Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: l35yd1JOyTkdNE19JlwpJ0CFM0N0GMkegjrBQ5OvH8s=
Subject key identifier: A9:A9:DB:C6:5B:8B:8E:6D:31:57:6F:B9:AC:3D:0B:D7:9E:6A:3C:1C
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 01A0D0B6FF12ACA64FE51C955D98240B5AE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 099F
Signing time: Thu 24 Sep 2026 00:00:48 +0000
Manifest this update: Thu 24 Sep 2026 00:00:48 +0000
Manifest next update: Fri 25 Sep 2026 00:00:48 +0000
Files and hashes: 1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: KHaeINHLb+w2zPXimG5s+SFku1PMJNYia5zk77TfUGg=)
3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:b6:ff:12:ac:a6:4f:e5:1c:95:5d:98:24:0b:5a:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Sep 24 00:00:48 2026 GMT
Not After : Sep 25 00:00:48 2026 GMT
Subject: CN=a9a9dbc65b8b8e6d31576fb9ac3d0bd79e6a3c1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:7f:b5:70:ed:1c:2d:4f:ea:76:95:f5:d3:ed:
73:e8:b3:cc:9b:73:91:54:52:ac:ca:d2:64:96:a6:
bd:c8:fe:eb:98:8f:28:dd:5a:b2:0c:6b:54:26:a0:
11:76:29:d5:a4:79:d9:18:08:78:80:a8:f9:96:0c:
68:7b:b7:3e:6d:f9:7c:73:27:0e:c1:92:b0:16:3a:
7f:be:6a:5a:83:15:ba:e0:13:1d:bd:d6:3e:c4:24:
50:e5:e1:d3:79:90:bf:86:72:91:64:00:e4:f9:b4:
f6:cf:f1:2d:ff:af:59:7e:38:4d:1d:dc:e3:a4:20:
76:26:f7:44:a4:89:1a:dc:2d:ac:bc:e6:aa:b4:d8:
56:54:1b:65:c0:2e:28:59:13:5d:58:25:87:6b:29:
9d:96:25:75:63:8b:51:7a:04:6d:5b:4c:c3:2f:2d:
23:f7:3e:c6:b7:1b:65:3b:4b:e1:68:36:1c:1a:3f:
48:15:bb:20:ee:b4:d6:84:1b:26:6f:44:76:1c:45:
60:c2:07:1f:87:2e:c4:c1:dc:35:eb:33:89:cd:59:
92:92:cc:67:c8:a7:2b:b2:b7:2f:66:5c:90:ef:dc:
97:5b:39:53:92:bc:a5:97:83:cb:b6:1b:f2:64:18:
14:47:ec:23:ec:b6:5e:53:59:6e:e2:f5:61:40:87:
3b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A9:DB:C6:5B:8B:8E:6D:31:57:6F:B9:AC:3D:0B:D7:9E:6A:3C:1C
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:19:f8:81:fd:58:33:84:6b:24:f5:a6:6b:3b:73:4e:da:a6:
f1:8e:13:71:d8:0e:97:df:1a:ed:42:ca:e3:01:8b:f6:6a:c2:
7d:40:7c:a8:b0:ff:b4:c6:76:9f:a1:16:00:dd:d5:58:8d:a1:
b6:34:50:9b:d4:42:e6:47:ad:fa:e9:8a:95:ac:a4:e3:b4:55:
5d:79:c4:90:22:70:ad:fb:45:38:c6:dd:8f:b3:2b:a9:76:22:
b3:0a:41:60:56:3e:a4:1b:32:4e:37:10:4f:eb:b0:b9:96:6c:
0a:95:95:dc:69:92:19:03:01:4f:6a:e0:b9:94:81:0f:c2:7b:
a1:fd:5d:39:6c:00:69:6f:be:2a:52:ac:be:65:7b:be:dd:7f:
6d:7e:9c:d1:24:5b:b5:e6:7b:b4:59:d9:36:b5:61:3a:60:10:
b4:80:32:46:6a:c6:5c:77:fd:d6:65:46:55:74:4f:8b:1e:c9:
10:95:ac:82:ca:9e:89:e3:a2:a4:c2:55:6e:c9:90:9a:e4:cb:
52:6b:61:38:17:1d:cd:2e:07:8e:0b:30:78:ff:0b:b7:9f:1d:
8f:33:61:53:b4:e5:86:b4:df:6d:ad:91:30:e1:91:3d:e6:bc:
ff:68:81:44:fc:b1:58:5b:c9:56:ae:0b:99:ff:7e:5b:79:8d:
98:55:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:48:06 2026 by rpki-client