Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: aal/1EHesARsq7JKEipSXUDUw+56ChHyZKIzvQEpij4=
Subject key identifier: 37:D2:66:0B:D6:0E:8E:36:EF:14:68:2D:37:22:26:EE:3F:1E:C9:58
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 01A1CB56EF9868127A48117C288BDCEC79A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 089D
Signing time: Wed 11 Nov 2026 16:00:34 +0000
Manifest this update: Wed 11 Nov 2026 16:00:34 +0000
Manifest next update: Thu 12 Nov 2026 16:00:34 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: z7sNoa/HhTGjnBFnyD7e/1mGA0VsOSpf+Q3X0+YrSXA=)
2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Nov 2026 14:58:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:cb:56:ef:98:68:12:7a:48:11:7c:28:8b:dc:ec:79:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Nov 11 16:00:34 2026 GMT
Not After : Nov 12 16:00:34 2026 GMT
Subject: CN=37d2660bd60e8e36ef14682d372226ee3f1ec958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:bf:65:e8:44:b9:a0:29:4c:5a:a7:88:84:b7:
0b:64:6a:49:c1:03:60:aa:49:dd:e5:6c:67:4b:12:
fd:c3:6d:b4:1f:d8:6b:bc:14:d5:a0:07:1d:b7:67:
24:1b:1d:24:27:c5:fe:33:46:f8:ed:32:1c:36:19:
2c:3e:7c:c1:57:99:1d:12:c4:5f:bc:46:26:fb:29:
7b:0e:02:6c:4f:f4:2e:c9:a9:72:13:7d:bb:cc:a6:
f3:76:5b:48:21:5c:c9:d1:62:23:62:81:a2:61:41:
c3:0b:6c:b2:c0:a9:3d:b8:6a:33:bd:e5:f5:7f:d8:
b8:00:29:b0:3e:20:a7:73:c7:0b:a1:c5:63:da:60:
50:69:6d:4c:e2:22:b2:3b:91:91:57:44:4c:b2:9f:
da:a0:70:79:e4:60:9f:4b:64:7a:f3:8d:02:21:fc:
57:e0:a6:52:c0:53:4e:ad:fd:b2:8a:af:dd:a5:88:
63:41:35:87:92:e4:01:d2:22:02:4e:29:bd:44:e7:
3f:4d:3c:95:03:24:9c:3c:53:18:2e:7e:33:5c:e1:
83:de:cd:5a:b0:9b:5d:db:1d:c7:c1:ee:ec:1c:08:
46:2b:c7:c4:51:58:c4:72:77:0a:18:45:12:be:54:
75:5f:54:3f:77:03:60:e9:e6:59:d1:c5:27:37:46:
ae:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:D2:66:0B:D6:0E:8E:36:EF:14:68:2D:37:22:26:EE:3F:1E:C9:58
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:e4:63:af:48:fb:39:2e:4f:c1:ba:34:6e:0a:9d:3a:51:dd:
06:8e:c8:a5:ab:40:1d:77:fc:93:b8:4f:99:13:73:25:73:2b:
94:5d:bf:7d:2f:19:8c:b8:d1:f3:e5:68:d5:a8:6b:42:57:7a:
76:14:99:37:7b:88:ee:20:ec:92:4b:30:c4:26:89:68:d6:a2:
2a:03:cf:a9:da:7a:2d:c0:e5:e0:59:a5:2a:47:1e:44:4e:f0:
fa:ce:3e:4e:18:8e:2b:47:3c:97:44:c6:4f:ce:68:88:0d:86:
02:42:42:3b:f3:a8:a4:90:36:b7:d9:e1:1d:2a:e0:0d:71:74:
b2:0b:73:32:5b:ea:bf:7a:1d:71:5f:2e:47:ce:b9:89:45:3c:
7e:84:4f:a7:11:4c:62:5e:1f:9c:ba:bd:81:70:c2:77:b8:d0:
5c:cb:00:f3:7a:35:7f:94:3d:93:1b:33:db:1a:ac:fb:87:19:
dd:c1:6c:05:77:c0:20:6a:e9:bb:54:46:48:e2:30:f3:1c:45:
36:30:2c:00:e9:54:24:6c:66:0b:25:75:ec:66:89:2b:c3:b8:
6a:6c:a0:b8:cf:7f:3c:61:6a:8b:b4:4d:68:bf:bf:19:66:7f:
b4:4c:a9:df:23:a3:c8:82:b6:ce:7a:cb:60:62:02:2a:a4:86:
c0:2d:b3:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHLVu+YaBJ6SBF8KIvc7HmiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDdjZjlmMjc3Njc0NzcxMjBiMWQzYjI2Y2M1N2E2MTA5
OWE3MjQwHhcNMjYxMTExMTYwMDM0WhcNMjYxMTEyMTYwMDM0WjAzMTEwLwYDVQQD
EygzN2QyNjYwYmQ2MGU4ZTM2ZWYxNDY4MmQzNzIyMjZlZTNmMWVjOTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv79l6ES5oClMWqeIhLcLZGpJwQNg
qknd5WxnSxL9w220H9hrvBTVoAcdt2ckGx0kJ8X+M0b47TIcNhksPnzBV5kdEsRf
vEYm+yl7DgJsT/QuyalyE327zKbzdltIIVzJ0WIjYoGiYUHDC2yywKk9uGozveX1
f9i4ACmwPiCnc8cLocVj2mBQaW1M4iKyO5GRV0RMsp/aoHB55GCfS2R6840CIfxX
4KZSwFNOrf2yiq/dpYhjQTWHkuQB0iICTim9ROc/TTyVAyScPFMYLn4zXOGD3s1a
sJtd2x3Hwe7sHAhGK8fEUVjEcncKGEUSvlR1X1Q/dwNg6eZZ0cUnN0au9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfSZgvWDo427xRoLTciJu4/HslYMB8GA1UdIwQY
MBaAFNVHz58ndnR3EgsdOybMV6YQmackMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2Ut
NmY0ZGUwMjBhYWU2LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2UtNmY0ZGUwMjBhYWU2
LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJeRjr0j7
OS5Pwbo0bgqdOlHdBo7IpatAHXf8k7hPmRNzJXMrlF2/fS8ZjLjR8+Vo1ahrQld6
dhSZN3uI7iDskkswxCaJaNaiKgPPqdp6LcDl4FmlKkceRE7w+s4+ThiOK0c8l0TG
T85oiA2GAkJCO/OopJA2t9nhHSrgDXF0sgtzMlvqv3odcV8uR865iUU8foRPpxFM
Yl4fnLq9gXDCd7jQXMsA83o1f5Q9kxsz2xqs+4cZ3cFsBXfAIGrpu1RGSOIw8xxF
NjAsAOlUJGxmCyV17GaJK8O4amyguM9/PGFqi7RNaL+/GWZ/tEyp3yOjyIK2znrL
YGICKqSGwC2zfQ==
-----END CERTIFICATE-----
Generated at Wed Nov 11 21:21:15 2026 by rpki-client