Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
File: UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft (raw, json)
Hash identifier: phP8OQe5EZS1n0jbO8sZbpb1XZVnbqLLxyheI0CQniU=
Subject key identifier: A8:48:21:DF:8E:1C:D6:76:70:62:5A:FB:34:AA:C9:24:A1:D0:72:21
Authority key identifier: 50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
Certificate issuer: /CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Certificate serial: 019CAAC6D695F645A121F37BFAE55B6CE6E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
Manifest number: 0792
Signing time: Sun 01 Mar 2026 19:01:23 +0000
Manifest this update: Sun 01 Mar 2026 19:01:23 +0000
Manifest next update: Mon 02 Mar 2026 19:01:23 +0000
Files and hashes: 1: NRjE2ub-qyO1bTuX03Zvfc6I9B4.roa (hash: T1iZTA7aq3lUr9C6VWAbrTX5NRDe5+H29lpTIjZMGkc=)
2: UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl (hash: K4uj7LqNMtLeAHqdJKvbUx3CYzxMLfz+PrimWnMQdvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:d6:95:f6:45:a1:21:f3:7b:fa:e5:5b:6c:e6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5053c7da9c8fffea5ced97a7990200d4beee4177
Validity
Not Before: Mar 1 19:01:23 2026 GMT
Not After : Mar 2 19:01:23 2026 GMT
Subject: CN=a84821df8e1cd67670625afb34aac924a1d07221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:1a:4d:d6:ee:48:50:17:87:44:60:25:cc:f2:
a8:bc:40:67:ad:d8:83:c8:55:69:0b:8c:9a:c9:32:
88:c8:c8:1f:f3:07:04:15:69:bf:59:e3:ea:36:c8:
34:03:2d:c7:84:83:51:d6:c6:87:6e:73:ce:e8:b4:
0c:53:a6:91:b4:5e:2a:2b:d0:96:9e:eb:a0:03:59:
85:d4:24:54:9d:c3:da:05:ef:9f:57:38:56:6f:3e:
b7:9c:81:cf:52:f8:40:e5:f8:24:5a:6d:85:51:1c:
33:24:9d:e9:4b:2e:db:f6:ff:11:68:9e:2d:e4:de:
f1:12:87:5d:cb:94:be:cb:a8:29:b9:eb:3d:fb:f0:
05:94:45:e8:66:28:f9:54:40:1f:cd:57:b0:e0:bc:
81:b1:e6:02:0f:aa:07:d4:f1:45:5e:9f:85:21:7e:
f6:b3:87:a1:c7:a4:b5:93:94:f2:70:66:74:d0:da:
88:87:fa:7c:09:99:74:b7:44:c6:19:5a:52:cd:b3:
08:c6:34:c1:18:e6:77:0a:71:5d:4a:b7:1c:23:3f:
63:c9:71:32:5d:e7:cc:d8:5a:83:44:01:7f:83:a5:
ca:41:71:df:8b:bc:a7:e3:af:68:bc:84:89:5e:22:
c0:eb:3a:cd:6b:00:7c:dd:29:51:3b:d3:8d:e4:6e:
c7:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:48:21:DF:8E:1C:D6:76:70:62:5A:FB:34:AA:C9:24:A1:D0:72:21
X509v3 Authority Key Identifier:
keyid:50:53:C7:DA:9C:8F:FF:EA:5C:ED:97:A7:99:02:00:D4:BE:EE:41:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFPH2pyP_-pc7ZenmQIA1L7uQXc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/0f8ce7-ca96-435b-8574-ac620da2f87e/1/UFPH2pyP_-pc7ZenmQIA1L7uQXc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:7f:95:32:26:7f:9b:27:d7:c6:8c:86:cb:56:07:b3:9a:33:
f6:4d:b5:56:aa:5f:23:62:c6:93:76:37:46:f9:a5:ad:0e:7f:
6b:6f:19:0d:54:57:83:94:c0:aa:dd:47:94:c1:d5:60:f1:c1:
3b:b7:de:b9:99:be:08:a3:a1:5b:42:ef:9a:f1:e9:73:8a:a8:
bf:d9:14:49:e0:39:63:55:dc:ac:0c:44:d7:3e:7c:4e:49:a5:
ac:a0:57:7c:90:63:d1:4b:aa:d4:68:43:44:f2:ef:23:96:a3:
26:04:b7:58:f8:35:90:e4:bc:8b:45:6a:82:30:f9:7c:d3:1f:
02:21:2a:e9:f0:d7:11:1d:a8:ba:fc:29:5c:18:8c:a9:31:94:
49:c6:97:ac:cc:3b:2a:50:85:61:dd:8b:82:c6:14:4b:4d:62:
0f:2c:02:2f:39:87:52:95:15:8a:9a:27:6a:cc:6b:9f:b0:0e:
c6:da:c0:13:1c:2b:c1:2e:62:ff:00:50:a5:8a:7d:f9:58:73:
0c:8f:f7:f5:29:e6:96:97:da:ec:b3:ea:21:85:ba:3b:58:f0:
7d:e0:1a:6a:18:ce:da:0e:e4:b7:6a:fb:1a:05:28:f2:42:5b:
66:7c:ea:68:c9:37:65:20:e1:32:16:d6:79:7e:ab:ab:5f:45:
91:c4:6b:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:40:38 2026 by rpki-client