Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: waqzyhAdRXL5euKyidsLeD52CFlCywBeruIwBRza4JM=
Subject key identifier: 5B:AE:E0:8B:F1:F8:91:D8:5B:3C:E8:F2:68:F0:58:77:A5:9B:5C:DD
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 01A0C4B2FD53F3FDDE6C1579C1ECDFA710D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 0815
Signing time: Mon 21 Sep 2026 16:00:59 +0000
Manifest this update: Mon 21 Sep 2026 16:00:59 +0000
Manifest next update: Tue 22 Sep 2026 16:00:59 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: Es0sTR7dJB9Uvepx86ZP++wwFpD+PFipDOv4WFK8FA4=)
2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:b2:fd:53:f3:fd:de:6c:15:79:c1:ec:df:a7:10:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Sep 21 16:00:59 2026 GMT
Not After : Sep 22 16:00:59 2026 GMT
Subject: CN=5baee08bf1f891d85b3ce8f268f05877a59b5cdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:fe:90:1d:03:4c:b0:db:c1:c9:c6:31:76:24:
d2:f0:75:11:fa:45:17:2c:62:00:ff:1c:59:4c:cf:
2e:b3:44:b0:ca:f9:73:e1:f3:4f:a8:19:c8:07:6a:
71:f1:70:a1:7f:64:5e:f6:30:1f:d3:4e:b2:85:19:
16:7f:eb:78:11:8a:40:cd:cd:45:99:f0:75:19:35:
28:30:bd:d4:91:f1:5c:d8:b9:ee:26:e9:a3:42:6c:
04:04:c4:52:e1:70:b4:e6:22:7f:76:27:69:62:56:
a4:fd:da:e2:2e:93:75:ca:44:62:e4:91:e2:a4:60:
69:0f:f0:c3:29:0e:64:dd:6e:fb:75:3a:bd:32:b5:
ac:73:e3:86:1f:72:35:12:d4:45:50:38:b2:33:b3:
bc:6a:9a:0a:ff:cc:46:e6:15:44:6f:7e:fa:c5:e8:
bc:64:2b:d2:f6:a9:58:ea:00:ef:43:dd:ff:56:a2:
42:5c:86:11:e4:ec:71:f9:06:fb:5d:be:1c:47:63:
b2:fb:65:e8:6b:a6:d4:f4:23:ee:00:03:ee:b7:3b:
b5:86:96:62:ef:2b:fb:20:04:59:6e:52:56:95:f9:
ad:11:63:d3:07:10:20:bb:55:20:0d:54:38:c8:62:
a4:db:a1:5c:82:33:7e:c0:c0:68:17:8d:ce:b2:27:
40:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:AE:E0:8B:F1:F8:91:D8:5B:3C:E8:F2:68:F0:58:77:A5:9B:5C:DD
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d8:79:ab:17:2b:21:c8:20:bd:f9:75:8c:58:81:90:70:38:
6e:e8:2d:40:c0:bb:e5:80:8c:51:a3:d0:8a:6f:16:21:67:d5:
b9:9a:25:9d:dc:9c:73:8e:7d:7e:18:82:04:74:e2:79:87:b1:
86:44:47:11:c8:4e:54:c2:19:83:52:76:f0:20:40:e0:40:b2:
6d:fb:ea:eb:1d:c6:22:9f:3a:a2:6d:21:dd:89:db:1b:69:6a:
93:83:e3:e5:8a:28:a4:f8:a6:43:5d:2b:5e:43:28:6e:72:70:
9a:df:ae:39:34:6d:84:08:84:3a:d1:44:81:8c:7a:4b:f6:73:
21:6c:3a:de:b2:2e:33:5f:92:51:54:9a:f0:f5:d6:6c:b0:a2:
b4:87:a2:55:90:59:c5:dd:b4:5a:32:4a:fe:eb:06:62:4d:77:
3b:9a:d8:7a:5e:23:6f:16:1b:05:a8:4f:38:ed:ab:40:ba:93:
5c:a0:27:64:d9:d5:08:1f:33:53:85:4a:b8:cb:d8:a9:b3:0a:
7f:69:ee:37:92:d6:58:73:bd:df:00:87:40:0f:63:6c:43:2e:
71:5c:98:8f:18:7a:78:28:b5:9d:da:e1:fe:86:46:4d:ff:22:
c5:78:06:b2:bd:6e:4e:5f:19:4d:9e:d7:cd:50:4d:1c:33:e0:
44:a5:4b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 00:58:50 2026 by rpki-client