Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: ITHjY5MMvtJdhheGa49URjkn5fE6CHzJsMdYAUvebTA=
Subject key identifier: 3D:A8:FF:E3:86:71:A2:26:20:A0:67:36:79:CE:85:8A:A3:1A:4A:B5
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 01A0BEB140492C2A7D51D4EA1011AB0A8CE1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 19F7
Signing time: Sun 20 Sep 2026 12:01:22 +0000
Manifest this update: Sun 20 Sep 2026 12:01:22 +0000
Manifest next update: Mon 21 Sep 2026 12:01:22 +0000
Files and hashes: 1: H7BooEdH7pGN2Xwo9YCOFmNvgQE.roa (hash: x9lq9TZ8d9AJh1ukxrBbxQpkG7M8rCAHXmSmUA8oD+A=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: csV/ev/kqg/v3U0V4IO08EuLSxJMOKUq+dVPD2dwQ10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:b1:40:49:2c:2a:7d:51:d4:ea:10:11:ab:0a:8c:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Sep 20 12:01:22 2026 GMT
Not After : Sep 21 12:01:22 2026 GMT
Subject: CN=3da8ffe38671a22620a0673679ce858aa31a4ab5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:10:b1:ea:e0:e1:2b:c6:84:ff:bb:85:0a:50:
4b:12:6a:90:c7:d6:d1:7c:c5:29:bd:f2:6f:a4:5f:
14:bf:4c:98:a1:a3:8c:db:b4:44:52:1f:c7:ea:06:
8a:e1:26:05:2a:23:a9:f1:e4:47:3c:eb:7a:4d:12:
4f:6a:ff:ef:a0:24:b8:59:88:0a:03:7a:36:c8:22:
ff:88:d4:0b:06:ac:40:b3:c5:df:dd:68:27:e1:91:
ae:6d:9a:76:6e:7d:97:c3:35:7f:6d:eb:18:f2:05:
37:d2:a4:35:52:24:a4:8c:11:18:d1:28:1d:ac:16:
34:98:49:34:4a:56:57:93:cb:f5:77:1c:de:14:5f:
2b:de:e1:63:1d:03:23:21:bf:1f:a0:c8:4f:83:00:
e2:6a:7b:1a:0a:d7:8d:32:02:58:f3:fe:18:3a:cc:
f0:07:a1:95:40:8b:26:ca:06:44:e4:39:5d:05:fb:
a5:9b:b1:d2:15:bf:80:1d:7b:e1:66:c6:cc:72:b5:
29:9f:87:80:7c:1c:b8:4e:75:94:c5:39:8e:e5:ee:
ad:e8:96:8c:8a:e6:cb:73:01:b3:f0:5b:53:b0:26:
af:02:d4:10:79:71:e2:63:60:36:31:74:01:06:21:
e4:16:58:82:45:d8:da:c4:44:d3:be:0b:96:ea:03:
9c:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:A8:FF:E3:86:71:A2:26:20:A0:67:36:79:CE:85:8A:A3:1A:4A:B5
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:85:80:86:35:51:b2:cb:3f:7d:da:88:0b:04:e0:d5:d7:7c:
66:1e:4c:e4:40:78:6f:2d:4b:99:f7:c5:bc:79:a7:ff:5b:f4:
31:c6:95:34:b3:39:07:61:85:d5:8a:2a:1c:96:7c:21:6d:33:
22:e2:7a:db:41:1b:93:22:3a:82:e6:00:3b:5f:3e:7d:4c:9f:
28:d4:8d:29:b1:f3:0d:da:51:b1:44:2c:e8:3c:32:67:23:52:
ae:cc:c3:15:4c:6e:f8:7c:0d:c7:cb:30:da:8a:42:40:8a:8a:
e8:ba:76:3e:2e:cc:09:47:4c:5b:b7:31:d0:8a:47:2d:6c:f4:
31:b0:13:20:17:89:7a:4f:5c:0e:8c:4f:ef:fe:6c:fa:dd:97:
c9:b1:52:2f:a8:c3:88:da:55:6d:e2:d7:9b:bc:70:9f:0f:f9:
38:9b:ff:cb:bd:3d:c0:c3:b4:16:f6:4f:32:ca:8c:a7:15:bf:
d7:64:0f:a7:3c:2c:5c:ce:7c:61:32:9f:9f:9c:23:c3:68:16:
4f:f3:09:58:09:c4:37:98:9a:de:a0:66:ba:7b:95:86:9d:2d:
6a:58:5e:f9:8f:cb:90:10:40:43:65:26:da:6d:0f:03:9d:40:
21:f7:f0:c3:90:c9:fa:73:48:63:9e:73:87:40:68:9d:2d:14:
97:37:35:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:35:11 2026 by rpki-client