Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: uNyfysYP5PQ71xg4chdOp7tHSkcRIeUjO/9w0S3Lgyw=
Subject key identifier: 07:D3:AC:7C:DE:59:C5:AE:A6:4B:89:19:02:67:70:79:86:FC:75:D4
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 01A110A8F5DBBC341081F2D5FFA8184AD91B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 1A90
Signing time: Tue 06 Oct 2026 10:01:10 +0000
Manifest this update: Tue 06 Oct 2026 10:01:10 +0000
Manifest next update: Wed 07 Oct 2026 10:01:10 +0000
Files and hashes: 1: F9fOaYPqb4gxUHFeWSAIKisXq8Q.roa (hash: PHpRDYyGYnqjTmjt3ejWEskYaaVTFLnfQhZUlCEYSpg=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: aYt2LT4Zh9FEsS/Feccs7vCpQR4tPZ4n8TsMcLBEtvs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 10:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:a8:f5:db:bc:34:10:81:f2:d5:ff:a8:18:4a:d9:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Oct 6 10:01:10 2026 GMT
Not After : Oct 7 10:01:10 2026 GMT
Subject: CN=07d3ac7cde59c5aea64b89190267707986fc75d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:63:49:a2:02:ec:30:17:9f:9e:50:5d:ab:bc:
74:9e:86:5b:bb:ec:34:ca:8a:67:8e:72:0a:1f:4e:
92:4a:ca:c4:91:15:b2:d6:12:36:19:cb:9d:4b:a1:
05:45:cb:24:2e:9f:02:bc:45:7c:e5:90:9c:50:70:
ed:68:6b:9f:14:9f:f0:de:6a:56:00:e5:1c:ca:72:
a1:98:21:e9:90:54:6e:ae:0a:59:0f:08:fe:c8:b9:
3f:ce:3a:79:ed:56:7f:3d:de:c9:5b:ee:d9:0e:0b:
2e:6e:16:ff:76:ec:9b:2b:0a:a3:11:47:c2:ae:f1:
cc:f1:07:5a:e1:aa:c0:55:ab:76:e1:c7:14:a6:f0:
69:2c:b6:30:80:70:63:0f:df:47:c7:ec:bb:07:62:
d6:06:3d:f6:ec:64:f6:b1:6d:11:c5:12:9c:33:a4:
d5:85:3e:58:0b:54:59:7a:a0:95:23:d6:01:36:6b:
14:76:6b:c4:d5:b5:8c:f6:0c:22:e5:4b:55:c1:29:
9f:74:fd:aa:eb:52:28:fd:11:1f:5e:e9:53:12:01:
a4:4a:d7:58:f2:89:a3:f7:d3:af:9c:65:b1:4a:f5:
51:7a:16:ff:ee:50:93:6f:98:e8:36:38:af:a4:07:
68:5f:bd:67:28:8e:f0:99:b6:ad:dc:9e:42:ee:2c:
d2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:D3:AC:7C:DE:59:C5:AE:A6:4B:89:19:02:67:70:79:86:FC:75:D4
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:9e:33:81:4e:81:de:db:50:b3:49:58:79:fc:99:ba:90:93:
d9:74:3d:4b:41:41:36:b5:3c:cf:d3:3d:d9:af:dc:71:4a:d2:
ea:c6:04:db:98:b3:78:54:a2:f8:ec:84:9e:4f:97:1d:2e:28:
30:1f:e0:1e:0c:09:21:14:03:e8:25:2c:c0:33:69:df:75:85:
7b:08:cd:83:6e:ee:77:e1:d6:0e:5a:12:ea:ec:2c:ee:c4:a9:
d5:18:36:60:09:a6:dc:c9:7a:2b:4c:0f:1f:26:06:3e:fc:3a:
8f:54:08:16:63:23:5a:14:c7:1e:a4:dd:54:1d:ba:6d:5c:fb:
eb:01:00:e8:bb:fe:15:44:90:8a:ad:27:1c:c6:e1:27:d9:75:
ae:3b:6e:9a:07:99:36:23:1e:22:e8:67:13:1f:cf:db:80:8d:
ef:79:aa:db:7c:dc:e9:48:6c:6c:40:3d:9e:69:1f:7e:fa:15:
5a:bf:96:4b:0d:85:9b:66:45:1c:61:8a:62:da:02:47:bd:e1:
9f:d0:44:da:d2:2c:80:1b:28:6a:01:1d:23:ff:f2:dc:c1:d3:
28:c8:e1:53:d8:31:12:f9:a5:f2:97:e0:22:3f:2e:8a:69:e4:
a0:a0:74:2c:90:af:55:52:2f:5d:dc:ec:0b:4e:5d:53:f6:4f:
ed:c7:f3:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 20:41:44 2026 by rpki-client