Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: JMoWiKQhQoqwrVQvfjEUcW93ZQNkOwSRfHCtBI+4pZA=
Subject key identifier: 11:28:A7:0A:A3:DC:55:86:C8:71:EA:FF:CA:60:A6:21:33:03:93:59
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 019CAAC66ED6B9F467AC5800959C57B352F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 19:00:57 +0000
Manifest this update: Sun 01 Mar 2026 19:00:57 +0000
Manifest next update: Mon 02 Mar 2026 19:00:57 +0000
Files and hashes: 1: F9fOaYPqb4gxUHFeWSAIKisXq8Q.roa (hash: PHpRDYyGYnqjTmjt3ejWEskYaaVTFLnfQhZUlCEYSpg=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: r16I53vEJa/cIo4e4UBcmN+poWzQltaoUIqJVsPzLFg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:6e:d6:b9:f4:67:ac:58:00:95:9c:57:b3:52:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Mar 1 19:00:57 2026 GMT
Not After : Mar 2 19:00:57 2026 GMT
Subject: CN=1128a70aa3dc5586c871eaffca60a62133039359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:12:26:6b:1f:10:09:39:45:f3:61:47:e8:a0:
03:e5:0c:78:9b:53:ec:58:a6:66:e8:04:25:3b:4e:
17:b6:9e:29:04:d7:91:2f:c7:e1:6f:b6:59:09:3d:
46:59:fe:e4:ad:4c:02:ee:f2:f6:ab:85:72:f0:35:
f1:68:d6:a4:bd:5d:4f:f5:1a:f2:c6:fc:b1:08:15:
5d:d6:0b:82:25:27:3e:ea:ac:81:3d:10:2a:84:0f:
3e:db:f5:6a:ac:dd:be:57:33:d5:1a:82:66:a5:a3:
4b:87:63:e3:32:30:41:2e:3e:f0:dc:e3:ab:24:bd:
5d:9d:7e:df:a3:c7:67:72:49:8f:dd:e9:67:b3:50:
1c:e9:19:79:b3:01:4e:99:75:76:ce:62:a6:90:2d:
79:d3:2f:d3:17:a1:83:05:40:e7:d9:d7:db:28:8d:
72:32:68:0a:a8:7e:e8:ed:23:90:d2:f9:1f:d7:b4:
ae:8a:1e:c6:8e:b2:36:e0:25:d3:11:e3:08:38:94:
06:27:f6:f3:73:be:7f:68:09:1f:55:4b:c9:27:59:
33:ea:8f:a5:e7:b4:73:d1:14:9e:7b:b5:29:21:0c:
f4:24:9b:95:f4:98:0e:2e:9c:7f:84:b2:28:6b:b9:
3c:6d:f3:09:cf:a3:4f:01:b7:85:ac:2b:01:fe:2e:
ea:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:28:A7:0A:A3:DC:55:86:C8:71:EA:FF:CA:60:A6:21:33:03:93:59
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5a:c6:2b:6f:a5:c8:53:86:45:24:7e:63:07:8b:af:b6:98:
54:96:3a:e3:ee:9d:c0:e7:2c:5a:04:e2:46:b5:82:02:e5:43:
14:37:de:7a:2c:cf:d5:60:86:81:a4:46:a5:f0:1a:63:18:e3:
86:81:04:e3:46:5d:0e:d7:ab:96:d6:3d:bd:5c:8a:0b:5e:85:
2e:53:7a:79:63:00:6b:4e:76:9b:0f:4c:c6:2f:e8:ef:a5:97:
42:3f:52:ed:a5:3c:8e:b2:56:d6:51:6a:65:80:66:34:50:17:
0d:7d:9b:6e:95:d6:d6:8f:d8:fa:65:b5:31:4e:aa:d9:4f:ee:
c6:c3:17:bb:96:4c:72:9a:aa:04:8d:9e:39:56:52:aa:be:4f:
6a:ef:41:73:43:38:2e:5d:32:bd:a2:54:03:08:9a:65:9d:5d:
51:8b:5e:ee:e6:4e:05:d9:7d:0c:39:92:24:e7:9e:ad:34:8e:
6f:cb:24:fa:33:d5:8c:2d:ea:6e:1b:68:16:44:9c:c6:a9:ed:
02:55:1f:e6:4b:92:7f:3c:8e:1b:01:86:9f:c3:fe:1f:21:30:
f5:90:2d:7d:f2:c8:74:87:4e:9e:fc:5b:44:50:c8:ec:b0:df:
55:ec:45:f2:a7:f6:23:98:c8:a5:de:dd:0e:09:ad:e4:b6:57:
54:bf:9a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:39:54 2026 by rpki-client