Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: XyOdGr2MNmVlqkbWlVD++8IXZHYFghoInSdF2aYXWSg=
Subject key identifier: 8A:25:60:D2:3B:6D:DB:C3:B3:C3:C7:8C:FE:2B:64:07:63:17:0A:10
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 019CAC0F9910E3F97DD71F03FC98C8A853B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 05F6
Signing time: Mon 02 Mar 2026 01:00:29 +0000
Manifest this update: Mon 02 Mar 2026 01:00:29 +0000
Manifest next update: Tue 03 Mar 2026 01:00:29 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: kRv4un2sThMm1VbI38X5n9VG7iAgYfhGpqsGb7ktj+s=)
2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:99:10:e3:f9:7d:d7:1f:03:fc:98:c8:a8:53:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Mar 2 01:00:29 2026 GMT
Not After : Mar 3 01:00:29 2026 GMT
Subject: CN=8a2560d23b6ddbc3b3c3c78cfe2b640763170a10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:01:a0:39:5e:95:a0:aa:fd:3c:18:16:27:7e:
8f:6c:e8:29:dc:76:f6:5f:aa:5f:b9:4c:bf:9e:4a:
67:b9:c8:07:2d:7a:7b:b9:9b:2e:78:b1:4f:df:3b:
db:4f:7a:12:20:a1:e8:fb:d8:a8:ad:37:cd:0f:54:
9e:5c:c2:22:30:1a:87:d1:87:99:6a:1e:93:66:a7:
54:51:33:7b:59:8c:8b:8e:ea:62:bb:2e:72:9d:59:
98:3d:f4:1a:dc:56:ba:d8:cd:80:4a:47:0e:0a:cb:
f6:aa:2c:42:bc:8d:fe:eb:b8:15:87:66:99:26:a0:
9c:c2:ec:99:ea:e2:a5:04:3c:be:1f:90:cd:e2:92:
3e:36:5e:6e:f5:0f:c2:d7:e5:2c:f7:a1:bf:8e:30:
a6:dd:35:c3:de:a1:33:52:e2:e4:cc:97:68:c0:5b:
4f:5d:14:22:7a:81:6f:f7:15:fa:52:7f:75:c9:e7:
f1:87:13:70:50:05:70:9b:7e:9e:84:ce:bf:90:cc:
72:cb:a9:c1:15:5e:06:f2:2a:a9:d6:61:4d:04:70:
00:b6:94:fb:10:cb:bc:28:8c:29:81:a8:7e:54:de:
08:19:b8:75:94:76:9d:7f:3d:b4:21:3b:0f:3b:98:
3c:78:0b:3b:72:4e:93:5d:60:0c:28:74:32:22:80:
f0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:25:60:D2:3B:6D:DB:C3:B3:C3:C7:8C:FE:2B:64:07:63:17:0A:10
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b7:f1:79:92:49:ed:e7:a5:26:e4:38:da:27:26:1e:48:46:
cf:5e:7f:4f:0f:09:eb:02:a3:57:c2:4d:14:7f:cd:3f:e1:eb:
a6:ba:56:85:2d:50:ef:63:95:88:af:f7:95:ed:28:63:25:37:
bf:63:41:2c:7d:a5:6b:38:35:a4:71:d8:93:73:f9:bc:40:5d:
a6:40:f0:63:ea:c9:8e:43:fa:17:81:cc:18:4e:fc:2a:fd:d8:
54:81:fc:eb:e1:6f:42:1a:0d:f0:1b:f5:cf:e7:21:13:16:d0:
16:f9:cf:09:f1:e1:1a:87:b9:43:47:33:0b:8b:e0:86:c9:c0:
08:c0:18:cd:51:4e:fb:ba:96:09:a5:bd:b2:cc:f0:28:e2:ff:
11:6d:a7:f8:da:11:e7:9b:b1:05:7b:ab:c3:ae:e8:80:9a:32:
60:c2:20:82:27:06:39:f2:fc:27:bb:c3:af:a8:89:ce:98:75:
87:a0:af:93:a6:37:b4:22:41:58:51:9d:43:0a:79:8a:69:8d:
f4:b6:a0:54:ca:e4:54:a1:77:02:16:34:ea:cb:6e:e4:e2:03:
81:01:d3:cb:77:38:9c:ef:f0:16:e7:1d:de:55:d4:97:0a:21:
1a:83:e9:8d:a5:bc:c5:40:44:3e:f4:1a:34:bd:c5:1c:75:e5:
b5:0a:db:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:13:33 2026 by rpki-client