Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: XoFsvSmdG44GwzIkaMOLS9JH6X1QHYQVXsboUk1JGZE=
Subject key identifier: C5:27:2D:2C:3A:B2:7F:50:C3:CA:F4:71:BB:E4:86:20:85:81:7D:1F
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 019D265F0F3EF53801812519B47EB2EDEB12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 1889
Signing time: Wed 25 Mar 2026 19:00:57 +0000
Manifest this update: Wed 25 Mar 2026 19:00:57 +0000
Manifest next update: Thu 26 Mar 2026 19:00:57 +0000
Files and hashes: 1: F9fOaYPqb4gxUHFeWSAIKisXq8Q.roa (hash: PHpRDYyGYnqjTmjt3ejWEskYaaVTFLnfQhZUlCEYSpg=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: fMFxizZcl3uvvc7oWrrETWlUpjzGWQUZtWPOWYyywio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:0f:3e:f5:38:01:81:25:19:b4:7e:b2:ed:eb:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Mar 25 19:00:57 2026 GMT
Not After : Mar 26 19:00:57 2026 GMT
Subject: CN=c5272d2c3ab27f50c3caf471bbe4862085817d1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:34:08:58:ce:df:a3:90:d7:c3:fd:93:59:a9:
e6:0d:1d:f6:25:32:31:9b:ad:d0:e0:a7:67:8d:59:
c7:90:51:3b:5e:ce:0f:43:9d:06:8e:91:d3:9c:17:
79:88:22:d8:69:05:19:9f:1d:cf:bd:1e:3a:2c:4e:
b1:44:d7:85:5e:d1:55:b1:44:59:e5:e3:18:cf:5f:
d6:8a:ef:e9:f8:7f:60:37:66:99:a2:e6:64:4e:a3:
45:f1:e6:96:66:da:95:9d:18:d8:60:b5:2c:d2:01:
58:cc:ab:84:5f:cf:03:6b:93:63:e5:6b:4c:6c:10:
60:3f:c0:f1:14:d6:9d:31:e9:e6:dc:e4:df:ae:a3:
cf:a7:a7:19:d7:1f:34:7f:73:68:ff:22:48:a8:d8:
33:8d:bd:21:89:c9:b6:d3:cc:60:28:8d:b9:a7:71:
de:5b:14:c5:67:0b:75:23:bb:a1:db:dc:35:8f:88:
59:dc:bb:a5:aa:bb:32:9c:4e:ec:3e:60:1c:e2:8e:
59:3b:4c:0e:8a:78:13:e9:4b:dd:be:99:d2:51:9b:
ce:2d:30:b9:eb:ba:6e:79:8d:13:ce:06:87:5e:21:
8f:9f:fa:6a:0e:be:d2:66:e2:c5:39:d0:3c:41:da:
26:2b:22:81:79:00:b3:25:74:04:f2:c3:42:b5:5a:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:27:2D:2C:3A:B2:7F:50:C3:CA:F4:71:BB:E4:86:20:85:81:7D:1F
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:e3:64:05:c9:c9:de:73:2d:af:70:8a:db:41:68:b5:ec:c3:
a5:c2:80:3c:df:6b:79:77:e4:ac:73:df:08:cf:72:d6:0e:19:
d5:da:e9:e0:0e:d2:99:8d:f1:3c:9b:76:be:c3:90:3e:9a:5c:
61:12:3d:f9:42:ad:c3:81:aa:61:b5:fa:7d:3c:e0:e1:6f:b1:
2e:55:55:fd:9b:d4:11:ed:75:30:a4:a0:38:f2:e5:5b:0c:51:
58:9a:c7:fb:87:0e:a1:82:0a:bb:1a:8d:6f:25:d9:37:fc:28:
68:73:90:8b:1c:e6:11:a1:96:12:4a:22:db:c8:01:45:81:7e:
78:ac:e1:1e:6a:0c:eb:45:31:c9:d4:22:3b:3f:48:68:e9:9d:
c1:15:8d:82:42:15:1d:3c:f8:f1:66:7d:68:be:a3:37:a9:47:
5b:a6:ab:85:8e:d3:4c:c8:08:e6:f7:a0:db:11:00:21:32:06:
da:28:d4:b8:6c:d2:00:56:b8:f9:d9:7f:71:0f:09:fa:8c:a6:
96:c7:b9:14:48:6c:02:46:30:e9:8a:5f:84:ef:25:2b:a9:2c:
6b:13:5d:03:75:fe:60:09:68:38:01:cb:97:58:69:30:57:96:
b5:8f:14:91:40:40:c0:3a:32:54:a6:af:af:2d:3f:ce:8c:cb:
ce:87:ce:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:05:24 2026 by rpki-client