Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
File: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft (raw, json)
Hash identifier: lZTJ9s2vYv+zkiGGmO0s4jxa2uKzLFDrq+HNnbiDJRs=
Subject key identifier: 8A:8D:28:D6:73:D2:4F:32:36:5D:E2:D4:8E:C2:1F:BB:B9:AA:10:9D
Authority key identifier: 50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
Certificate issuer: /CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Certificate serial: 01A0CE92137B680975A6B23F9C3B645C0911
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
Manifest number: 0347
Signing time: Wed 23 Sep 2026 14:01:14 +0000
Manifest this update: Wed 23 Sep 2026 14:01:14 +0000
Manifest next update: Thu 24 Sep 2026 14:01:14 +0000
Files and hashes: 1: UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl (hash: LMFLCcjoiSPV+fhMjQe+6qC5zwMRKr1TPSZqFO5KkME=)
2: ecHMOQxFC5KFCSuIYE00HmqpzWQ.roa (hash: gU+ReNKkd+2JNIkLsRTGjoAlGLm5qsdMFS7ADUk7csg=)
3: xrN_zPHRCcwLVDPLH1CVZ-5BeNM.roa (hash: I0/MQBNDpvY1DEGzG+/FSs7ePj5UnSEyZkAgCS5qVJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:92:13:7b:68:09:75:a6:b2:3f:9c:3b:64:5c:09:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505122f4dea7df3927d4011b3087d4d067f9d19a
Validity
Not Before: Sep 23 14:01:14 2026 GMT
Not After : Sep 24 14:01:14 2026 GMT
Subject: CN=8a8d28d673d24f32365de2d48ec21fbbb9aa109d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:c3:3b:b9:16:f8:40:f3:f2:c0:40:ee:b4:55:
07:5a:32:75:e0:33:00:d5:5d:91:24:ca:23:d9:72:
11:91:68:72:9e:98:e0:2b:99:81:3b:0b:96:f9:3d:
57:21:a2:9b:7e:7d:a3:ad:31:46:d6:99:c7:e6:ed:
85:d0:96:c0:cf:8f:b7:bf:e0:9d:95:81:1c:e8:c2:
97:58:99:5f:6c:e2:2d:7c:0e:7f:80:cb:8e:36:ee:
d9:f9:20:7f:7e:21:49:58:cb:5c:79:5b:cb:77:dd:
11:2c:60:c5:96:57:34:97:14:19:28:40:b8:db:d0:
97:a5:01:a4:32:01:23:0c:40:a3:1b:36:fd:64:67:
4e:c4:1f:f8:d6:48:a2:69:59:46:13:c7:ee:40:05:
46:cc:ed:21:03:38:73:82:fd:8f:a3:6b:55:23:1a:
da:33:a2:d2:8f:37:ec:eb:ff:d4:13:9e:96:da:75:
e7:1f:68:62:67:d9:ac:a4:db:48:4c:9e:26:6f:8a:
d1:a8:43:44:a7:d3:f0:cd:83:4b:19:c1:e9:de:a9:
01:00:d1:7c:d7:a7:15:db:07:83:20:94:0a:09:7e:
7a:0e:cc:9e:d3:b4:e6:63:57:31:fa:e6:9f:9c:d5:
8d:4f:d3:85:af:31:00:e6:78:b2:ab:50:c8:89:4e:
7d:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:8D:28:D6:73:D2:4F:32:36:5D:E2:D4:8E:C2:1F:BB:B9:AA:10:9D
X509v3 Authority Key Identifier:
keyid:50:51:22:F4:DE:A7:DF:39:27:D4:01:1B:30:87:D4:D0:67:F9:D1:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/74a8f4-0aeb-44b3-8dd4-d3f24ae7b87b/1/UFEi9N6n3zkn1AEbMIfU0Gf50Zo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:5a:b9:f3:fe:73:0a:92:eb:73:96:85:84:31:51:1f:ab:96:
e4:94:49:de:b9:12:ac:c6:21:b4:01:8a:72:c0:68:15:38:0e:
2d:9c:57:35:88:22:c1:20:3c:9f:50:4a:f4:d0:53:3b:1b:2f:
b4:88:0c:f8:7a:4c:9d:68:85:e3:b7:ae:d3:ba:ea:2c:0b:42:
51:b5:2e:36:b6:21:2d:55:fa:e2:96:d4:06:6b:d7:cf:18:d8:
2a:36:ff:61:fa:ab:2f:a3:c2:a6:ef:9b:5b:03:7e:08:6e:ae:
b8:d0:72:ab:35:bd:a7:86:64:50:08:96:37:94:12:5b:6c:05:
44:55:17:0e:cd:60:53:2a:3d:04:4a:d3:e0:43:3f:5f:de:a6:
c2:61:30:8b:7b:e1:92:d0:91:ff:7f:a8:1c:a6:c4:b5:c6:0c:
92:8a:96:80:29:6a:89:1c:82:e3:e7:c1:f0:e0:1f:23:5b:38:
cf:fd:8a:96:79:d6:b1:b9:31:39:de:9a:c3:1e:3a:f3:10:85:
07:e3:4d:56:9e:32:63:e0:18:b3:7b:78:b5:4a:f1:bb:2d:9a:
c2:f4:c0:44:50:7d:0d:48:35:f4:0f:47:de:8b:24:a4:d0:d9:
d3:a8:b3:a4:87:63:b2:5e:0b:bd:38:68:35:cc:5c:87:19:10:
e7:d2:92:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 23:19:54 2026 by rpki-client