Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
File: ujfIenFHccKUkkjf-wehVd_jIEI.mft (raw, json)
Hash identifier: FtEsIzzBc4m1S6ZrvZj/P4T3kUP8UepU09PAcXjU7zI=
Subject key identifier: CC:3E:18:69:17:DC:86:DF:9D:DA:D3:CF:2E:A8:52:8D:FA:39:69:55
Authority key identifier: BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
Certificate issuer: /CN=ba37c87a714771c2949248dffb07a155dfe32042
Certificate serial: 01A0C9A259B9222CB588A4E813C64389DD26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
Manifest number: A1
Signing time: Tue 22 Sep 2026 15:00:55 +0000
Manifest this update: Tue 22 Sep 2026 15:00:55 +0000
Manifest next update: Wed 23 Sep 2026 15:00:55 +0000
Files and hashes: 1: TBVe841E8hTpt49jYkM2WIOXK_k.roa (hash: NOuhNXk/OufxdL7HRlmsabi419cAeXvXPi+Yj06V8K4=)
2: ujfIenFHccKUkkjf-wehVd_jIEI.crl (hash: zhwsTAz89wsDcqyUi4iu5TGcqgfSr+TwZx7biDayUaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:a2:59:b9:22:2c:b5:88:a4:e8:13:c6:43:89:dd:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba37c87a714771c2949248dffb07a155dfe32042
Validity
Not Before: Sep 22 15:00:55 2026 GMT
Not After : Sep 23 15:00:55 2026 GMT
Subject: CN=cc3e186917dc86df9ddad3cf2ea8528dfa396955
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:14:92:d9:a9:f3:af:89:76:25:df:3e:fb:6d:
26:a5:9a:59:75:85:f5:c5:12:01:15:20:9a:32:5a:
22:a8:6b:ab:cb:5b:7e:01:87:5c:dd:cc:93:09:2a:
e8:f5:76:c1:d6:5e:9e:1d:84:29:4a:df:7c:b7:dc:
a3:08:db:b8:b7:5c:d5:42:a6:ef:a0:0a:50:f2:f3:
ac:24:35:62:5f:c4:65:e0:8b:9b:4d:ac:87:25:c2:
67:c0:42:26:e4:44:43:3a:4d:45:38:1f:2f:0b:0a:
7e:14:a9:30:61:df:7c:16:10:71:02:35:24:9d:82:
6e:be:82:b0:f9:3a:c2:b7:d5:9d:c1:fe:0e:d5:d8:
e5:e5:dd:8b:7c:84:f5:12:b5:18:94:94:e2:bb:87:
e8:4d:63:a4:c4:87:5b:e2:8f:40:8d:c3:92:04:28:
03:e8:7e:0d:07:0e:1f:e3:88:c0:1d:51:12:3e:a7:
af:1d:55:3e:5d:b6:10:bb:96:2b:d7:d4:76:45:c1:
48:84:16:24:ea:a9:f7:64:bc:be:8a:4c:27:f0:d4:
cf:14:5b:72:b1:74:0e:11:27:8c:8e:9e:7e:d2:a9:
5d:0e:ec:0e:51:11:90:e2:d7:12:e3:2f:27:ef:d3:
c3:2d:ce:b3:e0:11:2e:ef:0d:76:65:54:b5:68:6c:
6b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3E:18:69:17:DC:86:DF:9D:DA:D3:CF:2E:A8:52:8D:FA:39:69:55
X509v3 Authority Key Identifier:
keyid:BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:06:81:14:f7:a3:86:e6:f9:94:f0:5c:d7:89:c4:4e:4c:38:
30:8c:4d:c0:85:5c:fb:a7:0e:94:0d:5d:71:a2:f8:47:07:2b:
0d:64:76:f7:7d:a2:49:ac:c4:c9:3e:1d:52:0e:3e:07:08:94:
8e:ed:92:fe:f4:ab:cf:ce:8c:32:74:57:41:22:37:12:e7:43:
e4:6a:07:6e:ca:d8:3c:15:19:c4:b0:e0:c4:08:d4:7e:88:6f:
e6:a9:cc:8d:cc:54:74:fe:6d:fc:0b:52:63:fb:80:b3:6a:12:
a6:02:83:69:78:20:1a:10:31:74:20:4f:9b:c2:64:11:c0:c3:
81:7b:6d:cc:a5:fa:8a:45:27:f4:f1:5b:cc:99:31:5b:bc:9b:
b2:ec:9a:83:23:39:9b:55:62:95:b1:d2:e7:77:c8:35:73:68:
38:4b:7a:7e:8c:4c:c1:10:cb:5f:fc:68:12:a2:7c:94:f5:e7:
35:20:77:f5:fe:f6:74:f3:37:90:90:c7:3b:99:61:ed:de:3d:
79:e1:fb:54:1d:67:6a:e2:81:58:a5:62:df:b1:e1:7f:7f:41:
75:61:45:e7:85:5f:35:c7:1d:eb:b8:85:e2:fc:9f:08:96:70:
99:32:b4:cc:d3:ef:14:1a:9c:ab:ff:56:ae:1a:35:6d:62:e1:
0d:23:f2:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 20:19:13 2026 by rpki-client