Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: mDcNMDp2e7CNrDjx60cNesPcZ0GJbLaQlPBNJkAIZpA=
Subject key identifier: 4A:68:6C:DB:78:9D:FC:88:BE:4A:58:6E:26:81:42:BA:3D:B7:CB:C5
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 019E20FF2B097A4892DF1BCE7DA3A3EB5322
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 1908
Signing time: Wed 13 May 2026 11:00:53 +0000
Manifest this update: Wed 13 May 2026 11:00:53 +0000
Manifest next update: Thu 14 May 2026 11:00:53 +0000
Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: xBPUVe8vzO1yQn8+nA2xa8dtXn0qA6HFh3B7LpAyT1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:ff:2b:09:7a:48:92:df:1b:ce:7d:a3:a3:eb:53:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: May 13 11:00:53 2026 GMT
Not After : May 14 11:00:53 2026 GMT
Subject: CN=4a686cdb789dfc88be4a586e268142ba3db7cbc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:47:13:0f:d6:03:04:55:7a:6e:81:35:33:c9:
b3:24:a4:8e:f4:71:7a:33:e8:68:5a:22:43:4a:e7:
b9:cc:e9:d4:76:30:68:1d:3b:9f:e4:0b:2c:b1:c3:
63:0d:74:33:66:7e:78:ae:f1:2d:6f:14:8b:94:10:
f4:4f:37:81:7d:8f:d9:aa:84:fd:1b:c7:19:e4:44:
fb:dd:ba:54:03:fe:1b:46:8b:ec:b1:66:4d:b9:4c:
b2:3b:da:aa:71:10:16:72:26:f7:7c:f8:f0:ab:97:
10:6a:4f:43:eb:ef:3f:c5:a4:27:1d:38:b8:3c:78:
eb:04:0b:26:92:10:3f:d4:9a:06:20:cc:f4:53:88:
7c:3d:50:a4:37:7d:17:5f:bf:5c:e4:64:74:51:e7:
11:8e:9e:d2:ed:90:23:cd:b9:70:be:db:91:32:d9:
96:7f:05:a5:de:d1:33:f5:3f:d2:f5:44:c2:ba:f9:
7a:91:83:89:d8:c2:73:26:13:7a:ab:47:f8:81:a2:
74:97:d3:a1:ab:23:ca:1c:37:0c:af:f7:67:d5:f5:
86:7e:09:01:59:a4:d8:fe:78:ca:2f:0c:1f:04:bd:
8e:3e:26:38:84:99:4e:7b:8a:84:3e:c9:fe:7e:f6:
dc:92:34:50:63:5c:01:de:65:44:76:81:09:d8:fe:
fc:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:68:6C:DB:78:9D:FC:88:BE:4A:58:6E:26:81:42:BA:3D:B7:CB:C5
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:c2:11:96:a0:ab:54:e5:6c:41:3c:29:f1:4b:ec:2b:ee:c4:
8d:bd:aa:d1:e6:34:ef:d4:f0:a0:a4:27:28:e0:1b:30:46:79:
b1:28:33:38:ed:9b:b3:39:2c:ff:68:ee:49:45:e1:e0:c1:fa:
09:c8:70:a9:47:e8:3a:77:c4:a7:c7:74:96:06:77:cc:cb:4d:
25:54:df:85:de:9d:53:63:7b:fd:95:7b:65:ec:b2:3c:27:0a:
98:cd:7c:1d:03:ad:0f:34:a3:44:9c:cd:3e:5b:bf:9e:1d:6c:
8d:0f:15:01:a0:80:1e:04:d8:97:48:45:6c:92:12:c0:e3:dc:
e6:37:11:4b:08:bd:68:f7:83:68:8b:3c:05:85:60:82:23:38:
00:e1:0e:f8:63:60:26:e2:13:5a:a9:f3:0f:85:c8:da:8e:f1:
40:19:40:6f:d1:b9:28:7d:ed:78:8b:38:30:d1:44:81:27:b7:
f2:30:a1:9a:db:67:5b:60:3b:7f:77:f0:f4:33:4e:97:1a:a5:
10:70:be:c3:88:c0:34:fa:87:02:c2:01:5a:17:eb:3c:04:fd:
7d:a4:99:bd:61:33:68:7b:fe:c6:de:b1:08:b7:4e:6a:83:00:
aa:d4:c2:7c:f5:80:5f:db:d4:9d:1e:27:f5:b0:34:b4:2f:b8:
70:6a:83:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:06:25 2026 by rpki-client