Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: sd+8ApZkNSDYEbkzVitmTx11W1AuSsBFuJ348s+WRn0=
Subject key identifier: 36:A7:F7:CA:C4:88:8A:A6:72:16:78:04:34:1D:3B:4A:17:EE:26:83
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 019D99994427D0E5353AC7C5D6A4D0C21F9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 0671
Signing time: Fri 17 Apr 2026 04:00:51 +0000
Manifest this update: Fri 17 Apr 2026 04:00:51 +0000
Manifest next update: Sat 18 Apr 2026 04:00:51 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: F7+nQN38VZV/m1O2iZe0MWVZxXnYCNI/gwPbZ9gBpbw=)
2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:44:27:d0:e5:35:3a:c7:c5:d6:a4:d0:c2:1f:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Apr 17 04:00:51 2026 GMT
Not After : Apr 18 04:00:51 2026 GMT
Subject: CN=36a7f7cac4888aa672167804341d3b4a17ee2683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:6c:36:67:4b:63:0e:0a:ab:bf:4b:46:84:e5:
7f:16:e2:59:fb:16:41:d5:e8:d5:79:c9:97:d4:84:
d5:7a:24:21:cd:41:a9:36:bb:fc:08:fc:97:c0:a9:
0d:0a:70:08:bc:1d:82:a4:f3:b0:a7:de:49:ac:ab:
4f:44:17:76:a3:62:ba:94:55:b8:76:64:37:45:ea:
a2:4f:7e:80:77:03:b4:30:38:ed:66:a4:d1:3a:9a:
60:a0:96:9c:0c:5c:93:63:1a:53:6c:a4:63:a2:70:
ed:78:5c:64:af:78:3a:37:46:63:4d:c4:32:dc:63:
70:fd:95:22:d2:2c:ae:4b:bb:cc:bc:48:1f:95:56:
56:16:e0:8d:52:32:5c:d1:52:b9:75:3f:34:b3:80:
f6:4a:e2:8d:5c:4e:bc:f4:e8:70:92:b7:ac:a5:2c:
39:60:67:70:ff:dd:a3:51:76:59:bf:6d:64:e9:4a:
99:cd:9e:b3:ad:0a:8f:94:52:9d:54:64:53:32:9a:
00:7e:c6:60:d7:bb:98:72:e1:48:9b:f7:02:29:b5:
db:a1:02:22:a0:4c:ba:c3:c8:3c:59:c9:9c:37:82:
ca:4d:39:25:0c:53:bd:53:0d:28:37:eb:96:72:18:
5a:80:b5:89:50:77:2b:c0:98:1a:3b:58:45:f7:98:
51:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A7:F7:CA:C4:88:8A:A6:72:16:78:04:34:1D:3B:4A:17:EE:26:83
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:21:4b:7a:ac:77:61:64:28:54:25:64:ce:ec:13:6a:df:01:
5d:3c:36:47:12:9a:11:7d:8a:03:46:04:7d:c8:03:91:f7:96:
cb:ef:ea:f2:d9:ee:8a:56:c5:46:fe:6c:14:b6:85:38:d3:29:
c3:14:09:47:58:d3:a3:dd:61:6c:eb:d0:8a:5e:7a:9a:67:64:
08:27:9f:89:06:ff:4f:39:fb:11:79:71:81:bc:c1:25:33:e1:
08:71:bc:fa:5f:09:4f:5d:77:0c:9e:0e:e3:02:fa:83:e5:b5:
04:e5:b6:fa:69:ba:d3:13:58:21:b8:6f:be:2a:27:cf:73:fc:
1c:8c:48:39:d6:0b:f6:23:d3:bb:2d:29:fd:9d:13:e8:da:71:
67:27:a4:12:38:91:74:40:d5:44:40:04:de:65:ed:fe:e0:0c:
58:0c:12:89:6c:49:6d:14:c6:b8:c3:6e:26:bc:43:1b:c2:00:
87:b4:3b:1a:db:59:ed:29:ae:e4:1c:5b:2a:b5:0f:8f:95:ba:
6a:e3:36:60:ce:4e:97:f2:29:4d:3b:10:8d:3e:fe:28:0f:b3:
54:51:aa:23:7a:12:b9:2e:c1:25:23:a2:1c:8e:98:8b:1a:cf:
76:39:db:f9:1c:9e:7a:95:81:40:c1:fc:10:52:76:49:33:a2:
99:89:ee:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:38:36 2026 by rpki-client