Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: UnIM6ZH6CVirgFZ6zkY3CRJbqlSCSixRuLLAsUWOA1I=
Subject key identifier: 8C:5E:EE:3D:05:96:71:36:E0:73:A4:AF:A8:87:2D:D1:2B:64:64:14
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 019D2996D1FE9BAD901C757CED78F5D62FA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 0637
Signing time: Thu 26 Mar 2026 10:00:43 +0000
Manifest this update: Thu 26 Mar 2026 10:00:43 +0000
Manifest next update: Fri 27 Mar 2026 10:00:43 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: A8/K06KeB9QWQuurZmyqETACPvgjIXR3lJuyjQmm9xs=)
2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:d1:fe:9b:ad:90:1c:75:7c:ed:78:f5:d6:2f:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Mar 26 10:00:43 2026 GMT
Not After : Mar 27 10:00:43 2026 GMT
Subject: CN=8c5eee3d05967136e073a4afa8872dd12b646414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:97:c4:5a:92:71:ac:dd:28:05:d2:95:70:
26:f2:ac:4a:78:3f:bf:f5:a3:01:9b:61:99:a6:fe:
e6:f3:c2:69:96:77:39:ed:af:76:16:81:cf:2e:c5:
7a:ae:e5:cb:f8:cb:c7:d3:83:15:af:93:a5:65:10:
ac:61:94:85:bc:5b:bc:0e:aa:b1:a2:06:a9:fc:19:
b1:f1:b3:97:ab:8d:56:6d:8d:f0:65:7a:a4:8b:0e:
95:ae:95:7b:78:aa:53:f4:c7:94:2f:e6:18:b4:18:
fd:95:56:58:5e:a7:97:c1:6c:32:14:22:92:a9:71:
e2:7c:c1:ea:25:31:b0:44:54:23:04:fa:42:23:20:
3d:ab:44:2d:4c:19:6f:c0:03:02:d2:5f:ea:4e:ae:
17:b9:da:45:dc:5e:91:c0:fe:33:e7:c9:93:3e:b4:
8d:29:4f:5e:95:56:9b:63:8f:53:cf:61:4e:a0:37:
8c:08:cd:5c:30:50:5f:4c:08:0c:da:c9:c5:78:10:
97:09:fe:4c:4d:d5:85:87:bf:ef:1f:cc:5c:32:14:
0e:21:6e:13:f0:08:63:1b:85:78:0f:9f:10:43:e7:
f5:0a:b4:1b:3c:bc:61:da:71:4e:05:be:36:41:e0:
97:eb:b4:c3:1b:48:41:1d:68:3d:62:1f:dc:bd:81:
91:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:5E:EE:3D:05:96:71:36:E0:73:A4:AF:A8:87:2D:D1:2B:64:64:14
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ee:43:60:4d:4e:02:8b:70:4f:04:9d:d3:3e:76:d8:ca:f0:
49:2a:b5:54:a5:ce:8d:af:86:be:b9:95:b7:eb:1a:3d:ea:6f:
50:b3:a0:dd:b8:5e:20:42:f4:94:61:03:ee:67:14:59:f4:25:
eb:96:e5:b4:fd:73:fa:9a:5b:b5:a7:81:08:5b:6a:89:22:e0:
87:57:7d:1f:a3:b6:89:2f:6b:47:fe:c2:ba:e8:2f:57:71:49:
95:94:ac:eb:33:88:3f:61:d4:e9:d1:63:bf:f2:3d:01:ed:c6:
7a:ff:b7:41:0b:e2:93:c1:9a:3e:3a:55:ab:30:ad:f7:bd:f4:
5b:f1:54:b2:6f:3c:b5:6e:f5:1a:5c:ef:27:01:3a:4e:cd:7a:
b4:e3:d9:14:ad:aa:62:81:bd:14:75:10:85:6b:8a:2c:69:b3:
47:b4:c9:5a:7f:27:d8:30:96:3b:1b:46:81:72:92:58:34:6b:
a0:a7:50:9f:da:f5:23:e6:09:6b:c5:b9:e9:93:01:0a:8e:f6:
da:f5:a2:80:55:f4:83:a1:36:a7:7d:cc:f0:d6:6a:ab:ef:1c:
2d:c2:47:b6:43:4f:fa:34:e9:61:b5:42:6a:4d:b7:ac:5f:ed:
19:13:d7:7e:22:ee:1a:bc:e3:19:f3:f6:80:a1:44:a3:6c:8e:
6c:3f:79:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pltH+m62QHHV87Xj11i+gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1NDdjZjlmMjc3Njc0NzcxMjBiMWQzYjI2Y2M1N2E2MTA5
OWE3MjQwHhcNMjYwMzI2MTAwMDQzWhcNMjYwMzI3MTAwMDQzWjAzMTEwLwYDVQQD
Eyg4YzVlZWUzZDA1OTY3MTM2ZTA3M2E0YWZhODg3MmRkMTJiNjQ2NDE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsgWXxFqScazdKAXSlXAm8qxKeD+/
9aMBm2GZpv7m88Jplnc57a92FoHPLsV6ruXL+MvH04MVr5OlZRCsYZSFvFu8Dqqx
ogap/Bmx8bOXq41WbY3wZXqkiw6VrpV7eKpT9MeUL+YYtBj9lVZYXqeXwWwyFCKS
qXHifMHqJTGwRFQjBPpCIyA9q0QtTBlvwAMC0l/qTq4XudpF3F6RwP4z58mTPrSN
KU9elVabY49Tz2FOoDeMCM1cMFBfTAgM2snFeBCXCf5MTdWFh7/vH8xcMhQOIW4T
8AhjG4V4D58QQ+f1CrQbPLxh2nFOBb42QeCX67TDG0hBHWg9Yh/cvYGRlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIxe7j0FlnE24HOkr6iHLdErZGQUMB8GA1UdIwQY
MBaAFNVHz58ndnR3EgsdOybMV6YQmackMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2Ut
NmY0ZGUwMjBhYWU2LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi8wNjNlNTktOWU5NC00ZTkxLThiN2UtNmY0ZGUwMjBhYWU2
LzEvMVVmUG55ZDJkSGNTQ3gwN0pzeFhwaENacHlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiu5DYE1O
AotwTwSd0z522MrwSSq1VKXOja+GvrmVt+saPepvULOg3bheIEL0lGED7mcUWfQl
65bltP1z+ppbtaeBCFtqiSLgh1d9H6O2iS9rR/7CuugvV3FJlZSs6zOIP2HU6dFj
v/I9Ae3Gev+3QQvik8GaPjpVqzCt9730W/FUsm88tW71GlzvJwE6Ts16tOPZFK2q
YoG9FHUQhWuKLGmzR7TJWn8n2DCWOxtGgXKSWDRroKdQn9r1I+YJa8W56ZMBCo72
2vWigFX0g6E2p33M8NZqq+8cLcJHtkNP+jTpYbVCak23rF/tGRPXfiLuGrzjGfP2
gKFEo2yObD95yA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:19:04 2026 by rpki-client