
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File: sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier: KdDniM4cVn869pNuFUktofulKY3p848lI/jIaYkt3rA=
Subject key identifier: D1:6C:6F:83:82:6D:A2:16:7E:BA:25:6A:84:F7:D5:31:91:45:3A:F1
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 019D277221DE85B0B472DBB55832A31B9735
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 00:01:24 +0000
Manifest this update: Thu 26 Mar 2026 00:01:24 +0000
Manifest next update: Fri 27 Mar 2026 00:01:24 +0000
Files and hashes: 1: P4g9yTAv1bQsEHzbCNOJ067tquU.roa (hash: kouwCvNmAHfMnCaV0S5emEt24x5TunBBSbVBzdGSrqY=)
2: Y360lwoG9eyseVvOT5wT1Z7gt7U.roa (hash: U9JtvNrirG87zfze5K4hjslK7QIiDoWF/Ia/56lwbBw=)
3: pWNFve3JFzOWEIOafmb-tq3ozgk.roa (hash: J9P5fP20DSym7BQV4ZtLFdmGdvrRCw0F5AUaKX6zn0M=)
4: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: 3VngBZNeoXuXmM6vn7xZbF7/r+utn5+oWhKDcU+L1BY=)
5: wjwk4znZSgE3afujO_o00KJ1wc4.roa (hash: /EHRjEt0mZL7bm2KcS0WqhNixMXZVUS3aHhSERVsdww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:21:de:85:b0:b4:72:db:b5:58:32:a3:1b:97:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Mar 26 00:01:24 2026 GMT
Not After : Mar 27 00:01:24 2026 GMT
Subject: CN=d16c6f83826da2167eba256a84f7d53191453af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:ab:40:0e:8f:32:fa:fb:61:35:bf:64:ac:
50:4d:85:0f:2b:23:88:fb:c9:1f:a9:a6:fc:a6:cc:
92:7a:a3:28:08:51:93:ff:18:55:71:84:19:eb:da:
4c:5e:cb:07:4c:12:24:79:44:a3:29:99:34:34:85:
dc:20:9d:90:2b:b4:5b:30:1b:d9:07:4d:fe:cd:c9:
b1:b0:c8:78:8b:01:45:62:85:97:fb:ea:46:db:8b:
6f:e5:29:58:1b:7d:07:98:01:3b:2d:36:08:86:8e:
69:e1:47:c7:8c:d6:e5:57:f5:3c:8d:96:78:09:9b:
d9:05:e8:8c:15:66:21:14:4f:02:29:56:c1:82:13:
c4:eb:4d:c7:78:53:cd:d0:16:64:61:78:b9:04:36:
70:1e:6b:28:41:82:7e:6d:d0:08:78:e6:14:bb:d7:
bb:cb:51:14:85:4e:23:74:df:4d:2e:81:0f:d6:27:
c2:7c:b7:97:b7:c5:4c:ae:2d:3d:02:8b:9a:14:39:
6a:74:d7:81:d5:fc:78:72:7d:37:bc:55:9f:11:b7:
d2:82:f3:64:d2:30:c3:5d:48:58:f4:28:33:3f:bc:
33:60:0d:ee:38:1a:4a:dc:c7:a1:9d:21:02:43:62:
b8:44:3b:3b:b5:19:2f:c2:2c:8a:e0:19:ec:21:29:
7f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:6C:6F:83:82:6D:A2:16:7E:BA:25:6A:84:F7:D5:31:91:45:3A:F1
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:cf:9d:81:74:32:af:54:a6:2d:07:9e:cf:a9:12:b6:33:66:
36:a5:34:52:59:42:3e:37:e5:23:f8:ac:ca:e4:79:82:4f:8f:
5f:57:6a:3e:f1:eb:93:2b:c4:0b:d1:89:4a:03:8b:2e:00:64:
1b:08:13:ac:6a:5c:d6:26:f2:f2:14:c4:85:21:7c:c4:b9:bd:
c7:ac:90:e5:fa:4f:4a:4c:3c:a0:a8:f5:6f:87:67:d2:be:41:
0a:f1:ab:da:af:a2:c1:b4:0f:1d:39:17:3b:3d:04:ac:52:70:
f6:5d:97:cd:5e:95:3a:73:1a:bf:66:2d:75:ba:0c:b5:d6:24:
9a:3b:c0:7e:33:4d:d3:e1:8a:7f:1c:89:42:83:e0:4f:d0:2a:
d7:67:d7:b5:97:b3:96:c4:70:43:25:8e:9d:36:3f:1c:a8:98:
bf:c4:9a:29:a8:a7:46:2b:d4:3e:88:05:ab:a9:b1:bf:f3:f2:
f5:e1:06:e9:6b:f4:a9:a1:f1:21:81:b1:9b:e5:44:5a:39:73:
47:93:17:3e:77:48:05:28:50:21:ca:a1:44:95:3e:26:03:e2:
0e:8f:c6:46:87:42:d1:5b:1e:b7:ff:00:33:98:7f:b0:97:11:
9e:08:f0:8b:17:6f:c7:84:1e:b1:dc:bc:c0:b7:d9:02:af:84:
c8:f8:5c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:26:38 2026 by rpki-client