Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: TX8J57N2oKGB/ko6tZWWEhVVwN4Y9sQfLFuukk19NCk=
Subject key identifier: 3D:17:B9:17:2D:6E:A5:53:4F:1C:1A:3E:08:53:CA:E2:46:D5:8C:12
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 01A0D872C4E502DC5639316FA33131CFD857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 17E9
Signing time: Fri 25 Sep 2026 12:03:15 +0000
Manifest this update: Fri 25 Sep 2026 12:03:15 +0000
Manifest next update: Sat 26 Sep 2026 12:03:15 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: 8GhvE9Czi31ZIzgDrBxaP1XTLOE5e6Rq3pvy7VwaajI=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:72:c4:e5:02:dc:56:39:31:6f:a3:31:31:cf:d8:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Sep 25 12:03:15 2026 GMT
Not After : Sep 26 12:03:15 2026 GMT
Subject: CN=3d17b9172d6ea5534f1c1a3e0853cae246d58c12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:75:4d:d2:9b:3c:0f:23:d4:64:5b:7c:d8:4e:
35:85:41:3b:66:f3:4f:60:12:6c:74:b5:4e:e0:aa:
c2:7c:d0:a0:d1:4f:6b:06:ba:18:2b:14:08:de:bf:
8f:fe:a9:f5:fe:e2:92:0a:d6:9d:b5:80:5f:fe:60:
52:fe:2f:fc:92:51:51:b4:e9:f6:42:8a:f8:1e:2f:
6f:ae:72:d4:10:5c:6a:71:5b:90:51:e9:76:0b:2f:
fd:e5:78:cd:60:44:44:93:1f:21:19:df:45:94:dd:
8d:d5:4c:b7:4f:f5:f9:1c:05:7a:62:aa:2c:ed:e2:
3c:8a:12:c9:d9:95:14:2a:30:a3:2c:f9:b1:b5:9a:
ed:3e:37:46:be:a6:f0:38:9d:d4:c7:89:8a:d9:1a:
6e:91:43:9a:bd:99:a7:fe:3f:a7:80:7b:f2:3d:4a:
45:05:25:a5:87:30:72:64:c5:54:35:67:45:2e:ef:
c0:09:fe:5e:e7:24:d7:db:d4:02:37:1b:2c:68:6a:
33:91:43:82:fe:10:22:4a:97:66:c8:c8:10:e1:a0:
1e:54:92:2e:f5:51:c7:c1:8c:88:39:6c:64:28:04:
d5:a5:cc:f9:88:2a:20:1d:c8:ad:86:5f:02:47:79:
d7:6e:f6:65:c0:94:ad:93:7c:0f:6d:be:ca:be:dd:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:17:B9:17:2D:6E:A5:53:4F:1C:1A:3E:08:53:CA:E2:46:D5:8C:12
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:e9:11:64:a4:63:f6:f5:a9:99:d2:6b:c0:29:a4:7a:31:3e:
9e:0a:86:93:fb:7b:73:13:9a:6e:bb:29:ac:f7:c5:39:78:ed:
88:ed:48:5f:35:1c:ba:74:96:b6:2d:b2:4f:85:95:19:4c:5d:
84:3e:40:ed:83:00:8e:f7:fd:78:f6:6a:50:c6:27:eb:f1:60:
6e:08:65:1f:56:e7:71:73:d5:c2:97:5a:d7:2b:14:1e:7c:de:
9e:22:95:94:e6:93:86:6f:f9:8b:df:c2:82:63:9a:d2:5b:ee:
37:32:77:d1:7e:e4:1e:f3:e0:05:f9:d9:c6:62:65:0a:31:b1:
fc:c9:8a:71:65:df:ef:cd:41:1b:f4:65:ee:02:0d:39:f1:20:
a7:7e:d6:02:05:01:5c:4a:28:41:67:d7:e7:d3:51:a3:91:17:
b6:39:a6:98:4e:fc:51:46:18:c4:c4:9d:5c:81:43:2c:2d:9e:
c4:70:1e:22:0b:97:a7:25:f6:cf:47:35:e0:ba:41:a2:59:9b:
c2:5e:21:8c:f4:93:ac:e6:aa:fd:80:c8:d6:ec:3a:77:be:1a:
b2:21:ac:f1:80:66:4a:73:da:f1:dd:1c:a6:16:1d:90:d7:04:
34:8e:5b:ba:75:a2:ab:b0:44:86:d3:e0:e7:05:52:b5:0a:85:
fc:c5:51:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYcsTlAtxWOTFvozExz9hXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZjQ3Nzk1NzVjYjliZjA1ODI0MzI4N2U5ODIzNGRlY2E5
MTFmYzkwHhcNMjYwOTI1MTIwMzE1WhcNMjYwOTI2MTIwMzE1WjAzMTEwLwYDVQQD
EygzZDE3YjkxNzJkNmVhNTUzNGYxYzFhM2UwODUzY2FlMjQ2ZDU4YzEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4HVN0ps8DyPUZFt82E41hUE7ZvNP
YBJsdLVO4KrCfNCg0U9rBroYKxQI3r+P/qn1/uKSCtadtYBf/mBS/i/8klFRtOn2
Qor4Hi9vrnLUEFxqcVuQUel2Cy/95XjNYEREkx8hGd9FlN2N1Uy3T/X5HAV6Yqos
7eI8ihLJ2ZUUKjCjLPmxtZrtPjdGvqbwOJ3Ux4mK2RpukUOavZmn/j+ngHvyPUpF
BSWlhzByZMVUNWdFLu/ACf5e5yTX29QCNxssaGozkUOC/hAiSpdmyMgQ4aAeVJIu
9VHHwYyIOWxkKATVpcz5iCogHcithl8CR3nXbvZlwJStk3wPbb7Kvt2qAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0XuRctbqVTTxwaPghTyuJG1YwSMB8GA1UdIwQY
MBaAFLn0d5V1y5vwWCQyh+mCNN7KkR/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAt
Y2Q5ZmYwNTUyZjkyLzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC9mNmQyZGQtMDNhNy00ZjFmLWI4OTAtY2Q5ZmYwNTUyZjky
LzEvdWZSM2xYWExtX0JZSkRLSDZZSTAzc3FSSDhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVOkRZKRj
9vWpmdJrwCmkejE+ngqGk/t7cxOabrsprPfFOXjtiO1IXzUcunSWti2yT4WVGUxd
hD5A7YMAjvf9ePZqUMYn6/FgbghlH1bncXPVwpda1ysUHnzeniKVlOaThm/5i9/C
gmOa0lvuNzJ30X7kHvPgBfnZxmJlCjGx/MmKcWXf781BG/Rl7gINOfEgp37WAgUB
XEooQWfX59NRo5EXtjmmmE78UUYYxMSdXIFDLC2exHAeIguXpyX2z0c14LpBolmb
wl4hjPSTrOaq/YDI1uw6d74asiGs8YBmSnPa8d0cphYdkNcENI5bunWiq7BEhtPg
5wVStQqF/MVRYQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 19:05:48 2026 by rpki-client