
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
File: UOFyIqIvyVedfQldXUP42w7OVyk.mft (raw, json)
Hash identifier: J/wPdc6OAlI1M7dNDzLF6MigWqpNwBTzgr4BWKE+l50=
Subject key identifier: 70:A0:D6:26:C1:39:BD:10:69:9C:C4:6E:9A:81:B7:AB:55:E1:95:9B
Authority key identifier: 50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
Certificate issuer: /CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Certificate serial: 019EC148E0E820429FE0C6B41BDCC0F2866E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
Manifest number: 49
Signing time: Sat 13 Jun 2026 14:00:39 +0000
Manifest this update: Sat 13 Jun 2026 14:00:39 +0000
Manifest next update: Sun 14 Jun 2026 14:00:39 +0000
Files and hashes: 1: UOFyIqIvyVedfQldXUP42w7OVyk.crl (hash: dExfAtZ0g2N+Z9bv85veFeetvRuy59adyoyFdQL2EQg=)
2: bXnYhv42SK3J_ZuBABFK8IDz1yo.roa (hash: //woNvHZB41M+uDAGPVK2inhLGWjh8SUvLT/ycnfsRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:48:e0:e8:20:42:9f:e0:c6:b4:1b:dc:c0:f2:86:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e17222a22fc9579d7d095d5d43f8db0ece5729
Validity
Not Before: Jun 13 14:00:39 2026 GMT
Not After : Jun 14 14:00:39 2026 GMT
Subject: CN=70a0d626c139bd10699cc46e9a81b7ab55e1959b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:0b:4d:a3:84:1c:90:df:bc:f9:22:27:bf:7f:
d7:dc:e9:05:77:c3:87:ea:d1:9f:e9:1c:5a:f8:06:
84:57:8e:b8:34:ce:e0:e5:76:b9:46:e0:c9:6d:95:
4e:ec:6d:00:aa:5a:bc:24:53:67:eb:04:25:86:b3:
14:24:41:d3:ac:cd:dd:0c:c9:1f:50:d4:91:7a:97:
7d:ce:42:56:7a:32:42:17:c4:36:9e:64:cf:47:58:
da:28:6b:14:06:28:49:a3:af:a1:e8:55:44:bb:f7:
27:89:1f:9c:92:e6:8b:b4:7e:6e:c1:e7:ec:2b:29:
f3:94:9f:02:e4:a2:ff:c3:88:78:5b:3c:8e:6d:21:
31:56:b3:9e:42:50:91:7d:86:ef:92:60:23:d4:90:
dd:d1:ab:01:d9:f4:d6:0f:c8:26:8c:69:a8:f8:40:
aa:5d:d6:4f:9f:ec:f4:68:b3:88:4f:9b:83:be:b5:
9e:4b:da:06:ef:7d:df:ff:42:fd:87:ab:21:13:f3:
ed:ae:47:8a:b9:3d:35:aa:87:85:30:1a:30:f6:96:
e3:f7:72:87:4b:7d:73:ce:71:8e:44:98:43:98:f1:
8f:f5:ed:4b:89:92:77:b7:bb:e5:8c:a4:ed:bb:8d:
dc:d2:5f:4d:8d:c8:3a:4c:66:c2:09:bf:7e:11:ab:
cd:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A0:D6:26:C1:39:BD:10:69:9C:C4:6E:9A:81:B7:AB:55:E1:95:9B
X509v3 Authority Key Identifier:
keyid:50:E1:72:22:A2:2F:C9:57:9D:7D:09:5D:5D:43:F8:DB:0E:CE:57:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOFyIqIvyVedfQldXUP42w7OVyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/0663c3-a973-470f-9810-00fad7e0c9a9/1/UOFyIqIvyVedfQldXUP42w7OVyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:56:ab:6a:a7:72:bb:8e:4d:e4:4e:8a:67:4a:aa:76:10:36:
8e:39:50:f0:58:d9:85:76:da:20:71:48:99:e1:0b:f6:cb:29:
ff:55:07:7f:57:b8:aa:38:ce:4c:d4:1a:12:bb:fd:36:10:33:
9b:b3:0c:40:24:72:16:a8:1d:62:b5:34:05:31:d3:61:ae:2c:
13:c8:01:f3:e0:b0:6b:3c:84:e2:5b:37:0e:46:2e:cf:e6:38:
e4:8e:04:c7:83:e7:53:62:de:16:7a:d0:ab:09:f6:1f:d9:8f:
24:4f:60:2d:88:5d:2e:74:48:0f:ba:b1:e5:3b:54:5a:5d:26:
f8:6b:9d:78:8a:ad:9b:82:25:91:b1:43:fc:37:ce:eb:33:28:
3a:e7:80:27:33:39:0a:3e:88:0c:2a:1a:19:40:90:5c:7e:68:
17:82:2a:99:cf:7d:0f:d0:73:10:8f:15:87:5d:55:a8:da:bf:
2e:eb:9c:c4:2c:0e:15:28:e8:96:83:d0:6e:81:01:8a:4d:49:
32:e2:5a:28:29:72:97:fa:72:46:9b:5c:d1:06:27:0f:6f:13:
d1:88:32:5b:cd:63:0d:ff:28:94:a9:93:f6:04:b5:0d:b9:9b:
36:d4:b6:05:83:57:08:43:53:57:76:16:95:c7:1a:ae:34:10:
fc:c1:94:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:53:43 2026 by rpki-client