Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: +HDoJTVFV5F2JTFYxC/gWpof3EneUe8vO52dy+ffRkQ=
Subject key identifier: FC:87:FF:47:58:5C:23:23:0D:E4:73:11:C6:08:61:16:96:E9:95:3D
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 019CAE35A8D70E339FCFF8AEB3E8B751C5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 184C
Signing time: Mon 02 Mar 2026 11:01:18 +0000
Manifest this update: Mon 02 Mar 2026 11:01:18 +0000
Manifest next update: Tue 03 Mar 2026 11:01:18 +0000
Files and hashes: 1: L5RtN4MYgylQB2sxCXbY7rkj9cw.roa (hash: qjznCSz3UWXsKIxhvu2fQzujS0se59sICJHUHPBxLVY=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: 0P02KfwisLklfEzhlMCE9OyGjQGHC/mADE4QAygygT8=)
3: ve2xnNSznR3jgazHd-AYZFn-sds.roa (hash: 23cgt8zKs/gW5LTZzpzr40f5utV3g89KsGnqM+0cNAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:35:a8:d7:0e:33:9f:cf:f8:ae:b3:e8:b7:51:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Mar 2 11:01:18 2026 GMT
Not After : Mar 3 11:01:18 2026 GMT
Subject: CN=fc87ff47585c23230de47311c608611696e9953d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d7:b4:a9:31:07:c1:fd:51:32:81:ad:86:0b:
b3:85:ed:dd:5e:e8:6e:9f:e7:ec:48:e4:fc:08:c7:
3e:ca:11:4e:b6:a0:05:66:4c:b4:e0:86:1e:4f:66:
2d:d8:23:db:cc:2c:78:67:7c:a5:86:e5:6a:97:e8:
cb:ce:b3:23:b7:17:ac:77:04:76:ed:a4:92:b1:63:
fa:8d:d0:0c:7e:fa:40:e9:6d:8c:07:60:73:13:62:
86:f3:eb:c6:63:cf:3f:c3:d2:5c:9b:fa:05:49:c3:
1f:b4:4b:24:1b:ac:47:68:13:09:03:af:74:a8:f2:
f8:5c:a6:70:6a:72:e8:96:2a:9c:d9:60:4a:fe:98:
35:c7:41:2b:6a:f3:1e:a4:0b:1e:71:17:95:1d:06:
6a:a0:4e:d6:b0:2f:e0:b3:a7:69:5a:44:ba:b0:51:
81:ed:49:94:06:19:c4:7f:bd:41:6d:e5:bc:c8:4d:
35:19:6c:26:fc:52:dc:56:70:da:19:a9:0c:4d:0a:
61:d2:f3:16:70:01:e3:8f:e3:a6:ff:36:fd:09:63:
e1:07:83:11:5d:63:b5:35:72:da:4f:74:48:76:c4:
5a:51:71:32:45:6b:a7:b2:23:b6:6d:8b:c1:26:ba:
61:18:89:6a:37:56:39:de:b4:8a:e2:a7:c8:40:0b:
24:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:87:FF:47:58:5C:23:23:0D:E4:73:11:C6:08:61:16:96:E9:95:3D
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:d7:13:88:fc:d6:8e:7f:3a:b1:34:da:e7:21:6b:c7:d0:8d:
00:54:51:c0:2a:bf:f1:80:1b:f2:ef:82:a4:ce:32:a2:e4:29:
39:a6:c0:6e:83:80:0b:0f:3e:b1:fc:90:46:b0:3e:11:6e:a3:
03:cf:63:4b:14:56:4d:6f:b9:7a:93:4d:fe:00:79:b4:14:37:
1b:fa:ed:2f:2f:33:c5:fe:11:06:dd:12:12:c6:54:cd:77:c9:
e1:fb:a0:31:02:b7:c8:97:16:2e:c1:3e:62:5a:d3:17:eb:f6:
65:fa:e9:08:dc:33:8c:30:ef:c7:e9:17:f7:cb:fe:76:18:1c:
36:84:6e:37:79:be:cd:ce:fc:c9:13:07:56:ac:2b:28:7e:9e:
4b:e5:ee:91:42:30:50:9c:b0:b9:c2:ba:e2:bd:b0:03:ed:71:
3c:fc:fd:4f:1b:da:5a:6f:15:21:00:fc:8b:0a:a8:57:d7:f0:
f5:8b:83:f9:8e:ba:00:c4:b0:ad:a3:51:18:1c:e4:10:56:a7:
2d:50:a6:4f:8b:95:24:d7:a3:14:f2:1d:4a:4b:4a:f3:ad:81:
53:c1:a9:f1:11:79:b9:23:14:c9:32:64:7c:82:7f:e3:9f:c8:
ca:c0:39:2c:ee:f6:92:59:ad:e4:21:47:10:98:59:14:05:9b:
22:ea:fd:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:28:50 2026 by rpki-client