
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: 0uuhUFh8wtStfn2PkBW0aPKshuYl34emzm3Y38PLdeI=
Subject key identifier: 8E:FF:71:98:96:65:9C:A5:92:10:16:B4:FE:72:95:20:F6:87:15:DF
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 01A1250BEDDE3F66FF68F79D529299681FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0D78
Signing time: Sat 10 Oct 2026 09:01:40 +0000
Manifest this update: Sat 10 Oct 2026 09:01:40 +0000
Manifest next update: Sun 11 Oct 2026 09:01:40 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: UtGf3ri3BboXDUwMfUr/sAj2anWC9DOBomVlR2E2n+E=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 09:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:25:0b:ed:de:3f:66:ff:68:f7:9d:52:92:99:68:1f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Oct 10 09:01:40 2026 GMT
Not After : Oct 11 09:01:40 2026 GMT
Subject: CN=8eff719896659ca5921016b4fe729520f68715df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:55:76:35:28:90:81:8f:6b:ad:e8:7e:fa:
85:dc:d1:8b:d9:3d:0f:30:aa:e9:e4:d1:f2:ae:d5:
67:e2:3e:9c:64:20:41:d9:ff:ef:0f:c7:6b:1b:3c:
65:7f:79:b8:4b:1f:95:c4:76:75:b5:a2:fe:ea:31:
ef:72:56:51:71:34:cc:58:09:91:f7:a3:83:2b:f1:
30:4e:4d:c9:7b:d8:7b:ef:d2:32:64:f2:50:b0:04:
f1:74:db:d6:be:7a:07:3e:d3:64:51:ca:41:cf:69:
57:28:be:75:62:3f:d1:06:28:89:2a:69:24:91:63:
1e:ea:2a:f0:c7:a2:f1:b4:28:60:77:3c:32:c7:50:
b6:31:77:95:6f:a0:3b:05:6e:05:18:ac:72:4b:2e:
b2:42:ac:c8:61:f0:04:20:de:2e:f0:c2:64:bb:eb:
d6:76:44:01:6d:3a:52:85:42:28:df:cb:d8:5a:b0:
1d:ba:fa:f6:60:01:a3:58:85:ea:00:a7:44:0a:59:
bb:7f:b0:e9:52:41:cc:3a:45:8f:51:bd:28:4f:53:
e0:7d:7d:92:80:06:9d:8a:8a:79:32:92:93:2e:d6:
7c:54:6b:f4:63:e7:e2:e9:fe:9b:6d:dc:eb:71:9e:
1a:5a:32:b3:95:44:b3:73:15:2a:32:b8:29:31:23:
e2:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FF:71:98:96:65:9C:A5:92:10:16:B4:FE:72:95:20:F6:87:15:DF
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:d2:68:35:17:97:31:e5:8f:81:4e:73:af:72:56:82:fb:70:
af:a2:89:1e:12:da:ef:de:da:d6:3e:81:24:53:51:0a:32:1e:
ad:1f:07:b9:0f:e4:87:ae:bb:ac:7a:0e:b9:ae:3e:4f:61:ad:
e3:d5:71:2f:69:99:84:04:a9:c4:39:37:b9:99:30:a8:56:6b:
57:02:9c:e7:cc:e4:4c:06:69:5c:93:f2:fd:6f:60:6a:7d:e7:
aa:87:86:25:9a:17:57:55:21:73:9e:f1:d9:73:9b:43:46:e1:
7c:fa:84:af:e4:fa:46:ec:5b:08:50:f5:f3:dd:2e:53:07:74:
f2:86:75:89:e3:7e:bf:34:f4:af:23:9d:a6:c7:98:76:2c:7b:
89:d6:6d:84:c3:76:11:e8:e3:88:81:c7:d6:58:04:92:12:c3:
ce:6b:f1:12:4a:60:39:1c:30:de:a7:c0:e2:2f:bf:12:6b:26:
b7:74:bd:1a:fc:65:23:12:89:d1:92:46:44:17:3b:e3:80:35:
a4:c2:65:fd:e8:35:3f:99:5d:4a:ed:8e:5e:1d:03:f5:24:90:
a6:1e:8f:32:0c:cd:d9:ac:c9:ca:a7:50:35:ca:b2:f4:b4:eb:
53:22:8a:63:5b:53:aa:93:11:ef:89:d1:9b:e2:41:40:9f:e0:
9f:b3:8f:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:50:43 2026 by rpki-client