Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
File: ujfIenFHccKUkkjf-wehVd_jIEI.mft (raw, json)
Hash identifier: VJ2tIZO7bYNQzvVedweRqvpWDT9PgZpfqW8oQzHV8lA=
Subject key identifier: 14:61:E3:D3:20:4D:CF:4F:B2:89:28:E0:A7:8E:A7:44:8E:1F:B2:5E
Authority key identifier: BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
Certificate issuer: /CN=ba37c87a714771c2949248dffb07a155dfe32042
Certificate serial: 01A1DDCC515B78F9B21F6ED13BC9F64E2ECD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
Manifest number: 0130
Signing time: Sun 15 Nov 2026 06:01:57 +0000
Manifest this update: Sun 15 Nov 2026 06:01:57 +0000
Manifest next update: Mon 16 Nov 2026 06:01:57 +0000
Files and hashes: 1: TBVe841E8hTpt49jYkM2WIOXK_k.roa (hash: NOuhNXk/OufxdL7HRlmsabi419cAeXvXPi+Yj06V8K4=)
2: ujfIenFHccKUkkjf-wehVd_jIEI.crl (hash: Cx1d/Dc07W3bQEDYl9VpR8Pgoy6Pwmn6BzqnnP+1J0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:dd:cc:51:5b:78:f9:b2:1f:6e:d1:3b:c9:f6:4e:2e:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba37c87a714771c2949248dffb07a155dfe32042
Validity
Not Before: Nov 15 06:01:57 2026 GMT
Not After : Nov 16 06:01:57 2026 GMT
Subject: CN=1461e3d3204dcf4fb28928e0a78ea7448e1fb25e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:ab:97:ff:e6:4a:37:b5:96:bb:03:8f:93:
a5:8c:f1:8a:73:e7:e2:2b:4c:7e:5b:ad:aa:c5:97:
44:e3:55:bc:c6:1e:85:35:f9:3f:c1:c8:1d:e6:5d:
ce:1a:f2:ea:0b:60:b5:cc:fa:cd:bf:91:d7:7c:e8:
74:27:00:92:8d:10:07:fa:65:38:16:1b:a2:38:b3:
32:c1:b8:1e:80:e6:eb:a3:66:3a:de:c1:c5:db:93:
57:95:78:0c:29:d4:56:70:00:69:95:12:5f:39:48:
16:72:26:b8:0c:82:09:7d:a1:08:71:30:0b:6f:49:
b2:81:1a:a5:d6:e5:6e:c5:06:88:2b:e0:50:e7:8e:
49:1f:6b:d6:a9:32:63:ef:11:2a:f9:36:2f:77:39:
18:21:ca:d9:da:b7:ac:92:15:f8:80:5b:37:1a:a4:
ba:47:55:80:c3:ff:1d:78:02:62:8c:59:42:1b:12:
56:06:59:38:76:96:41:ea:b2:8c:94:a8:0f:6d:76:
df:28:09:da:3a:4f:98:ff:57:70:cb:66:b4:84:4f:
0d:fe:8f:26:6a:91:8f:29:75:61:02:ff:36:9a:e0:
da:cb:d3:90:9c:a0:b7:4e:d7:47:3c:63:39:c2:25:
cc:10:ae:e7:c9:84:8a:99:68:d9:1a:23:55:31:5f:
14:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:61:E3:D3:20:4D:CF:4F:B2:89:28:E0:A7:8E:A7:44:8E:1F:B2:5E
X509v3 Authority Key Identifier:
keyid:BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:f0:75:95:a9:90:87:21:a4:bd:8b:44:a7:05:b0:bb:74:8a:
0c:5b:14:d2:5b:cb:be:47:06:b7:82:94:ae:7d:c9:7b:ce:02:
6f:97:2b:a1:b3:9d:6a:73:92:b4:48:2f:02:01:de:23:fd:e6:
f1:7e:01:97:5e:36:74:e7:93:e3:3f:3d:6a:fd:51:d8:56:d4:
ff:f7:54:14:01:43:25:73:19:46:b3:67:ec:2b:14:a0:14:4b:
92:2c:5b:5c:c5:97:36:06:73:4c:41:62:f7:f2:85:e8:d4:3c:
13:98:cc:88:9d:75:98:33:36:bd:59:eb:25:73:80:30:8b:a3:
fd:1f:6f:18:87:d2:be:e2:3b:c2:5d:35:d0:0a:d3:c3:75:8c:
73:d1:f0:d5:5e:ab:dd:4a:5a:62:da:dc:b8:97:8e:a4:31:a8:
13:ea:62:bf:cc:67:d3:77:11:2d:c9:59:90:93:45:2c:13:36:
76:8b:80:05:f8:5d:cb:d3:ef:b0:be:f6:46:40:af:6d:25:30:
33:91:8f:a8:a8:e5:09:ff:5f:4c:a8:42:ac:80:f5:3d:57:f4:
26:2b:88:cb:49:2c:f5:6a:60:38:5e:60:ee:e4:6a:6f:5e:6d:
37:bf:a7:ba:79:8c:90:79:fc:2b:d6:6e:d7:3f:e5:26:9c:8b:
5e:ec:63:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:19:55 2026 by rpki-client