Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File: UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier: rqNwR5W3ltgTflQdFb44frZnFWI9xf7aBBM6odbv4Fw=
Subject key identifier: EE:14:C5:D0:DB:C2:1A:BA:3A:BD:E2:D8:83:B3:68:27:ED:7E:AC:2A
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 019FAAF558143D8E17039AE0D8E9C067AD3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number: C2
Signing time: Tue 28 Jul 2026 23:00:33 +0000
Manifest this update: Tue 28 Jul 2026 23:00:33 +0000
Manifest next update: Wed 29 Jul 2026 23:00:33 +0000
Files and hashes: 1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: j/yKcZz9MRqcJRoRATMXYyaVyjxPNId334YhN+YZUTw=)
2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:f5:58:14:3d:8e:17:03:9a:e0:d8:e9:c0:67:ad:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: Jul 28 23:00:33 2026 GMT
Not After : Jul 29 23:00:33 2026 GMT
Subject: CN=ee14c5d0dbc21aba3abde2d883b36827ed7eac2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:23:d2:3c:83:41:bd:45:0b:f4:a1:eb:d0:
1f:9d:be:82:95:0c:18:52:e1:62:70:e1:0d:56:08:
ba:87:82:f0:5c:84:cc:f5:6f:52:dd:ad:47:72:f9:
41:f8:18:79:93:92:ba:92:d8:67:f6:fc:23:6f:f9:
04:ec:c2:18:0c:a2:76:8d:53:d8:b7:61:d3:6c:86:
da:8a:cd:28:62:a6:3f:76:4d:7e:f1:f1:b0:54:7e:
4d:dd:8c:d6:c7:86:18:40:e7:dd:74:a3:4d:b3:f3:
12:f1:bb:28:84:62:da:20:57:82:07:af:8e:aa:d1:
52:20:a1:62:87:ce:d5:29:a8:d4:01:15:c2:4c:76:
a7:2a:b2:7e:78:07:23:c6:a8:d2:e0:f7:6e:3b:b8:
31:e5:a3:ed:46:79:a8:90:e0:bb:c7:53:29:00:3b:
66:36:79:c6:25:78:e5:62:f6:d5:b2:90:e8:7c:45:
a8:83:41:19:fb:d8:af:e4:ad:39:02:e5:66:74:f6:
41:eb:10:a6:4a:d2:dc:e4:5b:43:b9:37:1f:b2:35:
b9:ed:36:c5:63:94:ee:1f:bd:45:15:98:48:55:ba:
31:90:aa:1c:40:18:db:c6:94:b8:af:3e:5d:3a:3c:
33:90:19:9a:61:02:d0:7c:16:0c:d5:b2:d0:7a:6d:
86:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:14:C5:D0:DB:C2:1A:BA:3A:BD:E2:D8:83:B3:68:27:ED:7E:AC:2A
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7b:71:28:ab:d0:ef:9d:01:03:e0:a3:44:00:c6:ae:7e:f5:
5d:74:a0:66:ff:f4:fd:44:1e:0b:7b:f1:d0:a7:30:32:0e:62:
85:e5:1c:c4:e9:71:4a:ef:ec:e7:6e:90:a8:16:5d:bb:26:ae:
5b:d4:f3:62:b3:99:76:2f:75:06:6a:96:39:28:2d:38:54:c4:
7d:47:97:dc:43:6e:53:c9:8a:a1:dc:f8:55:80:0d:d8:d7:52:
2c:5e:95:94:fd:54:96:2c:32:0d:d4:fc:f8:ea:01:ce:80:e3:
a2:97:14:ce:32:06:0e:04:ee:00:60:b3:b0:ee:e5:de:b9:ec:
e7:c7:e7:d1:65:e2:fb:d5:88:26:03:38:84:ad:6a:26:fb:e4:
c0:e3:a5:cc:b3:65:49:7b:5a:92:f3:40:3e:b6:c7:79:42:bf:
a4:fe:29:05:64:e2:a7:76:f1:34:db:da:ca:2f:b7:c8:b5:49:
2e:11:ca:47:6c:60:13:01:c0:b1:62:4e:90:b0:2b:ee:35:63:
a4:74:84:c1:2d:03:a0:1b:1c:7b:58:af:60:b8:12:b0:93:68:
47:f7:28:87:cb:72:5b:85:23:ef:75:7a:be:29:4c:cb:e0:f1:
fc:bd:e1:23:9d:b3:06:6e:8f:0e:bb:7b:54:a2:ff:d5:8d:ef:
e9:8a:40:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 08:12:58 2026 by rpki-client