Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: sry0c1J66q9pKfSt9r/I2QhCKp3ZJqrGJnzOkrdJq5Q=
Subject key identifier: E3:15:25:82:C6:AA:AD:6D:A1:22:3B:5B:28:44:5B:EF:E7:D1:49:AF
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 01A12F8EE8F06D63297D5D72830660E9B406
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 1AA0
Signing time: Mon 12 Oct 2026 10:00:57 +0000
Manifest this update: Mon 12 Oct 2026 10:00:57 +0000
Manifest next update: Tue 13 Oct 2026 10:00:57 +0000
Files and hashes: 1: F9fOaYPqb4gxUHFeWSAIKisXq8Q.roa (hash: PHpRDYyGYnqjTmjt3ejWEskYaaVTFLnfQhZUlCEYSpg=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: Beo/fOLdaEAfPKvRIKPjaLOh8YbSQ4UA1ZzsxRNOOco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8e:e8:f0:6d:63:29:7d:5d:72:83:06:60:e9:b4:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Oct 12 10:00:57 2026 GMT
Not After : Oct 13 10:00:57 2026 GMT
Subject: CN=e3152582c6aaad6da1223b5b28445befe7d149af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:fb:27:aa:21:fe:1c:5f:cf:25:02:1d:a0:da:
ea:54:6e:0d:b6:79:92:bc:33:7a:21:f5:db:cd:ef:
c1:3c:91:33:87:37:e1:f8:d8:3a:1c:28:25:4c:a8:
43:d2:74:97:46:41:e5:48:a4:f0:a7:9e:c4:75:25:
30:a0:e8:3b:39:bd:33:3d:af:79:30:fd:b3:28:4e:
df:1a:d3:72:00:29:54:01:80:49:e0:18:a3:08:58:
fa:67:52:bd:a5:5d:96:a8:29:29:b1:cf:68:f8:ac:
05:dd:8b:fd:21:d0:59:c2:3e:29:ca:ab:06:10:c6:
99:24:77:66:20:dc:c9:0d:de:11:d6:ce:28:24:1d:
76:79:a9:9b:53:aa:c4:dd:04:c0:34:0f:57:0b:0c:
7b:03:65:a9:d0:c5:a2:f8:cf:f9:70:aa:70:79:1a:
db:04:8e:8b:16:98:6e:d1:6a:db:e3:3a:6a:0d:02:
f0:b6:f9:c5:88:87:bd:39:d5:2e:56:20:ca:5a:d6:
37:7b:ac:f9:48:43:44:0d:4e:cf:22:82:c1:d0:68:
b9:a2:19:63:c5:e8:11:4d:87:19:02:53:c4:d2:e7:
56:84:e2:2d:69:f6:1f:c7:d9:83:fd:ee:bc:5a:01:
ab:c4:53:ab:b5:57:5d:3a:3a:40:cf:84:55:3a:17:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:15:25:82:C6:AA:AD:6D:A1:22:3B:5B:28:44:5B:EF:E7:D1:49:AF
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:29:29:33:55:85:7f:4e:34:b0:b0:98:7c:e1:25:01:0c:f2:
8f:54:11:8d:d9:53:5b:bc:92:ef:19:cc:03:3b:81:43:50:d4:
d2:4e:95:9b:fc:42:b9:81:3e:88:28:5e:2a:87:33:64:e9:1a:
e5:c1:82:6b:7e:63:b8:08:47:0c:dd:a9:86:23:94:a7:0d:1e:
cb:01:f8:8f:60:b5:55:66:4a:fd:98:30:fc:94:b6:96:4b:aa:
6a:2e:4c:38:b7:3a:d0:87:1e:f6:fb:7d:ea:73:9c:50:f1:32:
cc:ec:b9:37:c6:38:28:0d:79:f4:13:3e:a4:54:5b:9d:ca:e2:
71:d7:9c:96:71:6c:dd:ac:5f:77:39:14:2b:21:49:01:4f:8e:
05:5a:74:f3:0f:3b:64:4a:d7:e0:22:d7:c4:8c:04:f4:73:78:
09:3e:ca:79:f7:33:2b:d4:63:77:83:7c:51:5f:7b:89:e5:9b:
a0:c8:1f:eb:eb:c0:44:7c:4c:6d:b6:eb:65:05:44:c7:bd:d5:
38:98:14:c5:32:23:9e:c7:31:fd:d8:7e:7d:5c:c0:bd:e1:9c:
4a:29:f1:0a:9d:1d:4f:19:09:b7:14:b9:63:68:f8:f8:a4:d7:
f4:18:a0:37:1b:10:d2:85:e3:9f:6a:a2:cc:98:ff:55:49:fb:
82:9b:8b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 14:15:23 2026 by rpki-client