Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: rn0X+ZSa7J5yUusIbobic7GkLNg2hii46GxRCj3Bb6o=
Subject key identifier: 9E:5E:09:12:90:43:14:E6:72:FB:4F:E8:5F:F2:40:DF:40:DF:D3:CB
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019CABD9E85118FB83F96568BA3F6AFFA2CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0B27
Signing time: Mon 02 Mar 2026 00:01:50 +0000
Manifest this update: Mon 02 Mar 2026 00:01:50 +0000
Manifest next update: Tue 03 Mar 2026 00:01:50 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: nOsiZjV9E/qE1/lYjszxf+CC6+HnVJoAmGkmcML9rtU=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:e8:51:18:fb:83:f9:65:68:ba:3f:6a:ff:a2:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Mar 2 00:01:50 2026 GMT
Not After : Mar 3 00:01:50 2026 GMT
Subject: CN=9e5e0912904314e672fb4fe85ff240df40dfd3cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:1c:79:f0:e6:8a:03:89:8b:76:74:21:fe:90:
65:06:51:ac:4e:ad:d7:3e:c9:34:f9:58:c6:2b:54:
76:ba:9c:5f:90:54:4f:61:c3:4a:4d:5b:59:96:7a:
4f:7e:d7:02:bd:9c:cb:54:d5:62:30:08:9f:b0:56:
3d:03:46:19:a0:0c:1a:58:35:41:b5:d4:b0:38:b3:
ec:59:c6:51:27:e4:cc:60:4b:b1:52:4c:d2:e3:aa:
03:58:fc:e5:0d:77:a7:1e:55:11:d1:59:52:66:79:
a7:75:c4:88:49:13:0f:be:b2:ce:26:d5:50:fd:b8:
cb:3e:f3:5c:5b:e0:80:57:33:0c:45:b9:e8:0c:e9:
4a:77:c0:9c:dd:4f:68:b2:82:36:f0:37:68:71:79:
74:d3:c6:5a:af:5b:b0:83:9d:cb:4c:81:25:63:cc:
6c:42:4f:93:a6:04:d1:56:9e:e3:c5:d6:c2:0f:89:
1c:2d:e2:6a:b7:1f:18:75:ba:1b:d3:dc:d7:5a:f0:
ae:61:28:bc:f6:e7:2b:a8:d8:77:ae:7f:49:79:b6:
b0:ca:28:69:65:f6:19:98:e7:9c:98:14:50:2e:55:
0d:1a:83:a1:c8:4d:33:25:00:0a:9e:c4:11:ca:ed:
d1:f1:a0:b0:c9:25:d9:f0:6b:6a:59:de:07:39:6b:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5E:09:12:90:43:14:E6:72:FB:4F:E8:5F:F2:40:DF:40:DF:D3:CB
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:80:6e:77:95:26:66:5c:34:92:d7:23:60:df:58:89:cc:4e:
29:cc:4b:2e:0d:7c:2b:c9:99:27:ee:24:84:02:1e:5a:39:1d:
74:c4:a5:9f:69:b3:4e:2b:7d:e6:22:60:67:f9:e7:aa:7e:de:
f4:a8:ec:5c:82:b3:21:fb:f1:e7:74:bf:cb:b8:ef:ae:46:0c:
1a:13:61:90:d3:23:4b:f5:7b:ed:9a:23:7f:00:12:cf:8a:05:
dd:ed:a7:bf:4c:73:93:26:ea:b4:96:c3:77:6d:5b:35:d5:3c:
3e:70:f7:f8:58:5f:40:7e:33:e4:d5:bd:7b:20:56:57:00:34:
34:67:b0:51:2d:2c:b8:8f:c6:0d:42:cb:d9:ea:a8:d0:27:1f:
44:79:a1:d0:db:07:82:a6:08:c1:e6:8c:cc:10:eb:46:6e:17:
85:02:94:62:64:1a:ee:08:81:a0:10:ea:f2:a8:74:3a:d4:13:
86:03:13:80:21:a4:36:d0:b3:4f:35:91:2f:66:93:aa:3b:ee:
b6:a8:ef:c1:fc:bd:bb:d6:02:a8:54:3c:13:02:c9:84:3d:2a:
84:2d:68:de:71:89:13:fe:80:ac:e9:67:ae:1f:86:da:07:7e:
2e:ba:41:3b:05:14:39:81:00:f8:0c:be:e1:3c:76:14:17:6e:
16:0b:e7:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:11 2026 by rpki-client