Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: RUw9AhHLXXXDL7SIGNoHZ4bO+Ztrj0WU66tAKIypT7Y=
Subject key identifier: 23:E1:A4:29:8C:0A:0E:BD:3B:DB:F9:4C:23:28:CF:52:C7:6C:32:17
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 01A1E05EC8C3096AFA5418DD8B8322900590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 1AFE
Signing time: Sun 15 Nov 2026 18:01:10 +0000
Manifest this update: Sun 15 Nov 2026 18:01:10 +0000
Manifest next update: Mon 16 Nov 2026 18:01:10 +0000
Files and hashes: 1: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: eMehTj8DUF4lADN8kRO0uWde6gicxXg4Ez2Vvg7mu8s=)
2: YiTZyM0LJDlibzSScA19n-r_1NA.roa (hash: xUwCbyrQAmjQ9KEmQXtJqtnkqDlVNHnF+1vzDoqaWUE=)
3: iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa (hash: +jK5YhwAWuiSD7jiuyksRnOSQ26Q7wRKEX5irQTiJO4=)
4: jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa (hash: D7hQEIQMJfA1ZdopDczTPfE2hg2zaIc0IFSTi8hUD0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:e0:5e:c8:c3:09:6a:fa:54:18:dd:8b:83:22:90:05:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Nov 15 18:01:10 2026 GMT
Not After : Nov 16 18:01:10 2026 GMT
Subject: CN=23e1a4298c0a0ebd3bdbf94c2328cf52c76c3217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:d4:3c:8e:37:a5:c8:14:7a:d9:7d:de:cf:
67:d5:43:d6:64:77:53:c5:3d:b7:48:36:78:6e:ce:
22:95:ae:7c:29:ca:af:37:ce:7e:46:e1:86:29:ce:
8b:37:7e:4f:9d:50:8d:5e:53:74:54:74:d1:c6:2c:
70:69:17:06:a3:c4:1b:b4:7a:ec:a8:36:05:15:fe:
87:f7:9b:65:78:55:33:5a:37:e7:ae:75:30:65:11:
a8:35:d8:c9:6a:50:cb:42:b2:9d:64:31:81:bd:ee:
8a:9c:0b:6c:6f:0a:8d:c6:39:67:68:c7:d1:3e:8a:
11:0e:d2:09:2a:f2:9b:e6:5c:58:8f:45:80:2c:0c:
b4:66:07:10:e7:6f:dd:c8:e7:f1:7d:b6:20:4d:8f:
50:18:7b:d0:80:24:13:e8:14:22:98:d2:d2:9a:20:
e2:18:d5:fb:6b:38:96:fd:a0:0c:8f:58:eb:85:fb:
f7:69:3b:a3:fd:8d:5e:50:4a:de:e9:80:ca:99:ed:
7f:64:02:06:36:87:46:31:67:5e:d1:cf:96:a3:ab:
4d:9b:59:8c:86:0f:41:63:5d:05:f1:f9:28:fb:45:
48:21:6a:70:5f:ef:ea:f1:a0:78:7b:a8:2f:9e:17:
61:3e:50:bc:82:09:74:6d:d5:bd:b7:98:3b:e8:99:
d6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:E1:A4:29:8C:0A:0E:BD:3B:DB:F9:4C:23:28:CF:52:C7:6C:32:17
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:b1:8f:bf:00:68:48:2f:3b:2f:0c:01:14:56:b0:b1:24:d4:
7a:3c:ef:f2:97:dc:9b:d0:41:d9:ba:fa:14:6f:85:bf:89:40:
6a:c3:c5:95:28:2d:c3:e5:ae:f5:92:bd:2c:88:48:43:38:a9:
72:09:66:9b:70:3e:f5:de:3a:87:d1:65:a3:2d:c8:ba:77:fb:
2b:c3:6c:fc:7d:d9:ac:ef:7a:6e:c2:2e:83:a0:b5:ff:d0:3e:
63:80:be:e3:a8:1d:26:6d:76:40:01:12:c1:2d:9f:93:0a:66:
0c:59:71:45:10:b2:77:1b:31:71:2f:0a:44:16:96:4a:fb:b0:
55:0b:30:34:11:fd:ac:79:58:75:ee:3f:23:98:a5:f6:62:bd:
93:f5:fa:d7:1c:17:a3:e9:cf:f3:3b:5a:c3:83:60:51:63:69:
75:fd:e7:5e:b0:22:eb:23:b6:db:54:ea:7c:5e:c8:3f:67:66:
4b:f2:fa:2a:a7:77:8f:0f:80:e2:ee:06:ec:5d:f8:7e:8c:94:
b9:e4:c4:72:0f:7a:a3:d0:e5:12:77:35:e0:42:37:58:67:de:
0d:8e:77:a1:34:3b:56:55:4b:87:d7:c7:cb:85:bc:ac:7c:b8:
5b:2b:06:e0:2f:aa:23:b7:99:9a:ce:11:47:7f:1e:39:28:3e:
c8:d1:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:51:16 2026 by rpki-client