Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: HulZvUnojm+DnRHkVr6+28k7TPqKwnXv5QjV6hC3Dn0=
Subject key identifier: 83:E4:48:60:6A:C0:86:35:9C:26:F5:BD:CC:78:0F:A9:71:00:BF:2E
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 01A0E13D7E12D2E37B078E5A0CBEF6270B14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 0AFF
Signing time: Sun 27 Sep 2026 05:01:38 +0000
Manifest this update: Sun 27 Sep 2026 05:01:38 +0000
Manifest next update: Mon 28 Sep 2026 05:01:38 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: +e/9JjEcoRR0ttlzZRe8Tgeas1GBKhxmk1KUdOVYvro=)
2: n29c-eqwdShZtcEOhZv3Ign1VGo.roa (hash: uxh/IP+egHWNQsX3vB68RQ/0/wzosXKCxI7jga5PL14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e1:3d:7e:12:d2:e3:7b:07:8e:5a:0c:be:f6:27:0b:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Sep 27 05:01:38 2026 GMT
Not After : Sep 28 05:01:38 2026 GMT
Subject: CN=83e448606ac086359c26f5bdcc780fa97100bf2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:5e:02:ae:ce:28:00:37:f6:13:80:f3:46:73:
a7:ed:65:3d:87:0e:a5:46:f0:a5:59:f8:37:47:86:
2f:b4:78:4d:f9:c1:62:99:3d:39:f5:54:4b:d9:3c:
12:b6:f5:5a:5e:89:1c:51:ac:63:87:ef:f2:74:05:
b5:cd:42:f7:e2:89:a9:33:1d:6c:b9:a2:d8:aa:00:
41:c9:12:4f:de:d5:01:5f:54:aa:10:02:e0:c2:50:
75:6b:44:23:6a:58:cd:54:cb:4a:d9:3e:4d:5c:2d:
92:1e:0d:72:48:a6:18:11:ed:7f:de:3a:e5:c7:08:
b0:e7:c5:8c:9b:57:f7:9b:9a:06:3a:0d:16:44:e5:
81:d8:f6:6b:c6:1a:ee:3f:37:ee:6e:6c:2b:35:c9:
50:7d:0b:e6:f3:5a:6c:58:05:8f:e8:fc:83:c4:ab:
69:59:94:07:0b:a1:a9:be:f8:d9:35:a4:eb:0a:38:
4f:36:2f:f9:ee:37:fd:ef:f6:44:41:71:a2:b5:82:
52:e2:a4:64:65:f5:4a:b1:b0:c7:b6:a4:86:a6:f0:
f6:ac:b0:24:1a:19:08:57:3a:fe:47:50:02:66:ba:
e5:5f:b2:7e:20:6a:ab:db:3c:03:57:2b:8e:35:c5:
47:45:22:86:f9:a1:39:a0:4a:51:7e:ac:02:4e:c5:
c3:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:E4:48:60:6A:C0:86:35:9C:26:F5:BD:CC:78:0F:A9:71:00:BF:2E
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e6:99:8f:38:63:bc:1d:8c:8f:c6:60:91:fd:5f:b0:a9:05:
bd:80:0d:f5:7a:01:fc:a0:90:7d:8d:45:d1:e8:17:fa:a4:2d:
0f:7c:f6:33:95:ac:7e:0e:37:42:e1:04:8c:aa:c6:36:f5:3b:
22:14:10:dc:da:9a:af:5e:b9:19:3c:7b:fd:e5:36:4a:2d:fb:
a2:0b:db:c4:ac:9e:55:2f:71:41:a7:49:d0:9c:16:31:cf:84:
7f:dc:dd:8f:e3:73:52:60:ac:02:e9:e3:6e:dc:1b:3f:ca:e6:
0a:44:2d:16:a8:02:f2:c6:8d:5f:64:3b:f7:7b:75:36:40:b9:
d9:52:e4:aa:a8:97:29:44:8a:10:d8:7e:22:f9:5f:9b:91:2e:
89:5d:ff:84:7c:85:9c:67:dd:eb:29:80:65:25:a2:56:db:db:
c5:14:5d:1e:e1:05:6c:16:c8:ce:e4:b2:9b:7d:51:9b:d2:17:
5c:c7:0d:57:a8:15:91:66:fa:63:59:9c:a5:6e:57:86:10:e3:
cb:1b:18:25:1e:98:97:10:f6:23:95:5a:cd:88:eb:1f:21:23:
f7:d8:7a:30:8d:3b:82:85:d4:95:d9:ef:58:a5:85:3c:fd:91:
f0:8b:47:5a:91:b9:c3:30:3c:4b:08:5d:92:92:4d:83:cc:a2:
27:f0:5e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:45:47 2026 by rpki-client