Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
File: ujfIenFHccKUkkjf-wehVd_jIEI.mft (raw, json)
Hash identifier: jWXUqQTY0P/8/l/a0lv4c+j5VTjAVVDjYszCg5gb9RQ=
Subject key identifier: D9:0D:37:88:7B:37:3D:04:1C:E1:01:53:D7:52:F3:F9:6D:18:FF:2E
Authority key identifier: BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
Certificate issuer: /CN=ba37c87a714771c2949248dffb07a155dfe32042
Certificate serial: 01A0D53960FBAE6FB475AEF85A44DD5DD84C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
Manifest number: A7
Signing time: Thu 24 Sep 2026 21:01:42 +0000
Manifest this update: Thu 24 Sep 2026 21:01:42 +0000
Manifest next update: Fri 25 Sep 2026 21:01:42 +0000
Files and hashes: 1: TBVe841E8hTpt49jYkM2WIOXK_k.roa (hash: NOuhNXk/OufxdL7HRlmsabi419cAeXvXPi+Yj06V8K4=)
2: ujfIenFHccKUkkjf-wehVd_jIEI.crl (hash: o3vbwSnkuw8B51kdj4sojUxvRrFvj8GLURan5hleIf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:39:60:fb:ae:6f:b4:75:ae:f8:5a:44:dd:5d:d8:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba37c87a714771c2949248dffb07a155dfe32042
Validity
Not Before: Sep 24 21:01:42 2026 GMT
Not After : Sep 25 21:01:42 2026 GMT
Subject: CN=d90d37887b373d041ce10153d752f3f96d18ff2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:ed:07:c7:50:50:92:06:f4:63:a8:76:93:
41:7e:d3:9b:9c:95:44:6b:ac:24:d5:66:09:e7:82:
83:cc:ce:2f:88:b7:51:c5:4e:e8:4d:17:f5:37:83:
ff:4e:70:ef:ca:40:48:e9:6b:8a:8c:31:21:31:e9:
d0:1a:ba:6b:25:46:12:96:aa:a0:be:78:ca:f6:62:
bc:72:7e:14:f8:9f:06:0d:25:c3:30:ca:69:da:7c:
bf:90:a7:af:10:df:07:47:f0:5d:23:e5:09:47:04:
e1:12:8c:33:5c:da:bb:f1:9e:8d:36:10:4f:5a:6e:
45:f6:79:69:08:81:6a:57:af:5a:2e:9a:58:d0:3c:
c2:1c:07:f7:67:bb:fe:05:13:45:cd:51:f0:6d:66:
34:f8:c6:f3:df:bd:49:00:13:26:62:17:bc:5b:3e:
3b:a4:da:a4:2a:79:73:ce:6b:12:12:02:c6:61:f3:
33:a2:2a:49:39:e0:37:9a:ea:b7:7b:06:81:87:99:
ab:fa:2a:57:12:2a:8d:94:58:8b:d8:7a:b5:f1:8d:
25:e2:04:b6:09:b8:81:96:b7:d4:b0:3f:a9:9c:16:
77:60:14:8b:c7:a9:85:85:1b:4d:ae:89:39:e4:a4:
fd:bb:bb:fb:2e:ba:34:e7:57:1d:71:14:ff:80:b1:
04:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:0D:37:88:7B:37:3D:04:1C:E1:01:53:D7:52:F3:F9:6D:18:FF:2E
X509v3 Authority Key Identifier:
keyid:BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:75:3f:e7:82:d7:bb:e4:d6:0e:c6:09:d3:ef:99:3d:dd:fd:
a1:f9:30:6e:c6:31:16:48:49:06:e7:1e:b5:c9:43:87:02:85:
35:e2:1c:e8:00:23:11:0a:d1:87:cf:06:89:f4:7b:86:47:44:
b1:e3:06:3f:e3:53:39:dd:75:8d:9b:47:78:40:71:de:d6:f4:
ad:ac:4d:db:2c:75:a1:26:6c:4e:22:e2:08:62:ff:9d:27:01:
2f:fb:d5:0e:bb:4f:1b:92:e8:28:c7:5f:67:48:3f:f8:96:97:
f1:c4:65:bc:c3:7d:2a:7e:0d:02:23:4b:fd:60:e5:6d:30:63:
0d:74:5b:bd:e1:2c:b0:21:08:6e:aa:bc:e5:06:6b:4e:a4:81:
26:cd:f2:ad:4b:c0:29:f6:bf:40:cc:c8:ba:42:e2:e1:bd:ea:
d6:52:55:5e:83:d0:52:e6:cb:d9:96:0c:78:35:7e:3c:71:60:
43:7f:be:09:03:f7:1a:2e:1e:f9:ce:e9:07:38:e3:a9:b6:31:
14:93:8b:5d:5a:26:94:b0:05:9d:72:12:89:6b:27:ac:5e:de:
8e:2c:ce:f0:f5:11:60:36:83:9f:1d:bc:12:22:c8:1d:73:ca:
d3:47:38:53:da:cf:0c:ab:0e:65:49:db:cf:a9:c8:3a:a1:13:
57:81:1f:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:31:14 2026 by rpki-client