Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File: UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier: 4uTGqDmgcTC0FBqZVarWsBfw8AJwhJq19UhsMrrTa4U=
Subject key identifier: 45:0F:CD:63:39:D1:86:38:8A:55:0F:F2:5F:56:75:A5:D6:C3:28:38
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 019FACE4338179955E481AC9B5BEFD80F7A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number: C3
Signing time: Wed 29 Jul 2026 08:01:04 +0000
Manifest this update: Wed 29 Jul 2026 08:01:04 +0000
Manifest next update: Thu 30 Jul 2026 08:01:04 +0000
Files and hashes: 1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: 7kahREYfJWw13iWI7LNJE6kibeHcqeTHLJtSWmn04P0=)
2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:33:81:79:95:5e:48:1a:c9:b5:be:fd:80:f7:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: Jul 29 08:01:04 2026 GMT
Not After : Jul 30 08:01:04 2026 GMT
Subject: CN=450fcd6339d186388a550ff25f5675a5d6c32838
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:03:11:3a:ab:eb:56:a7:37:67:d6:22:5f:eb:
f3:9f:ef:0c:b2:39:aa:f1:5e:c1:d0:6d:95:94:00:
13:4f:f5:c4:1d:aa:24:4b:50:9d:18:4f:a9:ce:96:
97:7e:1b:bb:40:94:ef:ca:e9:a1:8f:8c:e9:78:9a:
ce:bb:09:a7:93:8c:cd:5f:66:c5:5c:11:96:7a:c5:
bb:cd:8c:1c:3f:29:55:dd:af:d7:fa:d4:12:9f:e3:
6f:29:2a:98:8e:78:f7:ba:ad:94:a5:c3:ad:a7:05:
71:0c:5b:1e:d7:26:0e:aa:ee:b8:71:3a:42:ff:6f:
a9:3c:2e:e7:94:e1:f1:8c:d2:6d:3d:3d:4e:f9:94:
26:20:7f:ea:c2:41:b2:05:84:e7:b4:e0:be:a4:f4:
00:d8:61:d0:6a:bd:f9:56:bd:f7:7f:d8:c5:23:f9:
a1:37:4f:e8:6a:58:61:db:b5:60:e8:3b:6a:10:ff:
fc:21:2e:4d:a8:e1:1a:f5:8f:5b:ba:31:01:56:df:
a3:c2:5d:73:2e:e6:47:31:be:5c:83:67:6e:f3:89:
76:44:f8:4b:9b:f5:cb:58:47:43:25:ce:eb:e2:71:
9d:db:57:e7:d0:22:92:f6:ee:71:8e:aa:c3:7e:bc:
66:23:ce:f6:0f:c8:d6:3f:e9:7d:54:a6:37:10:45:
23:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:CD:63:39:D1:86:38:8A:55:0F:F2:5F:56:75:A5:D6:C3:28:38
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d7:38:46:92:8a:52:18:18:06:c9:26:45:ee:ba:8e:fe:b2:
43:c6:70:83:74:74:da:a6:7e:9a:00:36:b6:0e:ac:36:5a:ae:
f6:d6:6f:e6:d4:2c:88:f3:95:81:b0:a2:96:b0:1c:86:21:4a:
91:65:09:b7:f4:8c:d4:b3:cb:30:f6:7f:d8:fd:e8:63:c7:0f:
49:79:d0:78:f8:91:58:f0:cc:0e:7b:79:af:6e:9f:c8:cd:56:
97:fa:e3:32:4b:86:0d:23:07:2e:d9:ac:60:c1:e0:cf:9f:ed:
1d:40:99:53:b3:78:10:11:17:2f:11:41:ed:e7:0e:62:cd:94:
a9:e2:d2:b1:b8:a8:e0:34:b4:db:aa:72:f1:32:44:3e:82:87:
01:1d:48:56:80:45:50:2d:82:8d:40:ea:d6:2e:18:ac:b8:cc:
a8:02:ba:47:0d:f7:a8:fc:c3:de:81:79:ee:73:40:e6:20:e3:
fa:75:c7:cf:23:0d:ae:44:12:54:08:b5:66:c0:0b:4a:0d:72:
f0:95:65:78:91:d2:a4:25:0b:28:a7:15:81:86:62:49:d3:6a:
dd:dd:ce:25:e4:86:10:41:86:6c:f6:cd:f9:11:b0:50:33:24:
58:dd:d6:c0:97:25:df:15:4d:30:7f:45:b8:f6:79:7b:aa:d8:
b2:5d:0c:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+s5DOBeZVeSBrJtb79gPepMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZTE3MjIyYTIyZmM5NTc5ZDdkMDk1ZDVkNDNmOGRiMGVj
ZTU3MjkwHhcNMjYwNzI5MDgwMTA0WhcNMjYwNzMwMDgwMTA0WjAzMTEwLwYDVQQD
Eyg0NTBmY2Q2MzM5ZDE4NjM4OGE1NTBmZjI1ZjU2NzVhNWQ2YzMyODM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQMROqvrVqc3Z9YiX+vzn+8Msjmq
8V7B0G2VlAATT/XEHaokS1CdGE+pzpaXfhu7QJTvyumhj4zpeJrOuwmnk4zNX2bF
XBGWesW7zYwcPylV3a/X+tQSn+NvKSqYjnj3uq2UpcOtpwVxDFse1yYOqu64cTpC
/2+pPC7nlOHxjNJtPT1O+ZQmIH/qwkGyBYTntOC+pPQA2GHQar35Vr33f9jFI/mh
N0/oalhh27Vg6DtqEP/8IS5NqOEa9Y9bujEBVt+jwl1zLuZHMb5cg2du84l2RPhL
m/XLWEdDJc7r4nGd21fn0CKS9u5xjqrDfrxmI872D8jWP+l9VKY3EEUjMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUPzWM50YY4ilUP8l9WdaXWwyg4MB8GA1UdIwQY
MBaAFFDhciKiL8lXnX0JXV1D+NsOzlcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9GeUlxSXZ5VmVkZlFsZFhVUDQydzdPVnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wNjYzYzMtYTk3My00NzBmLTk4MTAt
MDBmYWQ3ZTBjOWE5LzEvVU9GeUlxSXZ5VmVkZlFsZFhVUDQydzdPVnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wNjYzYzMtYTk3My00NzBmLTk4MTAtMDBmYWQ3ZTBjOWE5
LzEvVU9GeUlxSXZ5VmVkZlFsZFhVUDQydzdPVnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItc4RpKK
UhgYBskmRe66jv6yQ8Zwg3R02qZ+mgA2tg6sNlqu9tZv5tQsiPOVgbCilrAchiFK
kWUJt/SM1LPLMPZ/2P3oY8cPSXnQePiRWPDMDnt5r26fyM1Wl/rjMkuGDSMHLtms
YMHgz5/tHUCZU7N4EBEXLxFB7ecOYs2UqeLSsbio4DS026py8TJEPoKHAR1IVoBF
UC2CjUDq1i4YrLjMqAK6Rw33qPzD3oF57nNA5iDj+nXHzyMNrkQSVAi1ZsALSg1y
8JVleJHSpCULKKcVgYZiSdNq3d3OJeSGEEGGbPbN+RGwUDMkWN3WwJcl3xVNMH9F
uPZ5e6rYsl0MLQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:34 2026 by rpki-client