Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: qeKxSzbIdwVmtRfDgIInPiOFtbd7akvSru8E9BsnBkY=
Subject key identifier: 0E:CE:46:B3:19:0E:F8:19:A3:22:C6:8D:CA:B6:0D:77:47:48:53:09
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 01A1103BB629B0D1C4E5616DD2147C288BE5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 1A8D
Signing time: Tue 06 Oct 2026 08:01:51 +0000
Manifest this update: Tue 06 Oct 2026 08:01:51 +0000
Manifest next update: Wed 07 Oct 2026 08:01:51 +0000
Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: 4FpG6zit7nKbno6X0+x6d5Gtt6ZsS3mvz7D3/61bfcs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 08:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:3b:b6:29:b0:d1:c4:e5:61:6d:d2:14:7c:28:8b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Oct 6 08:01:51 2026 GMT
Not After : Oct 7 08:01:51 2026 GMT
Subject: CN=0ece46b3190ef819a322c68dcab60d7747485309
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d9:4d:20:23:99:b1:29:95:aa:02:13:42:9c:
87:d4:17:dd:b6:b0:c4:8a:b6:d7:36:5a:27:92:78:
68:18:a2:04:97:5f:7f:bd:95:bd:0f:b9:33:63:a6:
64:01:4a:e9:50:4c:b9:b6:d2:43:3a:26:c9:ac:fa:
62:6c:5a:92:79:ea:85:8a:b1:47:25:9a:43:6e:2e:
81:b4:db:56:74:4e:2d:2f:df:a9:8f:98:82:28:6c:
ab:83:72:b5:1e:e8:9b:16:53:b9:7e:db:ab:6f:a2:
10:53:5e:70:da:e6:98:3f:a3:65:33:56:fd:af:29:
a0:ea:e4:fb:21:90:22:74:ab:ab:8a:c5:42:94:bb:
71:e5:5c:7e:36:19:73:88:eb:7e:7e:1f:75:a7:06:
52:ea:11:22:3d:3d:89:d4:16:92:3d:37:df:cc:eb:
0b:5f:d7:5a:c1:d6:94:85:d2:b9:4c:cf:14:32:b5:
e5:18:d6:99:2b:d5:bb:5d:9d:c6:d9:08:5b:43:1d:
16:f6:34:26:ce:ad:10:72:78:7c:5d:e9:f5:11:5f:
63:a9:4b:f6:38:b8:c1:4a:7c:6d:76:77:aa:16:73:
ed:56:49:bd:cc:13:37:a5:73:85:98:f5:43:61:70:
a3:70:b4:2f:c9:48:ee:25:85:23:7f:2b:da:da:dd:
8a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CE:46:B3:19:0E:F8:19:A3:22:C6:8D:CA:B6:0D:77:47:48:53:09
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:38:df:04:38:2e:0f:f2:c0:d4:a2:aa:4c:1d:c6:b4:b9:0a:
83:51:2f:17:57:02:4a:43:13:b2:db:b1:91:04:fc:93:19:03:
50:c0:c3:5c:7b:f4:2b:56:1c:53:09:2a:a7:b0:74:d9:fc:a0:
57:b8:b5:04:d3:4d:eb:9e:85:d9:9e:ce:39:df:60:6a:91:e4:
4f:60:4f:f2:bd:8f:83:ab:99:70:dd:88:e8:95:d1:af:bf:c2:
3f:2d:55:64:eb:31:ab:78:cc:dc:17:27:8b:58:f1:6d:86:8d:
ec:d4:c0:ac:c4:a1:d3:30:18:74:99:16:63:98:37:ef:42:1b:
e1:01:c9:e4:ad:d0:e8:dc:9a:6f:df:e5:9a:8c:7d:79:bd:b7:
4e:4c:ae:8b:fd:0a:78:24:9a:37:7e:34:5a:d2:93:be:06:07:
8d:6e:a2:5e:12:00:89:0a:90:43:93:05:19:b1:37:f2:36:d4:
bc:2e:d5:55:fc:d5:c6:01:eb:21:ec:1b:6e:50:ac:4f:95:81:
92:7c:9d:05:01:9a:43:f0:5c:4d:cd:e7:8c:a6:fa:8c:2a:e6:
82:99:20:5b:02:e7:0f:52:24:23:9a:dd:5f:a0:f3:ab:cd:c8:
18:a6:32:fd:39:f7:d2:c5:1e:1a:77:60:3e:47:55:af:71:67:
c0:37:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 14:47:58 2026 by rpki-client