Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
File: UOaW5uJbSSu34HyzKbtDVLERpoE.mft (raw, json)
Hash identifier: 81vn+evifvPxCyVPHD2mcCT70wFXhebSMFVFacAwLgE=
Subject key identifier: FE:68:CA:D9:B6:E2:68:01:E9:09:BB:73:B5:9C:67:35:CB:BE:8C:59
Authority key identifier: 50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
Certificate issuer: /CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Certificate serial: 019D9D3F406113CE8AC54E485C70B35C6952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
Manifest number: 0BA4
Signing time: Fri 17 Apr 2026 21:01:01 +0000
Manifest this update: Fri 17 Apr 2026 21:01:01 +0000
Manifest next update: Sat 18 Apr 2026 21:01:01 +0000
Files and hashes: 1: UOaW5uJbSSu34HyzKbtDVLERpoE.crl (hash: 61zDnH80wku0qzrddt4yZfuAIkI/WvntFZN9GULzJ20=)
2: ud-rlEsNj2HyrWtwR6QbOfrF-vY.roa (hash: uWoRD0bpqfoPSwtBo6lWNrXknFwbcuRdkomzveOU4Qk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:40:61:13:ce:8a:c5:4e:48:5c:70:b3:5c:69:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50e696e6e25b492bb7e07cb329bb4354b111a681
Validity
Not Before: Apr 17 21:01:01 2026 GMT
Not After : Apr 18 21:01:01 2026 GMT
Subject: CN=fe68cad9b6e26801e909bb73b59c6735cbbe8c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:66:4f:0e:85:39:d6:73:c7:4d:82:e5:f2:1d:
85:0a:da:c4:ca:b0:7f:e8:ea:b0:5c:56:a8:98:16:
b5:ad:d3:35:36:e5:a9:26:b6:d3:66:ae:1e:14:85:
47:ec:20:ba:2b:a8:5d:3c:89:20:1f:31:5d:9b:9b:
ec:71:64:1b:46:39:eb:cb:87:3a:a2:e5:87:10:76:
24:61:15:d1:5d:2f:4d:12:f6:c6:2d:60:9c:ce:cd:
b5:d1:b1:2f:2d:1b:c9:aa:c5:77:ac:bc:70:90:2c:
38:be:03:fb:01:21:81:72:e5:3c:c5:8a:61:69:ee:
ee:f3:03:c4:60:59:4a:f3:24:ee:97:16:be:e7:6f:
7c:6a:6a:0c:c3:30:c4:4e:e8:c9:5c:ca:d1:a4:f7:
33:7f:01:ec:72:18:c1:3f:37:7c:aa:60:71:a4:d5:
b5:14:2a:86:b8:1b:0a:b1:0d:70:67:84:88:49:22:
88:ba:23:b3:46:e0:b3:aa:97:49:73:cc:01:e8:0a:
9d:77:71:89:aa:e0:24:07:50:0c:ea:c3:b9:b2:8f:
85:0e:f7:87:66:6f:d0:56:51:4c:29:25:8a:b1:75:
95:1c:fd:aa:6e:59:ed:18:08:a5:90:ea:c6:d7:02:
44:a5:8c:c3:f4:ff:31:5e:80:6c:c2:18:0d:26:4f:
60:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:68:CA:D9:B6:E2:68:01:E9:09:BB:73:B5:9C:67:35:CB:BE:8C:59
X509v3 Authority Key Identifier:
keyid:50:E6:96:E6:E2:5B:49:2B:B7:E0:7C:B3:29:BB:43:54:B1:11:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UOaW5uJbSSu34HyzKbtDVLERpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/dadf3b-c867-4163-8768-6141d99634b5/1/UOaW5uJbSSu34HyzKbtDVLERpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:95:03:3a:44:59:9a:7c:7e:91:21:e5:68:09:7a:b5:14:3f:
3d:e0:a5:3e:8a:05:18:63:c5:9b:e8:3c:a3:b7:2b:be:4b:d7:
3a:4d:74:59:b0:09:ca:ed:d4:99:24:be:a3:6b:70:f5:1b:b3:
b8:17:a4:3d:d8:28:ab:2b:31:37:54:e6:35:86:74:1e:96:06:
35:4d:56:10:df:f0:5f:aa:1a:0e:bf:d7:2e:5c:06:4c:e1:4f:
2e:24:1a:90:63:3f:77:be:d7:99:32:d2:1d:e4:a2:c3:26:d7:
b2:83:95:25:0a:d1:81:d8:86:dd:13:a8:0f:5e:f0:c8:a0:b4:
21:1a:0d:3e:a4:86:41:41:53:1d:70:1f:40:ae:e7:23:f8:97:
5d:6d:5e:2a:4e:66:73:2c:18:ed:ed:1f:66:a3:35:91:3e:d9:
6d:f2:a3:e2:bf:12:d1:54:95:d5:29:3e:42:38:39:31:91:c5:
5d:f4:d4:b5:32:45:e9:f7:f1:2d:f5:54:98:c7:7e:69:24:00:
a6:44:b2:d9:80:ca:25:05:16:65:ed:3a:38:dc:36:cd:e6:51:
b7:bd:27:0b:53:84:c0:d9:ff:00:94:61:14:75:9a:12:a8:e3:
97:78:d1:ce:0e:12:29:9b:23:4a:9a:4d:61:12:10:5c:b5:3c:
b3:36:49:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:55 2026 by rpki-client