Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: lkTZmC0zzxNgDupPKE19Q/FXCk4ezxXXY49yWDvnxZw=
Subject key identifier: 5F:21:7F:34:AD:80:B8:E5:15:92:32:8E:75:FA:73:3B:72:FF:BF:AC
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 01A0EAE4E82E69C0020E046679D69E1F0FD6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 0B04
Signing time: Tue 29 Sep 2026 02:01:04 +0000
Manifest this update: Tue 29 Sep 2026 02:01:04 +0000
Manifest next update: Wed 30 Sep 2026 02:01:04 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: HkitLOcoi0A5y6bHcqp1UQCdsYPG66gwEVpLPw5JV2U=)
2: n29c-eqwdShZtcEOhZv3Ign1VGo.roa (hash: uxh/IP+egHWNQsX3vB68RQ/0/wzosXKCxI7jga5PL14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 19:32:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e4:e8:2e:69:c0:02:0e:04:66:79:d6:9e:1f:0f:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Sep 29 02:01:04 2026 GMT
Not After : Sep 30 02:01:04 2026 GMT
Subject: CN=5f217f34ad80b8e51592328e75fa733b72ffbfac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:71:3a:98:ce:47:dd:63:fe:15:d2:87:f6:64:
54:ea:ec:5b:be:23:67:27:7b:ab:b8:47:55:74:b6:
6c:56:45:05:20:2b:38:f6:35:7e:60:86:98:7d:fd:
a7:7e:0a:71:f9:84:8e:12:43:65:1a:5d:4d:4b:6b:
9c:a7:f2:ed:b4:b6:f3:e5:17:54:d2:8a:a1:44:c7:
5d:34:32:76:e9:dc:49:7f:3e:61:dd:33:8a:5f:cf:
6b:81:d5:0f:e0:f2:e3:61:19:c9:ab:70:eb:81:0f:
c9:44:eb:a1:17:70:2e:cb:9c:7d:a6:72:a9:47:9f:
3a:e0:c3:01:14:bd:dd:2d:b6:2c:3a:83:6a:d5:cf:
c3:36:44:b2:88:c0:75:28:25:7e:1f:ce:77:e4:a3:
3f:c0:61:46:5b:36:69:ba:74:ba:41:4e:52:02:3b:
86:7b:dd:ed:92:8a:b0:1a:ea:29:2b:1e:30:d9:04:
bc:b1:52:a2:41:d0:7d:5c:57:c8:32:2a:a7:bb:4b:
19:c2:4f:8e:3c:24:98:8d:ab:c4:af:42:b6:1b:bb:
91:87:af:5f:5c:02:57:04:f0:76:40:8e:19:6f:3c:
a7:7c:31:6f:10:45:d6:05:46:65:0f:2a:d1:44:49:
aa:82:21:34:39:7b:74:4c:fa:74:2d:8f:af:d3:9a:
df:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:21:7F:34:AD:80:B8:E5:15:92:32:8E:75:FA:73:3B:72:FF:BF:AC
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:f4:b1:d8:ad:1a:0d:e2:cc:09:c3:64:42:89:c2:f3:71:c5:
ff:86:64:06:45:93:9e:52:c2:47:56:79:96:52:6e:68:10:1e:
7f:01:20:3c:03:c3:71:a2:50:94:dc:63:ad:47:04:4d:71:df:
a4:77:aa:6f:3d:b0:c1:ac:0b:b9:6c:9f:d1:ef:ce:54:22:12:
2a:bd:76:6a:8e:04:61:33:d9:2b:fb:65:a5:4b:9f:b0:1f:ec:
dc:1a:f9:d2:e9:65:46:82:44:85:9a:fc:e5:8e:8e:66:67:1a:
48:6a:2b:5b:c9:e8:1a:72:5b:66:48:86:e4:81:2e:91:a8:0f:
a1:46:32:72:59:d6:26:2d:1b:70:51:c6:7a:fe:51:04:d6:d0:
f8:95:81:4f:f3:60:57:bf:0b:55:bb:14:25:5b:bd:a8:f2:e9:
5f:f7:5f:d5:8a:48:91:80:e4:9e:35:34:88:ae:d4:d6:3b:ed:
f2:bc:50:63:1f:f7:3b:9b:bc:d6:d8:d3:6e:84:4a:ec:b3:ab:
73:dd:1e:be:1a:a0:3b:df:80:74:f6:fa:10:60:52:e3:f7:3a:
b0:01:6e:a4:1f:aa:10:85:44:10:1d:b0:f1:5e:82:78:98:b0:
2f:9c:b2:37:74:50:4d:87:65:bb:5e:a6:6e:83:8c:43:3f:88:
4b:11:e3:9b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDq5OguacACDgRmedaeHw/WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNWFkMTdmNGM2MjBkNThkNDUzZDVmNmQ3YzkyMzNmY2Ux
MjY0OTkwHhcNMjYwOTI5MDIwMTA0WhcNMjYwOTMwMDIwMTA0WjAzMTEwLwYDVQQD
Eyg1ZjIxN2YzNGFkODBiOGU1MTU5MjMyOGU3NWZhNzMzYjcyZmZiZmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXE6mM5H3WP+FdKH9mRU6uxbviNn
J3uruEdVdLZsVkUFICs49jV+YIaYff2nfgpx+YSOEkNlGl1NS2ucp/LttLbz5RdU
0oqhRMddNDJ26dxJfz5h3TOKX89rgdUP4PLjYRnJq3DrgQ/JROuhF3Auy5x9pnKp
R5864MMBFL3dLbYsOoNq1c/DNkSyiMB1KCV+H8535KM/wGFGWzZpunS6QU5SAjuG
e93tkoqwGuopKx4w2QS8sVKiQdB9XFfIMiqnu0sZwk+OPCSYjavEr0K2G7uRh69f
XAJXBPB2QI4ZbzynfDFvEEXWBUZlDyrRREmqgiE0OXt0TPp0LY+v05rfBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF8hfzStgLjlFZIyjnX6czty/7+sMB8GA1UdIwQY
MBaAFFBa0X9MYg1Y1FPV9tfJIz/OEmSZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEt
ZmU2YmIwNDkzMzdkLzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9hMmZjMTgtNTM0Yi00NDU0LTliZDEtZmU2YmIwNDkzMzdk
LzEvVUZyUmYweGlEVmpVVTlYMjE4a2pQODRTWkprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArPSx2K0a
DeLMCcNkQonC83HF/4ZkBkWTnlLCR1Z5llJuaBAefwEgPAPDcaJQlNxjrUcETXHf
pHeqbz2wwawLuWyf0e/OVCISKr12ao4EYTPZK/tlpUufsB/s3Br50ullRoJEhZr8
5Y6OZmcaSGorW8noGnJbZkiG5IEukagPoUYyclnWJi0bcFHGev5RBNbQ+JWBT/Ng
V78LVbsUJVu9qPLpX/df1YpIkYDknjU0iK7U1jvt8rxQYx/3O5u81tjTboRK7LOr
c90evhqgO9+AdPb6EGBS4/c6sAFupB+qEIVEEB2w8V6CeJiwL5yyN3RQTYdlu16m
boOMQz+ISxHjmw==
-----END CERTIFICATE-----
Generated at Tue Sep 29 04:51:10 2026 by rpki-client