Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File: UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier: M9oAskiFrDeBmpEv01ibhnHkf+tbCSfMaZ6Rj91UzcI=
Subject key identifier: A7:A1:02:77:0D:B4:61:24:05:13:05:63:6D:D4:82:C1:D1:A2:D0:2F
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 01A0D07F853AE2DB64CD5C110F5D2FBA9084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number: 015A
Signing time: Wed 23 Sep 2026 23:00:13 +0000
Manifest this update: Wed 23 Sep 2026 23:00:13 +0000
Manifest next update: Thu 24 Sep 2026 23:00:13 +0000
Files and hashes: 1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: 1cfP8A0gBODJt/TMGii4Wuzpt6/W6BLdT3+Fj1dcxB4=)
2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 23:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:7f:85:3a:e2:db:64:cd:5c:11:0f:5d:2f:ba:90:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: Sep 23 23:00:13 2026 GMT
Not After : Sep 24 23:00:13 2026 GMT
Subject: CN=a7a102770db46124051305636dd482c1d1a2d02f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0b:d9:fc:97:20:7e:aa:33:3a:f1:19:f6:1e:
0c:15:59:da:2d:f4:83:de:af:e6:69:f6:4c:2d:dc:
6e:cc:4f:b3:5f:d5:fe:45:d4:24:2b:09:ce:ce:6e:
38:d8:14:34:41:d3:5a:94:3c:32:85:d9:83:a6:4e:
7e:32:4d:90:dc:a7:46:3d:ee:a6:51:36:ce:d7:a7:
b4:9c:ec:c3:cf:d7:ab:4c:83:7c:95:c0:bb:f7:97:
b1:de:f8:4a:dc:06:38:20:e8:7b:da:41:74:66:9b:
88:9f:d2:b5:8b:50:ee:f0:1f:83:3e:cd:a0:b3:ca:
0d:99:aa:bc:6c:49:11:bf:c7:60:d0:66:65:1c:ab:
78:fb:35:c4:ba:9d:43:58:41:25:f3:0b:e8:10:c5:
5a:4a:31:d7:2b:46:77:30:e9:99:a7:b4:f5:89:0f:
bf:ad:f7:0e:4a:8c:a8:39:ac:d3:15:b8:32:55:3e:
a4:12:2c:0c:29:38:8a:59:30:4d:a5:61:b0:db:37:
77:54:ff:12:5b:ee:86:30:a0:9b:44:e9:7c:6d:c9:
43:e6:20:d8:ff:62:70:4b:31:be:0f:d8:97:1a:9f:
29:7c:3d:67:1c:26:99:e7:5a:9d:25:df:81:b9:97:
df:48:e4:ef:9f:b7:3d:e4:69:0c:7f:b5:63:cb:6b:
2a:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:A1:02:77:0D:B4:61:24:05:13:05:63:6D:D4:82:C1:D1:A2:D0:2F
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:e2:9c:61:74:f6:e4:78:cd:a2:87:7f:1c:ff:f7:d4:35:9f:
a3:94:b4:bb:f9:e2:25:dc:b7:fb:fd:0b:7f:22:9e:ad:3f:18:
c9:2d:b2:7f:eb:91:56:65:a8:cb:0e:96:be:3a:c1:91:d4:88:
82:fd:6f:0f:05:7b:a8:b9:d0:38:db:5b:6a:e8:29:ba:c6:f8:
99:e2:cf:50:c9:90:fb:77:f1:13:3f:ef:2d:84:5e:1a:ff:f1:
c0:12:26:7f:90:18:55:1f:ec:78:00:97:31:e2:af:81:29:6d:
7a:12:16:43:4e:dd:32:59:c4:57:21:e1:92:90:cd:88:b3:93:
91:80:66:b2:a8:77:da:10:2f:f6:57:19:5a:79:f8:64:84:84:
67:e0:28:10:82:e8:3b:15:0b:a9:45:46:9c:f6:14:b2:42:ed:
aa:64:51:a4:f1:40:f8:bd:96:17:06:23:ac:07:86:73:f1:f1:
65:5f:43:b9:7f:e5:c2:75:1b:a8:94:7b:5b:e9:1a:da:94:8d:
19:a8:41:c7:e8:82:9b:ce:d1:d9:87:fa:09:e7:b0:73:3b:11:
1c:d7:09:e1:09:fb:a5:d2:6a:70:e1:c9:d3:b6:44:c9:1a:93:
16:17:dc:d0:b5:41:ea:e6:a3:7e:0d:09:c0:ae:a6:0b:ae:e3:
14:3b:8f:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDQf4U64ttkzVwRD10vupCEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwZTE3MjIyYTIyZmM5NTc5ZDdkMDk1ZDVkNDNmOGRiMGVj
ZTU3MjkwHhcNMjYwOTIzMjMwMDEzWhcNMjYwOTI0MjMwMDEzWjAzMTEwLwYDVQQD
EyhhN2ExMDI3NzBkYjQ2MTI0MDUxMzA1NjM2ZGQ0ODJjMWQxYTJkMDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAngvZ/JcgfqozOvEZ9h4MFVnaLfSD
3q/mafZMLdxuzE+zX9X+RdQkKwnOzm442BQ0QdNalDwyhdmDpk5+Mk2Q3KdGPe6m
UTbO16e0nOzDz9erTIN8lcC795ex3vhK3AY4IOh72kF0ZpuIn9K1i1Du8B+DPs2g
s8oNmaq8bEkRv8dg0GZlHKt4+zXEup1DWEEl8wvoEMVaSjHXK0Z3MOmZp7T1iQ+/
rfcOSoyoOazTFbgyVT6kEiwMKTiKWTBNpWGw2zd3VP8SW+6GMKCbROl8bclD5iDY
/2JwSzG+D9iXGp8pfD1nHCaZ51qdJd+BuZffSOTvn7c95GkMf7Vjy2sqnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKehAncNtGEkBRMFY23UgsHRotAvMB8GA1UdIwQY
MBaAFFDhciKiL8lXnX0JXV1D+NsOzlcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVU9GeUlxSXZ5VmVkZlFsZFhVUDQydzdPVnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8wNjYzYzMtYTk3My00NzBmLTk4MTAt
MDBmYWQ3ZTBjOWE5LzEvVU9GeUlxSXZ5VmVkZlFsZFhVUDQydzdPVnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8wNjYzYzMtYTk3My00NzBmLTk4MTAtMDBmYWQ3ZTBjOWE5
LzEvVU9GeUlxSXZ5VmVkZlFsZFhVUDQydzdPVnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcuKcYXT2
5HjNood/HP/31DWfo5S0u/niJdy3+/0LfyKerT8YyS2yf+uRVmWoyw6WvjrBkdSI
gv1vDwV7qLnQONtbaugpusb4meLPUMmQ+3fxEz/vLYReGv/xwBImf5AYVR/seACX
MeKvgSltehIWQ07dMlnEVyHhkpDNiLOTkYBmsqh32hAv9lcZWnn4ZISEZ+AoEILo
OxULqUVGnPYUskLtqmRRpPFA+L2WFwYjrAeGc/HxZV9DuX/lwnUbqJR7W+ka2pSN
GahBx+iCm87R2Yf6CeewczsRHNcJ4Qn7pdJqcOHJ07ZEyRqTFhfc0LVB6uajfg0J
wK6mC67jFDuPyQ==
-----END CERTIFICATE-----
Generated at Thu Sep 24 08:03:27 2026 by rpki-client