Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: Qc1/F0iuJFiqukMaQKNEKUy5HG8ukINSHYF+6EsZtKA=
Subject key identifier: F5:15:0D:B7:1E:F9:E8:3C:F2:AC:10:6D:67:7E:31:A7:9B:B7:52:D5
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 01A0D200C0B44F46DE5A7D02BAC77A706BF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1A7D
Signing time: Thu 24 Sep 2026 06:00:59 +0000
Manifest this update: Thu 24 Sep 2026 06:00:59 +0000
Manifest next update: Fri 25 Sep 2026 06:00:59 +0000
Files and hashes: 1: CmF5mSEXoMC1Oy8BmmVOJziTGbs.roa (hash: 1rLmMiDPBYELVghvKsD5T99v1Kom/oBVCDlNcbfcIwE=)
2: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: eXN90tTS/nWaeEg11MiqkEkree55x7612NdmifEjArQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 06:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:00:c0:b4:4f:46:de:5a:7d:02:ba:c7:7a:70:6b:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Sep 24 06:00:59 2026 GMT
Not After : Sep 25 06:00:59 2026 GMT
Subject: CN=f5150db71ef9e83cf2ac106d677e31a79bb752d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:ec:64:43:93:c4:02:d4:c1:74:29:bd:50:1e:
8e:ef:b1:52:56:2b:10:82:90:76:f7:2d:d3:93:f3:
11:da:be:0f:de:6b:47:d9:4f:8f:09:16:7d:0b:3f:
08:8c:77:fa:f4:1c:71:d0:6a:57:92:44:b1:e9:36:
c2:0f:ed:2e:59:33:0d:6d:0c:9d:af:7d:51:ba:c5:
30:46:60:8b:7e:43:5e:7a:d1:28:e3:f7:bd:71:a2:
75:c3:f1:c2:11:9f:a2:41:5c:7c:90:24:4f:2c:84:
2e:c0:56:e2:50:b2:d3:3a:a7:02:43:06:52:2a:f7:
9d:dc:69:24:b8:45:12:e2:94:45:96:33:99:e6:0a:
76:2c:e1:c7:c4:36:28:cf:51:b1:03:9c:cd:93:e1:
68:1e:37:01:41:15:38:3c:8b:cc:a7:a0:a6:95:1f:
3e:09:57:5f:fd:74:a7:42:58:d1:bd:ef:46:cd:21:
0f:d1:98:bb:e8:ef:4f:ba:28:11:ab:da:c7:26:2d:
f6:ef:b5:c6:90:33:d4:44:14:f8:31:dd:a9:8f:3b:
65:bb:13:36:ef:b0:28:46:eb:72:45:2e:b1:fa:7a:
19:02:ba:80:d0:82:c1:c3:94:e4:db:4a:ae:0a:99:
1a:38:80:03:8f:90:2e:30:21:7e:89:ae:5f:6f:be:
8c:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:15:0D:B7:1E:F9:E8:3C:F2:AC:10:6D:67:7E:31:A7:9B:B7:52:D5
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:2c:c2:44:be:42:33:d6:78:00:ba:db:cc:28:f6:8d:2b:39:
ab:f7:f4:0e:3d:c3:8f:41:ee:70:12:16:03:d3:81:5c:f6:3f:
8d:7b:36:33:20:3e:40:4b:e2:d6:29:eb:2e:81:f7:23:76:0a:
1b:3d:4b:57:1e:2b:1d:87:d1:53:a1:71:7d:e5:6a:86:45:23:
c0:80:2f:f6:d5:4a:6d:cb:57:c8:9d:b3:58:12:ff:9c:f8:0d:
c5:bf:46:6b:3c:f9:4d:4c:8a:ed:3f:90:61:1d:ef:d6:a6:2b:
2d:66:dc:e2:29:6a:65:cd:5a:76:2b:1f:fd:12:90:15:c0:a3:
54:25:dd:13:8c:84:5d:70:c8:e3:d1:eb:d3:3d:73:b4:46:e0:
35:68:5c:33:64:ea:a4:f6:41:f4:80:97:31:81:02:81:70:7c:
07:16:d2:39:29:bf:67:15:96:84:5f:d6:f1:7d:a1:ec:c2:a4:
e4:6c:c6:57:da:cd:41:26:a1:56:87:8a:6e:0a:37:0e:e1:d0:
e3:20:c3:00:06:6e:67:a8:18:96:be:80:0e:05:01:93:d2:0e:
be:57:2b:05:f2:32:df:34:0c:59:89:53:f2:f9:01:ae:e4:f1:
40:e1:ee:0e:62:7b:81:30:30:80:9b:35:4c:39:29:37:f2:ba:
5d:a4:d3:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:09:42 2026 by rpki-client