Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: xjXfDTvfGYu2YhK4dobOVWIKyRNJ9fM+ElxjXLDZWDc=
Subject key identifier: CE:FC:5D:3B:08:60:F5:0A:75:BE:B4:D6:E4:EA:83:15:81:A0:07:58
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 01A1BFC1959DF526079A5B12CA1554229B34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 0897
Signing time: Mon 09 Nov 2026 10:01:37 +0000
Manifest this update: Mon 09 Nov 2026 10:01:37 +0000
Manifest next update: Tue 10 Nov 2026 10:01:37 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: j0a3a0Rt03wVIq5Zgsa/apGyFEUlO91K35m+rmJpTeY=)
2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:bf:c1:95:9d:f5:26:07:9a:5b:12:ca:15:54:22:9b:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Nov 9 10:01:37 2026 GMT
Not After : Nov 10 10:01:37 2026 GMT
Subject: CN=cefc5d3b0860f50a75beb4d6e4ea831581a00758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:73:04:f9:4c:9e:44:d5:67:eb:21:d7:7f:a2:
b6:01:3e:76:7b:24:6c:b9:ab:82:6c:ed:4b:88:9e:
a8:1f:76:d4:b1:d2:5f:b9:4b:ad:9b:fd:be:18:2c:
9e:62:f1:ec:03:ab:d9:41:b6:5c:f8:56:2c:1b:b4:
92:c9:39:39:0c:68:32:9e:48:43:f6:27:24:de:6a:
62:96:eb:ac:fa:31:aa:0e:1c:4f:1b:b4:6e:b1:50:
d2:30:83:18:07:d0:ad:b3:c5:05:1d:5a:e6:a6:5d:
86:69:06:db:53:45:8b:8a:5a:c1:3a:3a:f8:98:bf:
3d:71:21:9c:4c:12:bb:20:81:ea:ce:b3:20:20:e9:
bc:1b:c0:a5:f0:c8:77:72:05:7c:48:9c:03:7e:f5:
1a:03:99:55:a2:63:08:63:b7:99:cd:ea:e3:93:ff:
50:37:a1:58:63:f3:de:e4:c5:a1:1c:c7:4e:19:80:
ff:d0:1a:05:2d:14:31:31:ab:f5:77:d8:0f:68:07:
41:1d:36:52:33:61:5a:58:e9:1e:be:f8:14:98:8a:
ed:eb:22:85:c1:06:d7:5c:5b:26:e9:f5:97:83:31:
83:59:fe:a3:e3:99:df:d2:0e:5a:9a:9c:1d:c6:a1:
ef:ae:9b:c0:83:e0:88:a5:4f:8c:f9:70:2f:64:c8:
77:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:FC:5D:3B:08:60:F5:0A:75:BE:B4:D6:E4:EA:83:15:81:A0:07:58
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:fd:57:dd:9c:53:7f:71:cb:d9:f5:7b:9d:94:cd:87:b1:75:
9b:f1:01:b1:0e:b1:09:3a:7d:0f:54:ad:3c:09:1c:c2:6b:c6:
37:93:9d:9e:02:3b:47:85:b1:17:fc:9f:de:a2:99:87:9d:97:
f2:84:a8:7b:39:3a:33:1f:d1:e9:50:e2:ee:71:e7:9a:bb:b4:
eb:2b:3a:64:29:55:8d:60:76:a1:8d:68:37:22:ff:5e:4c:72:
db:57:ab:cb:8f:d0:e4:83:59:39:7e:97:96:86:de:eb:21:28:
c0:0e:ec:75:a3:9d:9e:d7:b2:7a:d3:44:f6:0d:a7:7a:30:79:
c4:7e:05:be:a8:3b:87:75:83:a6:28:3a:63:4f:c0:37:02:32:
d5:54:bb:4f:95:c4:7e:eb:69:3a:c6:06:46:7a:e5:18:4e:3b:
9c:c1:2f:21:8f:d0:a2:84:1b:72:86:7d:c0:b1:c2:27:73:41:
f0:fa:f2:fe:5b:be:3e:8c:bb:28:6b:d1:bc:fe:e6:12:21:ed:
9e:38:6e:8f:63:62:2e:26:ae:c4:4e:34:cb:96:7d:d4:d8:da:
c7:39:bc:0c:23:67:3e:0b:6f:74:03:95:2d:05:b6:98:27:12:
47:d2:fc:af:a6:fe:f7:8c:1d:98:fc:f5:8e:a1:6e:e4:80:f4:
a2:74:27:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaG/wZWd9SYHmlsSyhVUIps0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDdjZjlmMjc3Njc0NzcxMjBiMWQzYjI2Y2M1N2E2MTA5
OWE3MjQwHhcNMjYxMTA5MTAwMTM3WhcNMjYxMTEwMTAwMTM3WjAzMTEwLwYDVQQD
EyhjZWZjNWQzYjA4NjBmNTBhNzViZWI0ZDZlNGVhODMxNTgxYTAwNzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23ME+UyeRNVn6yHXf6K2AT52eyRs
uauCbO1LiJ6oH3bUsdJfuUutm/2+GCyeYvHsA6vZQbZc+FYsG7SSyTk5DGgynkhD
9ick3mpiluus+jGqDhxPG7RusVDSMIMYB9Cts8UFHVrmpl2GaQbbU0WLilrBOjr4
mL89cSGcTBK7IIHqzrMgIOm8G8Cl8Mh3cgV8SJwDfvUaA5lVomMIY7eZzerjk/9Q
N6FYY/Pe5MWhHMdOGYD/0BoFLRQxMav1d9gPaAdBHTZSM2FaWOkevvgUmIrt6yKF
wQbXXFsm6fWXgzGDWf6j45nf0g5ampwdxqHvrpvAg+CIpU+M+XAvZMh36wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM78XTsIYPUKdb601uTqgxWBoAdYMB8GA1UdIwQY
MBaAFNVHz58ndnR3EgsdOybMV6YQmackMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2Ut
NmY0ZGUwMjBhYWU2LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2UtNmY0ZGUwMjBhYWU2
LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdP1X3ZxT
f3HL2fV7nZTNh7F1m/EBsQ6xCTp9D1StPAkcwmvGN5OdngI7R4WxF/yf3qKZh52X
8oSoezk6Mx/R6VDi7nHnmru06ys6ZClVjWB2oY1oNyL/Xkxy21ery4/Q5INZOX6X
lobe6yEowA7sdaOdnteyetNE9g2nejB5xH4Fvqg7h3WDpig6Y0/ANwIy1VS7T5XE
futpOsYGRnrlGE47nMEvIY/QooQbcoZ9wLHCJ3NB8Pry/lu+Poy7KGvRvP7mEiHt
njhuj2NiLiauxE40y5Z91Njaxzm8DCNnPgtvdAOVLQW2mCcSR9L8r6b+94wdmPz1
jqFu5ID0onQnlQ==
-----END CERTIFICATE-----
Generated at Mon Nov 9 18:25:12 2026 by rpki-client