Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: gw7016qQpViNEP6P0WTC5tgigLViIHulPjL6m7QaJZs=
Subject key identifier: 32:40:97:0F:B4:B2:F3:FD:2F:7E:66:67:3F:A5:AE:3A:21:68:09:D9
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019E1F4806AEEA342A108CC7B34AAB2B9CCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 1680
Signing time: Wed 13 May 2026 03:01:14 +0000
Manifest this update: Wed 13 May 2026 03:01:14 +0000
Manifest next update: Thu 14 May 2026 03:01:14 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: kRAMBr8Og+OMOGSd25Bcc3uWuUv2cMHjuVQWwHju3PU=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:48:06:ae:ea:34:2a:10:8c:c7:b3:4a:ab:2b:9c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: May 13 03:01:14 2026 GMT
Not After : May 14 03:01:14 2026 GMT
Subject: CN=3240970fb4b2f3fd2f7e66673fa5ae3a216809d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:be:8d:0f:13:f7:0a:56:fe:5e:0b:89:7e:28:
6f:9e:3a:44:5f:67:99:5a:82:72:ab:2e:70:3c:aa:
bb:a7:97:5f:aa:51:00:71:e7:f0:99:2b:1e:de:4e:
55:99:75:30:66:1d:bb:22:6e:a3:c2:32:f6:f7:fa:
38:22:1d:dc:28:31:d6:d9:a5:42:17:9e:64:53:15:
81:16:97:09:4f:f4:eb:d3:8c:de:96:b0:e9:3f:23:
e9:d3:24:62:eb:ad:2c:5c:25:7a:c2:11:89:ca:44:
0e:a7:fb:c9:10:aa:29:33:8f:b5:82:a5:80:72:70:
84:ed:7f:26:de:54:d9:9a:6a:9f:f8:92:51:d0:cb:
70:ff:1d:a2:9d:05:5a:25:a0:72:25:23:0e:c6:d1:
61:c1:a2:f3:1a:77:a0:b9:81:3b:7b:72:5c:20:8c:
42:a7:fc:9e:fa:6c:19:ef:20:96:3d:1c:56:3d:c3:
5d:66:0d:6c:ca:1e:ad:47:9d:45:ea:d5:0b:41:48:
6a:1d:1b:fe:b7:58:96:f3:9a:62:56:ab:15:7b:5c:
18:24:58:74:0d:90:26:f1:fd:24:e9:a7:97:eb:5c:
ac:8e:a4:86:54:14:1e:5f:db:87:e7:31:2a:0d:7d:
02:7c:7e:7e:17:87:80:1c:e7:e9:9c:55:f5:ef:6f:
f4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:40:97:0F:B4:B2:F3:FD:2F:7E:66:67:3F:A5:AE:3A:21:68:09:D9
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:32:f2:f8:5b:b8:5b:68:c2:b9:30:1b:82:f0:1f:4c:5c:c2:
bd:cb:16:75:26:12:69:20:0f:d4:59:8b:dc:8f:03:36:fe:63:
7d:fb:e7:31:16:76:00:08:90:ee:01:b6:73:36:79:3a:28:ea:
ae:87:28:d1:51:43:00:9e:b8:28:db:cf:bb:ee:13:09:ce:78:
0d:f7:22:48:20:80:5a:bb:42:d8:b5:ad:a2:a0:ad:47:bd:c8:
a4:e9:d8:0b:ed:c0:e6:f9:ee:49:ef:91:b7:56:3d:cb:d5:d6:
70:fc:21:e1:fa:d3:68:34:85:0c:b1:3f:68:00:b6:52:e8:cf:
ed:e0:64:24:9c:6e:d1:be:bf:af:29:1b:bf:ac:63:79:e8:c8:
bb:75:41:e4:74:57:f5:78:8a:3c:03:91:97:4f:85:c9:09:fc:
e8:77:5b:17:00:6f:b3:d0:f5:ae:58:70:4c:ae:aa:0e:aa:18:
dc:c3:87:0c:37:8d:72:b3:3e:f1:a7:1f:29:4c:20:90:bb:91:
e1:a4:a7:1a:aa:00:2e:2c:8c:7b:a2:97:e2:78:06:ad:06:55:
09:e2:b6:c3:91:97:ff:b4:bb:0f:33:48:cf:db:e3:35:b7:ed:
64:8d:fe:4f:0d:f5:42:a2:c9:f2:ff:e1:4c:9c:ab:20:84:1d:
21:b1:b5:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:42:29 2026 by rpki-client