Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: I0Fm3tnv0R/C9w7seLMO8DqLxlipNJM0Ee74U07bkk8=
Subject key identifier: 76:8C:AC:4B:A1:CF:CF:50:87:0D:52:35:D5:F2:9A:81:65:E7:AE:CA
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 01A0C44466BF9E1AA15FDE57C10B3D290044
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 1271
Signing time: Mon 21 Sep 2026 14:00:11 +0000
Manifest this update: Mon 21 Sep 2026 14:00:11 +0000
Manifest next update: Tue 22 Sep 2026 14:00:11 +0000
Files and hashes: 1: D-37R8pTtaYyRSvFF1cIYOk-kgs.roa (hash: VVl+RrZKwp2SWM55JhoijG/n/TZ6UrTZnaeJgiQh+QM=)
2: gkon8URGKawWYsPCktsOv4GJyC0.roa (hash: wGsl+Lv3yiWPoxNTkh9Ez43KMkCIutQ7CbBGSolZmCM=)
3: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (hash: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: pcMCpeV0io00c39ezSdOO0pc02cNcpSchvfSxCUuXK8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:44:66:bf:9e:1a:a1:5f:de:57:c1:0b:3d:29:00:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Sep 21 14:00:11 2026 GMT
Not After : Sep 22 14:00:11 2026 GMT
Subject: CN=768cac4ba1cfcf50870d5235d5f29a8165e7aeca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:0f:76:3b:28:24:cb:8e:5e:96:fc:c9:38:b0:
91:3f:4b:ac:d0:62:7a:68:67:cf:88:8f:fc:3e:f3:
b6:65:a4:49:27:b8:db:26:ab:f1:31:16:b8:5e:42:
08:06:e2:17:f0:87:42:7d:81:60:16:7d:5d:ca:d8:
38:5d:9b:5a:97:e7:20:e6:6f:2d:66:fc:8b:98:08:
ed:cd:89:3d:73:38:d9:7b:59:24:8a:bc:61:8a:88:
ce:38:59:b2:32:38:eb:e2:dd:ac:1e:4d:a0:43:af:
59:c1:d3:49:39:1b:6b:fe:6c:a8:0c:b9:f5:da:1c:
18:3f:6a:80:89:f5:bc:2e:fa:31:bc:60:75:7d:4a:
9d:dc:a8:ea:87:30:ea:36:eb:d4:87:56:55:fb:31:
53:7e:49:9c:e0:86:c3:ab:13:42:5a:82:40:46:4e:
c2:1c:7d:44:f9:59:6c:01:95:04:6a:3f:25:26:e6:
d6:ec:7a:58:bb:8d:1c:17:f9:22:b2:21:ce:0e:96:
54:b1:62:26:4e:3c:ff:b5:7f:d9:9d:46:08:10:12:
55:3c:43:2b:d0:e6:44:d0:ad:26:39:b7:af:0a:7c:
ed:a5:5f:2b:7c:ec:95:84:ba:c4:e3:7c:e3:42:d1:
05:30:7a:79:85:b2:bf:6b:c2:2b:cb:6d:4d:25:da:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:8C:AC:4B:A1:CF:CF:50:87:0D:52:35:D5:F2:9A:81:65:E7:AE:CA
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:49:7c:10:71:23:0f:28:20:53:99:e4:c9:01:6f:a4:32:fc:
f1:79:c2:c4:91:b7:70:5b:bc:eb:62:48:d7:f6:d3:8a:01:bf:
09:aa:2d:58:8e:bd:e3:88:1f:90:9d:ed:cf:21:8c:77:0c:c7:
5e:d0:88:8d:44:dd:aa:0c:dd:df:21:12:74:68:e8:db:29:5a:
6e:e6:a1:1e:1c:0f:dc:54:ea:06:fa:88:78:b0:5c:dd:95:73:
43:15:b7:20:96:e8:d9:72:c7:26:af:e7:4d:dd:ea:b4:e3:72:
ac:df:9b:5a:08:e4:f5:07:bc:31:da:9f:51:0a:47:0e:41:7c:
17:0a:06:c9:97:65:fe:3d:34:d0:05:af:58:e6:58:e6:04:44:
76:6f:14:cc:34:6f:f2:ce:44:f8:40:20:8d:90:22:98:64:09:
7c:7c:4c:f8:db:ad:a6:3b:fd:90:47:0e:49:6b:40:6e:2f:69:
8f:0e:62:2f:44:cf:58:33:3d:5f:0a:78:1e:f1:a4:f3:7a:0c:
44:9c:77:38:64:cd:c2:6b:fc:e3:2d:21:70:fd:8c:df:1d:48:
b7:c2:d4:21:e7:6d:cf:89:cf:d9:cd:1e:1a:b7:ff:58:2b:9a:
ef:e5:6d:49:fa:bc:f4:9e:39:44:4f:fa:d3:53:b5:e1:52:6b:
18:49:6a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 23:57:01 2026 by rpki-client