Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: S39fZ06htTG/WbnhVMNX4+Pakz9YAO3KhyfWieEndvs=
Subject key identifier: A5:EB:BD:3D:45:07:4D:F5:86:59:E8:B1:4C:CD:16:C5:11:65:1A:B1
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 01A0D682F6413A7D95B2557C8C21AD7D75D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 17E8
Signing time: Fri 25 Sep 2026 03:01:41 +0000
Manifest this update: Fri 25 Sep 2026 03:01:41 +0000
Manifest next update: Sat 26 Sep 2026 03:01:41 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: 2x8tIHSCuSDJxKBiJCIQ6k8p5jBej/YHUf1moMxcgFk=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:82:f6:41:3a:7d:95:b2:55:7c:8c:21:ad:7d:75:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Sep 25 03:01:41 2026 GMT
Not After : Sep 26 03:01:41 2026 GMT
Subject: CN=a5ebbd3d45074df58659e8b14ccd16c511651ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:bf:5b:35:41:56:db:14:a2:b6:f2:da:94:11:
6f:04:03:95:38:6b:2d:50:88:84:1b:6e:5b:26:1e:
51:b6:99:6e:ad:9a:15:62:d5:2a:dd:35:d0:ae:46:
87:90:9c:d9:3c:22:06:a0:27:b6:4b:16:ca:2f:26:
10:96:a8:65:7a:ae:5c:46:9d:a9:01:03:ad:47:8c:
17:a2:ce:ae:f1:9b:f7:a9:c0:ce:61:ef:33:bf:19:
9a:7e:4c:82:47:a8:5e:a7:96:55:c1:da:59:1f:a9:
af:3c:1f:1d:99:2a:1f:62:d9:02:57:02:54:75:84:
53:13:17:26:57:24:7a:07:23:cb:58:fb:e3:69:0d:
05:66:3c:43:7f:c5:36:de:37:ba:0b:ae:3e:c2:30:
48:c4:b1:10:6a:6d:c3:95:79:c1:91:80:fc:5f:ca:
26:35:b6:36:b7:78:7f:f9:b4:5a:bf:cf:b1:b1:1b:
4a:d0:e8:47:90:c1:5b:fd:93:2c:5a:fb:4e:7d:bf:
c4:d2:0c:91:f7:a2:9e:b8:e4:9e:0a:ab:77:dd:1d:
63:9c:ad:ba:b4:d9:d2:e3:89:35:0b:78:5e:1f:13:
9b:f0:bc:b2:44:a7:c9:fc:04:aa:06:1a:61:60:e2:
f5:a3:c0:a0:17:a5:d2:5e:fa:96:07:81:cf:fe:7c:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:EB:BD:3D:45:07:4D:F5:86:59:E8:B1:4C:CD:16:C5:11:65:1A:B1
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:2f:46:60:02:35:9f:9e:bf:c2:98:47:59:89:b8:10:6e:31:
2b:f9:c7:6a:98:e8:37:63:96:e4:dd:6f:e4:b6:7e:a6:b4:fe:
ab:93:15:6c:a2:9b:33:04:c6:33:c6:26:54:60:b9:83:57:09:
e6:e5:ac:7b:98:1b:fa:ff:33:60:68:c7:b4:50:c7:57:ee:d0:
b7:81:c6:f4:f6:3f:ab:56:c7:fb:a2:70:fb:8e:e9:9b:be:bc:
ec:9f:ed:85:f9:94:5b:de:1e:bb:6f:22:06:89:e3:0a:56:1a:
70:81:5d:a2:ad:2d:db:76:69:d3:42:41:80:b0:e6:da:90:8f:
99:e7:12:0a:7c:ae:c1:58:5b:0e:1e:a1:de:e7:e2:b8:c3:e8:
5b:89:48:2b:31:c5:be:4d:49:df:01:5b:28:74:2c:98:b6:f5:
71:ce:61:20:e3:d8:5b:44:41:fe:13:51:1e:04:55:58:a9:7e:
f2:b8:9d:e1:bc:8d:0d:02:07:f4:80:c9:7d:66:46:1b:fc:4f:
e7:16:c8:a6:6d:fe:ae:a1:af:8b:a7:01:48:da:fd:05:5e:ec:
9a:58:ac:76:58:2b:67:4e:bc:8f:ab:97:33:44:a8:78:88:47:
a1:86:92:ff:a3:92:b9:60:bf:11:9a:62:68:80:a0:bc:04:e3:
6c:35:fa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:12:27 2026 by rpki-client