
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: NrZlhBiHaDpCa2Z/MxQhOk5WRIhjUF+6xT/6M9PaW9w=
Subject key identifier: 15:5C:8C:AF:9B:F6:B2:27:F7:FA:6B:1D:9C:EF:EE:29:0E:BD:0C:D2
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 01A0D0118CE53E849249C33972F7B2F73FE9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 11C7
Signing time: Wed 23 Sep 2026 21:00:06 +0000
Manifest this update: Wed 23 Sep 2026 21:00:06 +0000
Manifest next update: Thu 24 Sep 2026 21:00:06 +0000
Files and hashes: 1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: W+qhxDQ3fWqGqot8t/K/AN+4i+mYR9S5csFDgCoFFQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 21:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:11:8c:e5:3e:84:92:49:c3:39:72:f7:b2:f7:3f:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Sep 23 21:00:06 2026 GMT
Not After : Sep 24 21:00:06 2026 GMT
Subject: CN=155c8caf9bf6b227f7fa6b1d9cefee290ebd0cd2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:29:4b:45:c0:69:fe:07:9d:e2:06:9f:08:11:
dc:f1:22:a8:15:1b:3c:ba:d2:85:40:94:e7:ef:54:
fc:84:79:4d:0e:b9:54:d7:2b:9b:6f:8e:2f:dc:7d:
a7:f8:67:cb:3b:85:3f:3c:3f:08:54:ef:80:27:e9:
1f:d5:23:75:cc:35:85:93:32:e9:36:47:32:01:67:
43:ab:8d:5a:b5:0f:c0:2b:fc:9c:37:57:04:ee:63:
a4:f3:c4:1e:df:db:ea:41:a9:c7:25:1b:39:13:2c:
c2:d6:28:aa:23:ab:5c:f4:82:cd:2c:34:ac:56:77:
0f:f6:68:1c:98:b4:eb:e7:4f:57:85:bf:83:62:0d:
f1:81:0b:14:c8:f9:22:3c:d8:d7:c1:5b:89:b5:ba:
7f:08:98:2d:77:37:ec:6f:0d:e6:3f:79:96:dd:b1:
68:26:e3:a9:1d:bd:ba:8e:b6:23:a2:ca:8a:50:e2:
6b:33:82:c9:9c:0d:9b:ee:cd:84:8b:ae:bc:ce:00:
cb:2f:17:a0:43:10:50:e9:da:e8:a8:56:aa:14:a6:
64:8e:cf:12:5e:5c:6e:f3:a5:c3:33:d7:d2:c5:33:
d7:92:1b:b4:97:69:08:17:67:e6:2b:8f:22:2a:9c:
0e:1c:f8:81:76:75:12:c1:4e:65:75:ed:7b:0a:72:
dd:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5C:8C:AF:9B:F6:B2:27:F7:FA:6B:1D:9C:EF:EE:29:0E:BD:0C:D2
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:5f:11:f7:b9:8a:43:b9:2b:6a:9b:2d:4c:2a:59:98:c5:08:
bf:1b:e9:93:ef:f3:ad:55:79:94:6c:3a:a0:00:25:c6:42:bb:
62:70:97:ef:35:4f:36:dd:d3:33:99:bb:4f:75:94:80:11:42:
45:a7:b0:2a:50:c7:ab:9f:47:04:4a:4d:b9:0a:4d:57:82:34:
41:da:80:a6:4a:1b:f8:04:17:59:4a:8b:a4:8f:b2:e1:59:f4:
1d:99:14:6b:3b:fb:a0:44:40:35:40:b0:b7:3b:0f:c0:6d:68:
5f:b6:10:2f:7a:5f:9c:05:75:e2:c6:68:87:ff:d1:58:05:49:
e0:f4:3d:7e:29:6b:a8:7d:56:e9:81:d5:f8:64:4f:e4:e6:63:
06:83:66:39:ad:67:02:04:33:bb:41:a9:db:59:75:b8:9d:60:
10:f5:e8:94:78:0d:fd:04:39:54:17:53:9b:61:48:8d:50:1b:
8c:ca:b6:db:74:89:0c:95:6d:ab:74:f1:aa:e8:ab:58:76:ed:
91:fc:1c:0b:d8:b6:c6:c3:a2:c5:3f:05:fe:86:a7:3e:b3:ea:
50:4f:8c:69:b9:6d:00:aa:f8:b2:27:24:97:9c:c0:6e:0f:9b:
17:3b:c2:74:c8:27:03:7a:0f:3b:f6:d4:0c:98:72:3b:6d:e9:
4d:fd:78:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 05:29:44 2026 by rpki-client