Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
File: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft (raw, json)
Hash identifier: 0eWi2HncpA9NpGiACEAXhMjyajFC+scd7EGSjqe/cEQ=
Subject key identifier: AF:28:13:1E:88:5C:71:33:C2:0D:50:D1:49:35:91:87:A4:C5:3F:76
Authority key identifier: BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
Certificate issuer: /CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Certificate serial: 01A122AFF1041C2DFC67CF7DF3B3841AF446
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
Manifest number: 1A41
Signing time: Fri 09 Oct 2026 22:01:58 +0000
Manifest this update: Fri 09 Oct 2026 22:01:58 +0000
Manifest next update: Sat 10 Oct 2026 22:01:58 +0000
Files and hashes: 1: Lp4ADAtbUAnUUwmRXq0CRRE_xe4.roa (hash: /5OxQHC9qaJZIRED9fTxGtHMX/MOAtFVzPxTg7u1+8I=)
2: uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl (hash: sXJ8KnIVtobsRnq+Cp2Vzr/HKPE6/EY7LwCeb2DNIqs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 22:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:af:f1:04:1c:2d:fc:67:cf:7d:f3:b3:84:1a:f4:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bae7fa77f724bb467325ad59d7dbfc63399c6e79
Validity
Not Before: Oct 9 22:01:58 2026 GMT
Not After : Oct 10 22:01:58 2026 GMT
Subject: CN=af28131e885c7133c20d50d149359187a4c53f76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:25:59:69:72:4a:88:3e:aa:92:77:37:97:6a:
db:14:d3:f3:94:6c:f1:68:9e:9a:8b:51:d9:e3:30:
b1:43:f1:1a:00:a4:ab:53:70:d4:7f:ee:77:5b:84:
ec:38:72:b0:7a:5a:d6:72:20:18:b9:30:68:90:7a:
fb:6c:4c:aa:0e:e7:c1:75:c3:ce:2e:67:6f:82:97:
b1:6f:00:a8:0f:cf:c9:5c:93:df:ee:6d:69:ff:c7:
94:17:91:90:2f:7e:2c:43:93:31:4e:91:57:0e:f1:
0e:ff:4d:cb:6c:9e:50:5a:45:c8:8e:91:46:d6:af:
1d:b1:6d:6a:2c:41:1a:bd:a3:76:e0:4d:45:b3:9c:
7d:00:e3:be:90:57:36:30:e5:59:44:7f:ca:32:ad:
24:c1:33:66:96:a7:6f:bf:80:00:83:8d:ae:e9:ed:
5c:92:f1:a2:f3:6e:c3:19:f6:d0:ff:e4:20:35:eb:
48:aa:0a:b8:1c:92:a9:31:b5:0e:e9:3e:c5:03:49:
55:f7:9b:b9:aa:2b:a1:9b:44:64:22:1b:08:8a:da:
a3:a6:7e:82:5b:e6:e1:9c:f3:81:fd:04:63:5b:ff:
cf:e5:41:31:3c:1a:dc:90:7f:e9:dd:92:75:cc:28:
35:4d:df:a7:44:d1:91:74:76:af:9d:38:10:49:39:
bb:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:28:13:1E:88:5C:71:33:C2:0D:50:D1:49:35:91:87:A4:C5:3F:76
X509v3 Authority Key Identifier:
keyid:BA:E7:FA:77:F7:24:BB:46:73:25:AD:59:D7:DB:FC:63:39:9C:6E:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/77774a-fc07-4002-94f9-12dc94ddedcd/1/uuf6d_cku0ZzJa1Z19v8Yzmcbnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:9c:ae:43:20:5c:d2:b3:69:a2:8b:5f:bf:7e:27:6f:af:f4:
15:a6:64:5f:f4:94:09:54:23:ef:0f:9a:b1:76:e7:cd:61:8c:
1c:bf:7b:6d:c3:2a:ed:ce:83:0d:7a:b5:63:01:67:c7:f3:6e:
a9:a6:3d:e9:49:ab:8d:74:fc:8b:2a:21:6d:ce:95:11:9a:31:
37:74:f1:12:29:27:14:f4:4f:38:4c:37:b5:04:0a:01:3b:6b:
ae:19:7a:62:3e:37:7e:fa:26:16:19:49:28:41:6a:77:81:f9:
31:b5:89:5d:15:5c:74:8b:d2:c4:c6:36:73:f0:2e:35:96:b3:
01:0e:59:5a:f9:1b:b2:f9:c1:d7:dc:e6:a1:b1:19:86:a4:f5:
a2:28:d6:6d:e5:ef:dd:ec:1a:ff:83:dd:d8:41:02:9d:bf:31:
93:25:1f:49:f0:4c:97:eb:73:43:f5:8f:30:48:40:bf:3b:e4:
58:33:b4:19:a4:26:87:90:8a:86:d4:29:53:e0:c7:8c:13:4e:
68:9c:3d:9d:46:d4:2c:bc:da:ad:ab:e8:c9:45:c1:d3:22:4c:
e9:7b:43:46:1f:d0:5d:c4:fd:ff:1d:9c:0a:9f:cc:0d:ab:bf:
57:ac:01:b1:0f:5e:c5:3f:18:e0:e7:b2:3f:e1:03:e1:37:22:
fe:da:13:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 07:10:07 2026 by rpki-client