Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: S0sJd8KLnMH5FR3g+PxdMxYSiezT9eHq2m+0PkuOSNM=
Subject key identifier: 2A:C5:60:AA:C7:53:6A:EB:52:22:3B:13:0F:1A:0E:0F:B2:44:FE:6B
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019FAB2C2733106BA712204F3C92050C7095
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 174D
Signing time: Wed 29 Jul 2026 00:00:25 +0000
Manifest this update: Wed 29 Jul 2026 00:00:25 +0000
Manifest next update: Thu 30 Jul 2026 00:00:25 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: ZsCBuoIoN6S+uTIgZfJcTITXYaXB9nki+LznTCaZVLM=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ab:2c:27:33:10:6b:a7:12:20:4f:3c:92:05:0c:70:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Jul 29 00:00:25 2026 GMT
Not After : Jul 30 00:00:25 2026 GMT
Subject: CN=2ac560aac7536aeb52223b130f1a0e0fb244fe6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:b0:0b:16:a0:81:e5:01:f1:9f:8b:f3:5a:cc:
78:9d:0f:0e:7b:b7:7d:f4:6a:4b:fc:8b:87:6d:0f:
28:14:a5:06:42:d6:29:fe:58:3d:de:f3:e4:9c:7f:
89:8f:f4:19:9e:e0:3a:f2:17:58:09:43:e5:e0:15:
04:1e:e8:56:70:68:e0:d2:25:7c:ae:5d:69:63:3d:
23:e3:1a:8e:1e:83:fd:fa:1a:99:93:8a:6c:10:39:
3a:71:5c:4c:a3:ca:04:8a:21:9a:dc:6b:9d:49:48:
18:10:cb:57:5f:fe:09:bd:03:85:f4:28:19:86:ad:
af:9d:58:d8:61:9a:79:46:85:33:4d:49:09:f6:c1:
cd:ac:71:2b:96:46:e0:75:69:2a:94:40:2e:79:00:
a7:eb:9a:dc:d5:e3:77:e5:4d:e8:1c:fc:50:1f:e6:
c2:13:bc:27:4b:b8:ec:bd:52:86:02:83:13:9a:c5:
3f:af:78:8a:43:9a:fa:d8:23:84:87:21:54:28:43:
88:e5:8b:77:ce:b9:86:8a:05:12:ce:02:65:0b:90:
8a:50:98:6d:bb:98:12:3d:ad:83:db:08:ec:f5:47:
e8:eb:e6:57:56:ca:87:ec:3c:26:85:a9:4a:6e:8e:
40:53:07:69:49:3d:d5:d1:11:90:81:81:32:de:6f:
df:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C5:60:AA:C7:53:6A:EB:52:22:3B:13:0F:1A:0E:0F:B2:44:FE:6B
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:b5:84:c4:90:7f:41:a7:59:92:17:a4:13:7e:8a:9d:af:59:
09:6b:b3:9a:f0:39:8e:ba:1a:48:55:d2:a6:f8:93:6d:5f:45:
fb:fd:97:f0:38:87:2c:fb:39:b7:7b:d9:27:ac:a6:21:ba:4f:
aa:7f:42:05:db:b2:11:f4:72:5d:44:54:a8:3f:d8:f5:fb:79:
aa:35:ce:6b:c7:92:89:73:02:59:06:18:3f:6a:38:3c:0b:3d:
0e:48:7c:43:4d:af:95:81:91:65:5e:5a:b2:79:99:51:ba:0f:
65:e3:02:6a:d9:21:1e:1f:04:db:1b:f9:1f:ad:fb:02:61:71:
d5:ef:ce:79:94:26:92:0d:68:41:83:fd:b5:b2:46:3a:54:3a:
65:6a:1c:94:54:4f:fc:4f:7e:14:b7:84:76:4e:2c:dc:ae:dd:
ad:fa:4f:6f:f9:9f:ea:13:58:ca:09:bb:46:c9:d3:3e:b3:5a:
7f:f6:bf:a8:a1:e3:a0:87:9d:53:df:0d:2d:5e:18:8f:2e:55:
dd:be:0b:ab:e8:6b:59:4f:6a:b1:05:18:f8:cf:6e:27:b4:ba:
10:c2:f6:d6:37:7a:d2:51:ff:76:84:30:bc:56:24:8c:7f:b2:
c6:b9:06:1a:5f:86:9a:db:1b:e4:4e:a6:e2:21:89:ee:1f:13:
c6:70:8c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:04:36 2026 by rpki-client