvugwXtDkeMpbENLX_8jqCm24.mft (raw, json)
Hash identifier: Da2qsqWl5Ewx2ps4SMu+oTm55BNsBUxV1Es58VmKAW8=
Subject key identifier: 46:1F:31:49:8A:6E:12:24:87:73:B0:C7:4E:2A:54:10:09:AA:7E:74
Authority key identifier: 50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
Certificate issuer: /CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Certificate serial: 019FACE44D112360D1F1647BB60387ABEE90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
Manifest number: 15FC
Signing time: Wed 29 Jul 2026 08:01:10 +0000
Manifest this update: Wed 29 Jul 2026 08:01:10 +0000
Manifest next update: Thu 30 Jul 2026 08:01:10 +0000
Files and hashes: 1: UFQvugwXtDkeMpbENLX_8jqCm24.crl (hash: EdV+fTHJfKovbaLB66xDAOlhk9VecWN+b9Q5LE4EQ5E=)
2: brFnh3rq3SaqASoxymZGHF7hvHQ.roa (hash: lmozdC2cR8kjC76avAg5K/NKcOEBFp0Tuc3TVnelJ0g=)
3: r-wLcfbrV7gSA_iFZTlD40lbPxI.roa (hash: 9BuizisqfHZcVlGBCcKNw9NkVDpUfvizltmHgaebiwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:4d:11:23:60:d1:f1:64:7b:b6:03:87:ab:ee:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50542fba0c17b4391e3296c434b5fff23a829b6e
Validity
Not Before: Jul 29 08:01:10 2026 GMT
Not After : Jul 30 08:01:10 2026 GMT
Subject: CN=461f31498a6e12248773b0c74e2a541009aa7e74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:1d:fe:50:cd:c3:34:d6:a5:18:ff:16:6c:df:
00:c6:22:84:fa:8c:15:67:3f:9d:7b:b7:2b:5c:25:
07:f2:e3:01:f4:16:17:06:e9:58:d5:b1:27:a7:12:
79:39:e2:ab:83:c2:bd:2c:6c:e3:9b:4d:64:b6:b6:
e3:9c:74:bb:18:33:8e:b9:9d:f2:49:a2:59:96:ac:
01:bc:3d:f8:70:46:5a:2b:10:6e:17:ed:24:13:39:
ba:fd:7c:67:23:00:ae:82:f1:84:30:3f:b7:fa:61:
46:0f:e8:5b:7a:9a:2b:74:71:b4:41:47:d2:0e:2c:
4b:e0:0e:4a:82:b7:a1:54:70:13:6a:1a:a9:b8:ca:
88:2a:32:81:71:f8:7e:db:81:61:d4:8b:16:26:ae:
f6:b9:ee:7f:c3:85:f5:4d:47:c0:28:84:2e:6c:11:
f9:f1:ed:37:99:a6:e5:cc:57:6b:88:65:2b:2e:5d:
06:28:06:55:de:cc:a0:86:a3:fa:4e:12:0d:42:24:
33:c6:3d:83:21:1f:46:69:e1:ea:86:bc:1b:42:bd:
81:13:11:1c:d0:b2:aa:9f:e2:5b:08:81:bf:40:1e:
05:b5:f8:0f:a7:4b:4f:fb:ba:c6:3e:f2:cd:04:23:
f5:0b:54:0d:f7:09:8b:93:a5:20:bd:e4:7a:f3:5c:
5a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:1F:31:49:8A:6E:12:24:87:73:B0:C7:4E:2A:54:10:09:AA:7E:74
X509v3 Authority Key Identifier:
keyid:50:54:2F:BA:0C:17:B4:39:1E:32:96:C4:34:B5:FF:F2:3A:82:9B:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFQvugwXtDkeMpbENLX_8jqCm24.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2bdd-3291-40af-8a88-5e9787b6aeaa/1/UFQvugwXtDkeMpbENLX_8jqCm24.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:87:57:60:63:95:17:43:71:bb:02:25:6e:39:0d:03:6e:83:
b0:fe:cc:c0:6b:b2:69:ad:b4:74:b9:8c:51:df:27:8c:12:79:
41:da:0b:e3:d5:28:ec:dd:4a:3f:86:26:9b:24:29:c7:2d:c7:
9d:4b:bb:e9:6a:fd:31:4c:fa:28:5a:cc:51:76:1b:20:8f:a0:
1f:e0:dc:6e:ab:c5:39:08:19:6c:d2:b9:4a:c6:ff:1b:c1:99:
5f:32:73:a3:68:78:6d:4c:78:8f:e9:c4:e0:3a:57:47:a7:9d:
3f:73:7a:da:3b:89:86:0d:af:6d:5b:be:19:4a:83:61:5d:77:
cf:98:8c:34:4f:46:f6:74:f4:2f:62:15:46:9c:28:ba:b4:ee:
95:5a:84:73:b4:ce:1d:ec:55:60:fa:af:0e:b3:fe:ed:e8:05:
f8:a3:ed:52:fb:dd:b8:c7:6e:b3:f8:0c:c9:93:c2:6e:0f:96:
ad:53:41:12:af:14:d5:56:da:bd:23:8e:0e:ad:03:92:88:84:
ce:a1:d6:a0:48:ff:3d:0f:b7:34:5e:4b:f9:1f:b2:af:8c:ff:
e7:02:58:7d:56:65:ca:cd:54:d7:bd:66:7b:5c:66:b5:b8:72:
48:ec:d5:9d:f8:4c:72:00:21:f2:9a:13:5f:5c:68:2d:59:91:
37:b2:6f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:43:39 2026 by rpki-client