Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
File: unnFAIApfLnMDMk07jifUMPnPUo.mft (raw, json)
Hash identifier: s7iUqe8QOrE59Ib669yoskw7F0ibLc8k2L22fxqX6o8=
Subject key identifier: 9A:6E:76:74:94:1F:6F:6B:CB:8F:19:39:F8:3F:59:F7:E0:86:1E:29
Authority key identifier: BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
Certificate issuer: /CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Certificate serial: 019CAD22B9DBC09F9D510BCA353F50EDED3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
Manifest number: 0715
Signing time: Mon 02 Mar 2026 06:00:59 +0000
Manifest this update: Mon 02 Mar 2026 06:00:59 +0000
Manifest next update: Tue 03 Mar 2026 06:00:59 +0000
Files and hashes: 1: XKauEkhgdHlzhfA3t4VdHxgbGbE.roa (hash: sIffgoQ23PXM37zJ/C0HFWWKObJRqfapVrUOvAIf2kY=)
2: unnFAIApfLnMDMk07jifUMPnPUo.crl (hash: yH2IgpVRcPXR2dcCY4zRcEVSwKrzRskh/VL6CYNgSnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:b9:db:c0:9f:9d:51:0b:ca:35:3f:50:ed:ed:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Validity
Not Before: Mar 2 06:00:59 2026 GMT
Not After : Mar 3 06:00:59 2026 GMT
Subject: CN=9a6e7674941f6f6bcb8f1939f83f59f7e0861e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e5:53:8c:c3:df:0b:8a:48:32:a1:b5:d5:64:
d4:06:f3:86:26:df:26:fa:f5:c2:3f:13:95:64:3f:
a2:d7:a1:0d:d1:7e:f9:10:21:c6:89:98:20:82:54:
fc:c0:c3:05:0f:75:bb:39:5f:ea:aa:79:c5:8b:b0:
74:cb:36:d0:58:8a:84:a4:5c:84:95:12:b2:1e:91:
03:69:f3:02:0e:90:b1:d8:b8:f7:ef:af:88:9a:1a:
13:b1:b7:a2:cc:ed:a7:1b:15:25:a9:56:e1:ab:2b:
ea:9d:f4:a3:54:d5:90:1e:62:ac:6a:bb:68:c9:d0:
75:79:4e:2c:8a:64:62:81:74:19:04:0c:d9:8a:11:
fc:f3:6f:a6:bf:26:90:75:77:1a:b7:a1:2c:5e:1e:
c9:0d:7f:3c:b9:bd:55:d8:65:19:7a:76:ea:e7:3b:
3e:58:b9:45:a7:7d:d5:f5:4b:d4:57:c5:83:31:e6:
b2:dd:a9:35:de:22:ea:b3:ba:67:b7:98:6c:38:5c:
68:81:cd:e0:36:77:41:89:ef:f2:fa:11:24:ef:02:
60:86:8f:7f:d0:a1:f0:4e:dd:96:17:5c:4d:5e:5c:
33:75:24:3e:76:f1:9d:a2:6b:bc:c1:43:ab:28:ab:
ff:6d:ee:39:56:6e:f4:78:df:4b:16:c3:41:bb:12:
7f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6E:76:74:94:1F:6F:6B:CB:8F:19:39:F8:3F:59:F7:E0:86:1E:29
X509v3 Authority Key Identifier:
keyid:BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:f2:8c:41:39:44:03:69:9b:0a:b8:1e:89:45:79:1c:e0:b2:
f5:80:bd:47:cc:21:43:96:65:f2:15:4f:46:e2:1c:1a:bd:b9:
bd:5a:f8:ce:66:6c:6e:d1:8f:74:89:a2:50:cd:c6:a1:bc:8d:
11:29:99:f2:fa:40:b4:6e:83:48:c4:fa:3b:ba:c5:a9:e3:ad:
8b:99:ef:fd:4d:3b:d1:11:64:c6:c8:53:3d:f3:02:4c:ae:9d:
b7:59:1d:c4:75:d1:de:fd:10:dc:9d:d0:b0:9a:e3:a5:99:a3:
a5:69:a3:da:ca:7e:a4:9c:27:e5:57:ce:ac:84:d5:e6:b0:d7:
46:22:1d:53:1d:cf:03:c7:d6:4e:9b:b5:84:09:0a:41:ec:15:
c0:56:e2:9c:1b:3a:f6:44:0f:fa:9d:4b:bf:a7:30:ab:c5:7b:
8e:9b:27:0b:be:a8:14:f3:a2:0f:3c:05:6d:b8:d3:6b:8e:ff:
cc:1d:7f:c8:55:9e:49:e0:f7:39:8f:5b:2a:bf:45:ca:dd:14:
66:d7:4e:50:f8:81:0f:bc:23:d1:54:b6:3f:6d:52:69:6e:fe:
cc:25:2b:60:4e:bf:85:8d:ba:19:1f:6b:f3:79:ba:a9:2a:2a:
2f:b8:e9:a9:d9:9c:0e:ef:90:3a:38:a6:fb:d2:41:ee:f2:60:
87:7f:17:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:07:40 2026 by rpki-client