Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: 33HxRur157Fc2jmrLfWiLHyG5/G8Rdrhc6zaIX7I5r8=
Subject key identifier: 9B:3F:D2:66:62:8C:64:94:70:A7:75:F8:F8:F2:50:8D:EE:0D:7E:42
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019DA3AF3B99F18CA4B8FEC24DB6DD041ADA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 07FA
Signing time: Sun 19 Apr 2026 03:01:03 +0000
Manifest this update: Sun 19 Apr 2026 03:01:03 +0000
Manifest next update: Mon 20 Apr 2026 03:01:03 +0000
Files and hashes: 1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: UVnLvQttkcStfRW56f/74JYpcJtoTmFOUTh6DrDXEDM=)
3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:af:3b:99:f1:8c:a4:b8:fe:c2:4d:b6:dd:04:1a:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Apr 19 03:01:03 2026 GMT
Not After : Apr 20 03:01:03 2026 GMT
Subject: CN=9b3fd266628c649470a775f8f8f2508dee0d7e42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:87:e1:a7:90:e6:5a:66:52:04:27:13:6c:
8f:64:b8:d6:dd:69:22:6d:86:0e:67:e2:9e:f2:0c:
5d:42:74:a8:c6:30:92:66:bb:4b:10:94:28:00:eb:
e7:b5:00:4f:53:75:44:88:56:f3:63:43:cd:9a:84:
a4:75:75:db:15:cb:b6:3e:94:94:dd:60:b2:69:bc:
50:e8:20:6d:d5:9d:9f:2e:1f:08:e9:b1:3e:21:e9:
ac:a5:78:7b:4f:af:fc:02:c3:e3:3f:05:be:d4:e7:
e7:9c:06:ca:f0:47:e5:97:c6:7f:1b:5a:a8:4b:8f:
47:2f:1b:77:05:6f:dc:a6:b2:50:2a:ca:a4:43:c3:
fd:45:fe:40:18:1c:7d:58:8e:a7:c0:14:99:57:77:
71:42:3e:68:13:9c:fd:b9:10:ec:b4:e9:11:ad:b4:
96:5f:f4:74:64:4e:40:d1:c2:6a:0d:95:a7:12:07:
2d:15:ac:70:47:e9:04:43:5b:8f:be:b7:a6:c9:b9:
54:03:95:a0:eb:97:5d:a3:9d:18:15:3e:9b:90:a3:
49:02:00:52:72:12:b6:4e:39:b5:c9:da:30:ef:c2:
c0:40:9d:a4:ac:26:01:ae:c9:f0:88:a6:39:d8:b2:
fe:76:68:44:47:de:d1:1d:64:48:d1:bf:ee:87:3d:
b8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:3F:D2:66:62:8C:64:94:70:A7:75:F8:F8:F2:50:8D:EE:0D:7E:42
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:92:c9:11:1c:fa:6e:a4:0a:90:13:a0:51:f4:d9:b9:2a:cf:
58:a3:ef:19:2a:99:07:20:f8:44:33:9d:30:2e:a5:20:df:ed:
2f:39:aa:93:bf:41:b2:50:1d:0c:62:d9:38:4f:dc:2a:07:e2:
76:68:26:9f:fd:51:47:60:cb:e4:29:55:5b:ed:de:a9:3d:5a:
de:72:23:59:11:43:ff:de:be:a3:a0:fa:d1:3c:11:25:c0:da:
33:d5:07:e6:06:44:4a:76:4a:fc:66:56:07:6f:b2:b3:9a:a8:
63:ab:58:01:88:74:31:b4:c9:9c:c6:98:e0:dc:cc:68:db:5b:
58:eb:f8:b1:3b:44:57:01:1e:82:7e:45:2b:f3:dc:d6:29:f7:
1a:50:84:09:ac:70:14:4f:f9:ff:c5:a3:7d:fe:45:2c:79:5a:
9d:0b:fb:23:f3:7c:9d:86:0c:22:05:25:45:b0:93:e8:93:fa:
a1:5e:71:cd:c4:05:93:8e:db:bb:37:ad:ff:48:9f:d6:32:6f:
28:38:5b:a7:74:8b:79:ee:e0:62:6a:0b:ed:b5:45:e5:b6:42:
df:91:ff:e8:a9:00:68:6a:ae:d5:58:5e:f9:4e:48:c1:14:68:
24:a9:20:7d:b8:39:1c:9d:4c:b1:f4:64:d3:4d:46:fd:7c:a9:
1a:cb:d5:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:24 2026 by rpki-client