Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: yFH1bp2XTKwZhi2aDvgYLA+7ntogQOhDfvm0tSWO23c=
Subject key identifier: 9A:14:50:A9:D6:62:6A:6C:0E:01:A2:EC:C0:55:2F:6B:5F:FA:74:8D
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019CAC7DF8659EC77722E17BAFE7891C116A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 15C0
Signing time: Mon 02 Mar 2026 03:01:02 +0000
Manifest this update: Mon 02 Mar 2026 03:01:02 +0000
Manifest next update: Tue 03 Mar 2026 03:01:02 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: Xdh9jApxA8GAyWv/ROwF5aGSUfPLbTdaGUre88batDA=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:7d:f8:65:9e:c7:77:22:e1:7b:af:e7:89:1c:11:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Mar 2 03:01:02 2026 GMT
Not After : Mar 3 03:01:02 2026 GMT
Subject: CN=9a1450a9d6626a6c0e01a2ecc0552f6b5ffa748d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:eb:b1:6f:24:00:c5:bb:69:b9:f5:5a:ba:d1:
17:10:4c:29:1a:c4:3a:65:aa:6a:61:b4:42:f7:f6:
ab:f3:62:45:6b:5e:ca:59:8b:fa:c4:4f:fd:fe:9f:
c0:7c:8e:42:0b:a9:5f:53:a1:3c:0f:24:91:5e:52:
b0:26:66:49:dc:bc:a6:f2:b9:b4:a0:4b:05:85:09:
f6:08:0d:43:1f:ae:a4:e6:2e:ca:b5:16:f8:71:63:
44:2b:6c:37:6c:0c:8b:28:71:bc:79:86:0a:f3:69:
eb:d9:f9:0d:a7:b9:9d:d6:13:37:86:1a:89:fe:75:
14:3a:ab:28:d0:78:ed:18:7a:45:ab:49:09:b8:9d:
bb:7a:af:8f:c7:c0:e9:4d:d4:21:7b:40:12:ed:2b:
49:17:e3:47:64:a5:8a:cb:d7:e3:b7:56:cb:4e:27:
75:87:eb:98:73:e7:33:da:08:e9:d7:3b:c7:41:ce:
03:9f:8a:8b:98:84:8e:2b:a3:01:ad:43:82:c2:87:
e0:72:7c:d6:ad:08:d8:63:d8:0c:76:f0:05:32:d6:
55:8b:86:8e:62:e4:2c:d7:de:62:ed:8c:9c:da:27:
3c:3f:44:4f:b0:ad:57:5e:36:8b:20:14:b2:bf:7f:
f4:d6:49:ce:94:87:fd:3e:c7:e5:b4:3f:9f:20:ed:
30:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:14:50:A9:D6:62:6A:6C:0E:01:A2:EC:C0:55:2F:6B:5F:FA:74:8D
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:c4:93:07:bb:4f:09:1a:91:69:d0:93:60:b9:13:3b:87:d5:
e0:66:88:4a:01:6a:09:db:b1:4d:48:9c:b5:47:12:9e:d0:b0:
bf:c4:72:23:7f:e4:25:91:ca:72:8e:38:98:59:97:9e:f3:19:
98:ad:aa:05:cf:5b:61:cc:8d:db:2c:58:44:a3:5a:8a:e7:83:
7b:fe:5c:02:75:5a:bc:1f:29:29:dc:74:39:09:41:8d:84:9b:
15:10:e0:72:a8:b3:1f:97:ae:c4:6c:5f:30:b8:c0:e5:a2:ba:
4a:5d:fe:f3:aa:de:1a:f6:7d:b9:7c:eb:72:7e:58:8a:58:a8:
97:2a:5e:07:7b:04:0f:b7:8d:c3:1b:47:24:98:e3:5b:1c:8b:
6d:44:be:66:ef:19:ab:89:30:64:dd:f6:65:88:d8:cd:7f:65:
f5:bd:b7:0a:cc:d5:2c:ec:d2:98:68:0c:18:d7:8c:b1:c0:f3:
60:8b:bd:11:8e:a2:10:af:bc:4f:7d:69:19:5f:32:8e:21:fa:
4d:38:5e:16:51:02:65:36:59:aa:18:cf:4b:b2:43:f7:45:ae:
b3:df:df:87:3b:27:b7:c6:ee:d3:74:c3:14:5d:66:80:db:48:
88:d5:a4:85:01:b4:e9:2d:b9:ac:14:65:ac:e4:66:ea:a0:81:
8c:e3:03:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:28:34 2026 by rpki-client