Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
File: UJY_Dmf02JPPPXAaI2EObziVkmA.mft (raw, json)
Hash identifier: Sly/Mh9AE+lRAhb22KWllomH5MgZ+0jOxTHW/O4onys=
Subject key identifier: 0E:D6:35:D0:03:D9:C7:9F:74:4B:94:83:33:7E:15:7D:F8:A6:17:9C
Authority key identifier: 50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
Certificate issuer: /CN=50963f0e67f4d893cf3d701a23610e6f38959260
Certificate serial: 019CAA9000DDB73E86B7A280ED7A96B4A888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
Manifest number: 0779
Signing time: Sun 01 Mar 2026 18:01:30 +0000
Manifest this update: Sun 01 Mar 2026 18:01:30 +0000
Manifest next update: Mon 02 Mar 2026 18:01:30 +0000
Files and hashes: 1: 1QoJ4_QLDS8eoUu-jsU6CKTeJ0E.roa (hash: YdO1HiNE8mqcRJU9ltW5QnoiKSnwfSL0ojQXRoxTalo=)
2: UJY_Dmf02JPPPXAaI2EObziVkmA.crl (hash: iO/zf1GiGZCV1Vmg2zakcnj5NW/fNXJia+nrx1XNMNA=)
3: djBGBe9HqvFt7_WabJRUgnTlUhU.roa (hash: n0zVn2aXvua0NDEZjxIxFHxOhEeyIZrC4KOQSbouI7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:90:00:dd:b7:3e:86:b7:a2:80:ed:7a:96:b4:a8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50963f0e67f4d893cf3d701a23610e6f38959260
Validity
Not Before: Mar 1 18:01:30 2026 GMT
Not After : Mar 2 18:01:30 2026 GMT
Subject: CN=0ed635d003d9c79f744b9483337e157df8a6179c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:50:e1:c3:f8:3c:39:9e:bc:b3:49:35:0a:77:
ca:1a:ba:d8:5f:89:88:0a:b7:73:b1:73:8a:92:b9:
cc:c4:78:6e:13:b5:a3:8a:31:08:e9:66:1d:eb:28:
4c:c1:b9:23:c0:ed:19:40:a0:72:5d:e6:01:18:45:
2c:4a:41:cd:1e:0e:fb:18:d7:ba:4d:06:18:6c:61:
24:a5:ca:fc:93:19:47:24:7a:3a:54:ca:02:12:27:
61:47:e8:65:26:54:ad:2b:0f:31:2e:d0:a7:e4:b9:
c1:b5:0d:a7:e7:2c:5f:d8:7c:aa:37:2e:a4:d3:00:
4e:15:b6:d5:59:8a:62:45:43:cf:53:7f:be:3c:4e:
e2:55:e1:89:d9:6d:23:af:c8:cb:06:d9:64:f1:36:
a1:91:99:76:86:5c:d0:a4:cb:e0:bb:09:3d:76:a7:
e9:14:30:bd:8d:f0:63:2f:48:c8:06:3c:4e:28:e3:
87:cc:cf:7a:75:3d:6f:e1:8d:5b:07:38:2f:0d:b8:
ae:70:3d:9f:b7:9c:e8:a1:05:48:09:cd:1b:5e:1d:
3d:45:db:2a:81:c6:d5:23:9d:46:b7:7e:44:98:6f:
9a:e4:cb:e3:ed:50:c0:ad:70:3b:da:e2:69:ee:ac:
fa:11:b5:a8:46:36:bf:f2:ba:9b:4a:5c:0c:f2:25:
9f:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:D6:35:D0:03:D9:C7:9F:74:4B:94:83:33:7E:15:7D:F8:A6:17:9C
X509v3 Authority Key Identifier:
keyid:50:96:3F:0E:67:F4:D8:93:CF:3D:70:1A:23:61:0E:6F:38:95:92:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJY_Dmf02JPPPXAaI2EObziVkmA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ce58d5-126a-44aa-aa08-0f3c1658d0b7/1/UJY_Dmf02JPPPXAaI2EObziVkmA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:63:82:5a:e5:f6:65:ed:26:5e:75:07:19:49:83:bf:41:e3:
12:0d:12:df:f9:3c:a4:b7:9c:dd:04:bb:a4:41:ef:9e:f4:80:
7f:6a:5b:59:30:0b:d0:61:98:cc:94:39:61:e0:3f:0f:a5:bc:
93:f0:c5:5c:26:c3:7b:80:a7:d8:32:9a:93:b1:e8:77:4f:44:
d9:62:58:89:8a:ca:91:4d:f2:80:f1:6e:5a:23:f3:ed:25:12:
f1:07:56:d9:f2:4c:38:dd:db:d0:ad:b9:fa:34:42:10:ce:6a:
07:08:82:00:86:5f:0b:4e:c9:e5:a1:ee:77:e6:5a:0d:36:00:
9d:81:f4:a6:49:d9:73:92:92:ee:8f:18:09:f9:67:ff:02:f7:
59:9a:40:92:d2:d8:f2:29:69:a0:17:f9:22:3f:a2:08:a3:b6:
17:b1:a3:37:52:43:9c:9d:bd:f1:73:2b:fe:1e:76:a6:54:75:
7c:52:78:e5:34:d7:c2:fe:44:83:79:52:6a:8f:15:5b:02:07:
4a:9e:3f:45:87:cc:56:94:05:69:83:96:cd:6e:3c:da:1c:08:
ae:6c:91:15:38:b2:d1:56:a4:6e:71:74:a5:27:23:5f:db:82:
71:ee:e5:20:dd:47:9d:fa:30:c2:2d:9d:55:84:72:ec:96:ea:
7b:63:b3:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:51 2026 by rpki-client