Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: 0KjKQ15BePIlb/rzLYgtw8nC72TLKlFZYtSYu3LnGDk=
Subject key identifier: DF:C1:D9:03:1A:7A:BA:2E:E7:6B:8E:DE:C1:1E:30:66:C6:7C:6F:7B
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 019CABA24DAC3002636ADE6FFA00FA8228D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 08D1
Signing time: Sun 01 Mar 2026 23:01:06 +0000
Manifest this update: Sun 01 Mar 2026 23:01:06 +0000
Manifest next update: Mon 02 Mar 2026 23:01:06 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: fq+Os/YSkm1g6+M1cq5yI6/Jf+Ng2E2f3VEPN6kTXqw=)
2: n29c-eqwdShZtcEOhZv3Ign1VGo.roa (hash: uxh/IP+egHWNQsX3vB68RQ/0/wzosXKCxI7jga5PL14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4d:ac:30:02:63:6a:de:6f:fa:00:fa:82:28:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Mar 1 23:01:06 2026 GMT
Not After : Mar 2 23:01:06 2026 GMT
Subject: CN=dfc1d9031a7aba2ee76b8edec11e3066c67c6f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9b:43:c4:76:44:a6:e1:b3:a4:2e:1a:99:8d:
30:da:05:e1:ba:25:84:45:4e:b3:c9:69:3b:11:74:
83:56:00:1c:a9:f6:3a:ac:3f:a0:8c:c0:26:0c:a2:
f6:a9:cc:71:d4:56:d8:ba:9d:1a:a5:62:67:44:b3:
67:7d:1e:3a:a8:e4:97:c2:21:59:59:64:d5:bb:0a:
55:f3:8b:93:68:ec:c0:a5:04:ba:e4:04:1f:91:ce:
45:e6:43:fe:cf:7a:63:80:69:ba:c8:7a:c7:96:ae:
47:9c:09:cb:63:e1:45:2b:0f:73:62:f2:16:67:76:
da:a8:4d:ac:67:56:b2:30:4b:88:f5:43:91:44:3d:
0e:b2:ae:52:cf:10:a7:b9:47:59:86:7d:b6:26:16:
d3:9b:a9:e3:d4:37:64:7b:1e:f0:17:aa:13:a4:e2:
f9:20:a9:f4:8f:23:f7:4b:75:50:b7:b5:3e:6a:2a:
d2:ee:a0:70:c8:5f:c9:38:d7:cd:da:b2:e1:a3:4f:
b9:d6:62:cd:96:50:db:a0:51:80:cf:d8:66:3c:30:
4e:45:23:c6:32:4f:25:e1:8b:78:ab:12:2c:d1:51:
3f:84:47:60:d2:0e:93:73:89:67:ed:2c:cb:a6:83:
d1:81:66:83:67:52:d0:28:8d:7a:c9:4f:10:e5:9c:
33:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:C1:D9:03:1A:7A:BA:2E:E7:6B:8E:DE:C1:1E:30:66:C6:7C:6F:7B
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:ee:32:3d:3f:ba:fb:98:c3:ad:fd:3a:82:58:2a:52:73:
0d:ee:41:a6:79:ab:d0:30:bc:a1:20:0e:56:a9:d1:87:ab:b6:
a9:e2:31:73:21:47:68:1c:26:d2:fc:76:ac:55:49:37:36:bd:
96:bc:d9:31:f0:d9:75:6c:a0:fe:f8:77:c1:4e:54:8b:bf:9b:
9c:5a:ab:74:d7:d3:58:ae:e8:11:78:82:db:2d:73:cc:c8:38:
3d:d3:49:ef:83:b5:40:77:bd:ff:56:d0:58:01:bf:0f:5c:35:
a6:c3:59:63:a1:f9:d8:76:89:f0:fb:a7:7b:f9:c6:82:1a:45:
cf:0e:0e:8b:8e:20:bc:08:d7:40:cd:23:b3:e5:68:8f:e8:c2:
24:52:3b:84:9b:48:36:a4:20:24:2f:e2:2c:cc:b0:10:4d:88:
08:12:69:78:7f:75:cb:42:4f:13:0f:ee:54:b2:32:8c:5b:78:
b0:a1:81:87:f6:ea:1a:58:9a:96:3b:0b:1f:a1:21:e1:0e:f2:
fb:35:c8:1e:f6:02:40:d3:9d:56:93:ff:05:89:25:36:77:2b:
4b:81:69:8b:72:f9:17:a3:18:73:16:32:1f:2a:ff:e2:88:c0:
7a:32:23:d3:11:67:8e:7b:c7:fb:7a:21:60:04:af:69:a2:cb:
f3:cd:95:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:03:46 2026 by rpki-client