Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: dZaWYTDjyh5zA4qnwv1ocrXwrAvzW+n3vh2LRLMKkro=
Subject key identifier: E1:0B:C4:30:EE:66:4B:B4:02:BC:B2:A6:DA:3F:52:DC:02:94:A6:D9
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019D9818B756ABAFB51F9F8844632AD5ABD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 163A
Signing time: Thu 16 Apr 2026 21:00:49 +0000
Manifest this update: Thu 16 Apr 2026 21:00:49 +0000
Manifest next update: Fri 17 Apr 2026 21:00:49 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: FBEFdCeF4MkEFawJAkJn2vgXxtEYBP/6K5aNZiKvqPs=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:b7:56:ab:af:b5:1f:9f:88:44:63:2a:d5:ab:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Apr 16 21:00:49 2026 GMT
Not After : Apr 17 21:00:49 2026 GMT
Subject: CN=e10bc430ee664bb402bcb2a6da3f52dc0294a6d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0c:fc:15:c4:be:2c:ac:72:37:cd:b9:96:f9:
42:65:4d:53:b3:4f:02:b7:e9:64:f3:8b:1d:82:48:
e4:dc:70:4d:3c:4a:01:cd:dd:c8:da:fc:15:f5:ff:
e3:59:22:49:6d:60:4b:e0:a9:6c:4b:15:5d:86:53:
71:ed:cc:7c:b7:7b:ae:b0:9c:d4:80:d5:19:4a:6a:
c0:66:86:eb:f0:69:7d:77:65:53:87:f9:d1:4a:80:
70:16:77:a7:66:c1:cf:97:a8:2c:f1:f3:6c:66:2b:
0c:78:95:fe:aa:3a:98:8b:b2:99:48:1b:53:55:0a:
44:5f:83:58:cf:1d:6d:9e:1e:d7:b4:70:3f:cb:73:
61:10:7b:a1:95:18:16:04:28:0c:30:0c:1b:31:e0:
2c:a4:f8:a4:05:41:92:b7:b7:21:48:ea:5f:a0:13:
fd:81:3b:91:70:18:a9:42:78:1b:0b:19:b3:2f:d4:
f1:84:25:a1:c8:dd:a2:56:a6:9e:22:db:8b:5b:fb:
3b:d7:b8:aa:08:b5:33:89:a9:50:d2:53:df:ea:56:
7d:03:6b:24:5b:ba:c8:c0:41:b9:46:16:f3:04:35:
12:25:5f:5e:ce:0e:bd:41:83:b0:24:37:74:f0:d0:
69:a7:f8:b6:c4:9f:98:d9:64:0c:6d:b8:31:72:de:
e9:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:0B:C4:30:EE:66:4B:B4:02:BC:B2:A6:DA:3F:52:DC:02:94:A6:D9
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:06:48:62:34:cb:f6:32:8a:79:78:71:00:83:8b:04:d5:f3:
70:68:42:a6:54:89:e5:d5:37:39:b6:16:3c:bd:14:68:63:0b:
83:59:d4:ce:f2:29:c6:45:7d:ce:49:1d:d1:b5:03:99:cf:3f:
6c:6e:2d:5b:34:58:52:68:14:01:16:cd:2f:63:b8:18:9f:8f:
96:02:c6:56:62:9c:fe:23:2b:e3:be:71:3f:1d:72:25:7b:81:
8d:0c:68:96:c2:a5:22:a3:f4:4a:51:52:7f:20:2a:4c:5c:91:
65:ee:be:bf:2f:69:7c:83:a6:14:13:48:94:5e:13:58:a1:dc:
44:6f:ba:c1:58:d6:27:95:5b:44:b3:4f:fe:9b:f5:ce:d3:3a:
be:26:06:af:c2:99:55:2f:28:71:39:33:e3:24:de:b4:cf:d5:
78:e0:d2:b1:95:e5:09:f5:46:21:16:b4:24:e9:7c:fd:ab:64:
bc:2a:5a:82:ae:53:e3:57:2f:f8:83:db:1b:b2:e9:85:4b:64:
f6:61:9c:d4:cc:c0:1f:9e:47:3f:20:7e:d0:a1:d9:60:6e:37:
a5:1f:0e:66:95:14:05:8b:43:34:8b:bb:47:db:f4:92:01:dd:
73:54:da:c5:f1:d8:f0:99:81:9d:68:8f:88:13:20:f9:23:cd:
1b:d2:15:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:55:35 2026 by rpki-client