Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: 7/EWOnCt4LEVFkxaYS1Kp6xpNEYBRrVhAHHQ1oyTA84=
Subject key identifier: BA:F4:B6:BB:FC:1A:10:D0:4B:33:97:63:5C:41:49:66:D2:A5:4E:7C
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 01A0D048F98FB4EEE882F591E6F8884A1D18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 081B
Signing time: Wed 23 Sep 2026 22:00:38 +0000
Manifest this update: Wed 23 Sep 2026 22:00:38 +0000
Manifest next update: Thu 24 Sep 2026 22:00:38 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: mGm60aj3Zho6h88dkhSnRPZ2ZuJkIsdqwsKZ9v+Zt2A=)
2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:f9:8f:b4:ee:e8:82:f5:91:e6:f8:88:4a:1d:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Sep 23 22:00:38 2026 GMT
Not After : Sep 24 22:00:38 2026 GMT
Subject: CN=baf4b6bbfc1a10d04b3397635c414966d2a54e7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ca:19:bb:1e:47:e0:c2:d1:a9:ab:bd:48:3e:
92:38:20:01:26:85:77:21:99:8c:21:fc:f7:0c:55:
70:e3:54:5f:1e:8a:60:96:39:e5:fa:41:39:3b:30:
94:12:32:db:d5:18:c8:5c:b3:65:7a:a0:ec:9e:1c:
87:d1:44:f2:74:0f:2c:11:b6:01:62:15:d1:6c:64:
a7:9e:05:ed:93:ac:5f:3c:74:41:59:ee:c5:73:57:
d3:15:72:53:6c:d2:6c:2f:d8:31:cf:43:e0:68:9c:
f7:6d:a5:46:c5:82:56:c3:4b:9a:bc:45:be:77:99:
d2:9e:26:20:53:98:e5:ec:f1:2f:af:43:f8:fb:f8:
63:1a:57:55:b5:c4:fe:ca:af:16:24:42:40:13:bf:
cd:e1:22:1c:20:d7:df:b3:40:61:2e:ae:c6:fa:3c:
25:f1:fc:90:0e:fe:86:5c:b3:85:1b:11:9e:15:73:
3c:58:82:9d:b1:84:06:21:97:48:32:a9:59:a6:ac:
d5:9c:14:79:ab:99:38:52:16:75:05:50:48:84:df:
7c:49:e3:9d:25:8f:6d:86:06:c3:20:87:06:06:29:
d3:18:cd:f6:78:4a:fa:9f:a3:e2:c2:60:e6:88:e6:
41:1b:b3:b1:20:72:13:33:ca:69:16:50:f3:8a:0b:
70:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F4:B6:BB:FC:1A:10:D0:4B:33:97:63:5C:41:49:66:D2:A5:4E:7C
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:7a:a4:f0:c3:82:a9:95:f6:cc:44:a6:1e:d4:8f:13:e0:5a:
d3:db:54:74:c2:f6:61:ef:f3:79:c7:04:3a:5e:b9:0a:d9:8c:
c5:ea:c4:73:91:dc:59:ca:ee:0e:01:fc:2c:d6:e2:8b:64:fa:
86:e7:1c:93:2c:76:6b:2e:d7:bf:45:92:5e:1b:f1:da:b6:5e:
2d:9b:bf:b7:9e:d8:29:b0:0a:5c:3c:12:7a:70:0a:72:0f:62:
bc:ab:4a:5b:c2:57:74:ca:44:4c:b8:b8:02:d7:78:4a:c7:85:
26:e4:65:23:c5:33:76:5a:55:a7:02:0a:ce:fa:10:b0:c5:30:
7c:c5:dd:52:c9:51:e7:17:ef:0d:34:1b:d3:6f:e8:73:80:1e:
8f:a6:cd:3f:2f:65:2f:94:b0:a3:72:c2:27:80:cc:f3:da:00:
36:93:b5:5d:95:73:cf:c5:c4:a8:36:d2:26:ee:f3:0e:30:79:
1e:c0:5e:cc:7f:99:bf:1e:f5:35:d8:85:b7:d8:53:45:29:6f:
1d:d1:7b:6c:dd:ae:5f:1c:ca:2f:b4:4a:60:a4:30:3b:33:a4:
cf:ed:0d:76:44:d6:42:e8:b7:18:69:9e:5d:01:56:6f:c4:8b:
09:e7:d9:7d:43:ba:5c:2b:ee:33:bd:2f:c3:4f:c2:69:e8:85:
c4:95:e8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:21:00 2026 by rpki-client