Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
File: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft (raw, json)
Hash identifier: 3u+7KMvP82ihxKV15c7AEPROSizbqAgCdU1qywyx/Ts=
Subject key identifier: 8A:A4:CB:44:F0:01:21:75:23:71:E3:44:20:EA:4C:9C:DF:57:85:EF
Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Certificate serial: 01A0C6D85C41215330A3C3C0FF13F37D0542
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
Manifest number: 0343
Signing time: Tue 22 Sep 2026 02:01:03 +0000
Manifest this update: Tue 22 Sep 2026 02:01:03 +0000
Manifest next update: Wed 23 Sep 2026 02:01:03 +0000
Files and hashes: 1: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl (hash: DWq1z5ibcv2V9S50gSKL1I0hQJUxwlo/8xgzfL6K4AI=)
2: ecHMOQxFC5KFCSuIYE00HmqpzWQ.roa (hash: gU+ReNKkd+2JNIkLsRTGjoAlGLm5qsdMFS7ADUk7csg=)
3: xrN_zPHRCcwLVDPLH1CVZ-5BeNM.roa (hash: I0/MQBNDpvY1DEGzG+/FSs7ePj5UnSEyZkAgCS5qVJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:5c:41:21:53:30:a3:c3:c0:ff:13:f3:7d:05:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Validity
Not Before: Sep 22 02:01:03 2026 GMT
Not After : Sep 23 02:01:03 2026 GMT
Subject: CN=8aa4cb44f00121752371e34420ea4c9cdf5785ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:0f:c7:8a:bf:c6:eb:86:e9:a3:5e:b8:b1:c7:
c8:00:db:df:30:a8:97:10:4a:77:da:48:5b:f3:90:
fb:b9:96:bc:20:62:f2:96:d8:31:0d:49:5a:ae:4d:
68:22:77:46:5a:82:db:f6:bc:6e:c1:8f:14:ef:df:
0b:95:a6:2c:cb:89:51:e5:94:9e:57:25:07:f6:4c:
b7:eb:e4:69:1c:d6:86:4e:5c:de:a7:a7:94:f0:c0:
fc:09:5b:a9:cf:bd:7a:a1:1e:16:29:d5:69:b8:54:
94:bd:5e:2e:b5:ac:dd:29:5a:a5:cb:70:8e:94:be:
85:ad:e6:9c:fd:39:3c:66:79:b2:ee:16:27:90:25:
e7:a7:df:e1:57:96:30:b6:e4:e4:f4:b9:46:1e:08:
b1:4c:96:2d:bb:df:ee:e3:ad:f3:71:8c:05:c7:93:
82:c0:a5:56:97:d8:1f:04:27:4d:0c:1a:1e:4a:f1:
db:12:eb:b1:44:f5:fa:33:fc:37:f5:63:77:62:19:
b5:ca:50:5c:96:63:a0:e5:2a:fe:b6:c6:99:ed:98:
0d:7f:fe:3b:34:e1:71:7d:a3:f6:a5:05:a5:81:81:
ce:d5:51:db:65:e6:fb:8d:26:ab:23:b7:3a:b7:33:
36:e5:d2:68:03:c7:d0:3c:b1:1c:2d:b7:de:c4:ac:
4b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A4:CB:44:F0:01:21:75:23:71:E3:44:20:EA:4C:9C:DF:57:85:EF
X509v3 Authority Key Identifier:
keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:57:19:94:fa:ce:54:b9:32:54:8d:8f:94:3c:1d:b7:9e:cb:
34:9a:64:26:e8:89:1d:02:bb:5d:17:f1:5e:25:22:d1:83:80:
c3:8f:0b:26:e2:cf:fa:7d:a6:c2:75:6a:2f:92:06:f7:4f:60:
4f:34:08:28:bd:cb:bd:cb:ff:81:2a:c4:b2:94:53:ed:4d:55:
ae:eb:6f:ae:e0:cd:60:2d:77:45:91:3f:4e:40:2b:1f:5f:58:
fc:f4:05:7c:d8:a4:b4:c4:3c:04:2f:18:02:dc:6d:8d:11:00:
bf:14:53:32:2f:df:48:2e:af:cb:44:48:b1:79:32:a7:fb:91:
b2:93:96:e4:38:08:45:24:da:2f:51:cb:d7:13:6b:b8:bc:fa:
04:6f:d0:1b:c0:07:5b:44:33:b7:5a:1a:54:54:87:63:c9:c7:
87:4c:71:14:7b:47:12:67:1a:22:36:53:68:09:0b:80:7d:04:
53:10:45:61:c9:2d:e1:ec:b1:f7:dd:14:e5:8d:d4:27:94:54:
89:27:3d:aa:98:32:18:29:d2:53:69:84:18:ce:62:23:f5:d5:
7f:48:eb:3e:7d:66:a3:c1:1b:83:3f:2d:eb:fc:7b:9d:1f:7f:
ad:8d:08:48:77:68:b8:36:1e:27:d9:c3:7f:94:e0:6c:0b:a8:
1b:54:bd:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDG2FxBIVMwo8PA/xPzfQVCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyMmY0ZGVhN2RmMzkyN2Q0MDExYjMwODdkNGQwNjdm
OWQxOWEwHhcNMjYwOTIyMDIwMTAzWhcNMjYwOTIzMDIwMTAzWjAzMTEwLwYDVQQD
Eyg4YWE0Y2I0NGYwMDEyMTc1MjM3MWUzNDQyMGVhNGM5Y2RmNTc4NWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw/Hir/G64bpo164scfIANvfMKiX
EEp32khb85D7uZa8IGLyltgxDUlark1oIndGWoLb9rxuwY8U798LlaYsy4lR5ZSe
VyUH9ky36+RpHNaGTlzep6eU8MD8CVupz716oR4WKdVpuFSUvV4utazdKVqly3CO
lL6Freac/Tk8Znmy7hYnkCXnp9/hV5YwtuTk9LlGHgixTJYtu9/u463zcYwFx5OC
wKVWl9gfBCdNDBoeSvHbEuuxRPX6M/w39WN3Yhm1ylBclmOg5Sr+tsaZ7ZgNf/47
NOFxfaP2pQWlgYHO1VHbZeb7jSarI7c6tzM25dJoA8fQPLEcLbfexKxL5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIqky0TwASF1I3HjRCDqTJzfV4XvMB8GA1UdIwQY
MBaAFFBRIvTep985J9QBGzCH1NBn+dGaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQt
ZDNmMjRhZTdiODdiLzEvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC83NGE4ZjQtMGFlYi00NGIzLThkZDQtZDNmMjRhZTdiODdi
LzEvVUZFaTlONm4zemtuMUFFYk1JZlUwR2Y1MFpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVVcZlPrO
VLkyVI2PlDwdt57LNJpkJuiJHQK7XRfxXiUi0YOAw48LJuLP+n2mwnVqL5IG909g
TzQIKL3Lvcv/gSrEspRT7U1VrutvruDNYC13RZE/TkArH19Y/PQFfNiktMQ8BC8Y
AtxtjREAvxRTMi/fSC6vy0RIsXkyp/uRspOW5DgIRSTaL1HL1xNruLz6BG/QG8AH
W0Qzt1oaVFSHY8nHh0xxFHtHEmcaIjZTaAkLgH0EUxBFYckt4eyx990U5Y3UJ5RU
iSc9qpgyGCnSU2mEGM5iI/XVf0jrPn1mo8Ebgz8t6/x7nR9/rY0ISHdouDYeJ9nD
f5TgbAuoG1S9gQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:59:00 2026 by rpki-client