Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
File: UEUj-IEevlqjWYURpI87rwABqOg.mft (raw, json)
Hash identifier: ooM62evOHgfHEqyNpSKQG94fqpPC/4vcMcVTjUd+4w4=
Subject key identifier: ED:B2:21:AE:B0:61:3D:40:D7:D4:58:AC:1C:E6:0B:FC:1C:19:12:21
Authority key identifier: 50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
Certificate issuer: /CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Certificate serial: 019EC111ECC1B4D7E838E99E0BD711320452
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
Manifest number: 13FA
Signing time: Sat 13 Jun 2026 13:00:37 +0000
Manifest this update: Sat 13 Jun 2026 13:00:37 +0000
Manifest next update: Sun 14 Jun 2026 13:00:37 +0000
Files and hashes: 1: 610lUfbKAqkAzAw_mgQVL_MvKpw.roa (hash: Y6vB30I7ZhO4cnzek1W0dylwKGe+/gVJf/gvXQMZtgs=)
2: UEUj-IEevlqjWYURpI87rwABqOg.crl (hash: RAw0Gzhssr4M6ZFLpRPTu0Ltdt4HGvC9C6tJpK146UI=)
3: zLRh9u6xLJnwtdY0ORDwft0JoyA.roa (hash: +NvH+iEfI87IdOFqZwYbFUot/dODFAweRpk/UBNPhTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:ec:c1:b4:d7:e8:38:e9:9e:0b:d7:11:32:04:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=504523f8811ebe5aa3598511a48f3baf0001a8e8
Validity
Not Before: Jun 13 13:00:37 2026 GMT
Not After : Jun 14 13:00:37 2026 GMT
Subject: CN=edb221aeb0613d40d7d458ac1ce60bfc1c191221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:0e:3c:a2:1f:94:81:4c:97:b4:98:0a:f5:28:
66:a1:19:6e:05:91:d5:72:11:41:10:ce:17:5a:3a:
66:4e:65:70:6a:7c:6d:5d:85:cc:ee:3c:bf:b8:fa:
93:eb:d7:d1:62:0c:c9:c2:5a:76:ad:ce:ef:ab:ce:
f8:81:50:6e:78:f7:26:12:ab:1b:2a:a3:76:5e:91:
5a:34:64:55:8d:9c:f0:dc:38:38:22:ad:e2:6a:eb:
74:e6:76:61:65:c2:b3:2f:25:dc:2e:dd:ca:47:1b:
50:41:d7:2d:f9:10:6e:4d:d4:48:33:fd:39:f3:1b:
50:56:52:a7:21:54:9c:e5:40:db:16:ee:d4:29:8e:
4b:80:62:fd:67:17:7c:83:d0:05:73:96:d9:6f:b1:
10:28:10:a6:d6:c2:1f:14:d3:fc:59:65:9a:20:2f:
16:a7:ce:e3:51:2d:0f:21:c3:34:0a:e6:62:8d:63:
e0:e5:7c:62:70:ad:b3:d5:cb:48:91:35:23:a1:79:
67:ef:5a:68:1d:4b:de:2e:5b:cd:15:31:76:e7:6a:
d3:8b:21:d1:e2:a6:d4:fa:14:f0:61:6d:c4:96:39:
df:f3:fd:46:c1:f6:e9:e8:d8:ef:ee:1d:ee:58:dd:
68:e7:dc:41:82:4e:da:50:03:7e:0a:95:49:b0:84:
b0:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:B2:21:AE:B0:61:3D:40:D7:D4:58:AC:1C:E6:0B:FC:1C:19:12:21
X509v3 Authority Key Identifier:
keyid:50:45:23:F8:81:1E:BE:5A:A3:59:85:11:A4:8F:3B:AF:00:01:A8:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEUj-IEevlqjWYURpI87rwABqOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/3b023e-a397-46bb-9465-bf3f62b95f10/1/UEUj-IEevlqjWYURpI87rwABqOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:14:e1:75:45:f4:b9:ed:36:58:e9:57:41:2c:de:76:f5:fc:
12:64:1d:da:74:8f:3b:e3:00:f1:bb:58:ff:3e:6a:cd:f1:08:
71:d9:39:18:28:8b:01:3a:5f:85:e5:ce:9c:50:47:34:8f:27:
c3:09:55:c2:51:56:c7:f5:95:aa:f7:78:10:ce:b7:e7:7f:6a:
25:3a:f1:1f:dd:b9:34:be:17:ff:81:95:2f:6e:71:c8:28:26:
5f:1b:ba:40:47:30:c3:6f:8a:e4:9c:d2:cf:00:f2:72:34:92:
9a:fd:7d:74:8c:2d:48:14:30:ab:ec:c5:37:a2:98:3b:7c:f1:
06:b4:7d:b7:03:34:2b:46:05:47:16:03:c9:b0:ff:74:76:3b:
c6:b6:0d:8d:df:16:e1:ce:6e:8d:81:42:9e:1b:2f:cb:49:07:
98:44:3a:dc:4e:39:96:79:a1:1c:cd:ff:17:71:ff:19:80:d8:
9a:ec:20:74:f5:35:a3:96:80:f1:e6:5a:05:e9:a0:1b:20:89:
f7:c7:4c:23:1c:39:dd:28:f4:d9:40:ea:24:57:bb:ee:53:fc:
91:d4:c0:18:42:2a:c1:ca:3d:a7:b0:b0:21:80:fa:40:cb:36:
fb:c5:6f:cd:7a:84:e9:52:82:eb:78:da:e7:e2:4d:9c:93:36:
c9:ab:62:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:27:37 2026 by rpki-client