Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: Gv4/5US2RPxeu3Abv5UnmlzBCVxP8klea8TWM3fDTfQ=
Subject key identifier: 28:F8:B0:AC:E0:86:71:69:68:AE:9A:2C:53:FA:B7:8A:BC:06:90:C7
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 019E1CEBF2738DD9101A5007150374F5A248
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 06B5
Signing time: Tue 12 May 2026 16:01:25 +0000
Manifest this update: Tue 12 May 2026 16:01:25 +0000
Manifest next update: Wed 13 May 2026 16:01:25 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: PAPYJK3PKyIo7Kl/z+/K50gO5dr3YxHklW/fYCE0HfM=)
2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:f2:73:8d:d9:10:1a:50:07:15:03:74:f5:a2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: May 12 16:01:25 2026 GMT
Not After : May 13 16:01:25 2026 GMT
Subject: CN=28f8b0ace086716968ae9a2c53fab78abc0690c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:e5:13:c5:f9:92:ed:16:d8:3d:d4:4b:78:41:
70:40:bd:a9:27:ea:00:9c:81:42:8e:18:6a:e6:ff:
47:55:e7:10:1f:0f:82:e9:dd:38:d2:95:d6:99:78:
e9:71:05:55:1a:8a:14:b5:6b:71:86:40:46:0d:d1:
4b:f5:f2:43:82:04:84:ab:4b:6d:01:a9:e6:0b:0e:
0d:88:92:73:9e:bf:c6:e5:32:fc:53:2b:a3:72:d4:
48:ee:22:ed:cb:34:37:84:fa:d9:bf:3a:95:f3:29:
97:1a:66:20:4b:31:4b:18:f9:d5:90:56:b4:b7:de:
1f:d4:77:c2:b7:eb:77:4b:24:11:f3:9e:9d:d2:80:
15:3f:7b:81:da:07:f3:ee:11:2c:e3:93:1e:d6:ab:
54:60:6b:a4:5c:f4:39:54:19:ec:a6:9d:bc:ed:4b:
31:2c:8f:d5:fa:cf:63:a1:bc:ac:cc:22:ad:22:af:
67:37:08:11:0d:b2:25:a0:37:88:96:24:57:3f:26:
79:45:eb:c1:28:01:b6:c4:8c:f3:1c:4e:b7:26:c8:
c3:68:c0:03:a4:08:9f:db:41:de:f0:26:23:2e:2f:
a6:99:fd:ce:71:4e:74:2d:a0:4e:af:a1:90:41:b3:
0e:fd:7b:4d:20:16:31:43:87:da:eb:13:53:3e:38:
77:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F8:B0:AC:E0:86:71:69:68:AE:9A:2C:53:FA:B7:8A:BC:06:90:C7
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:04:fd:36:b0:8c:d0:ac:21:0a:06:db:d8:0d:b9:b7:ff:11:
92:4b:55:64:c0:50:0e:91:04:86:ac:2f:74:a1:71:4d:1a:02:
8a:53:29:ee:da:b8:07:ff:13:8c:bf:71:cb:8e:57:91:f9:30:
01:70:5a:f4:f6:cf:3f:44:b1:47:b6:39:d2:eb:89:59:c2:78:
b7:73:63:d3:e7:61:87:42:0f:9a:2c:af:c1:09:aa:6f:9a:bc:
75:87:f9:d2:e4:58:7c:eb:99:98:68:e6:34:b3:ac:51:67:ed:
d5:41:46:98:94:87:fb:90:df:12:93:87:db:46:64:42:88:69:
99:8c:1c:cd:81:22:29:b7:6c:79:43:7b:e2:ff:08:2f:18:72:
54:72:77:45:25:b2:82:70:b9:d8:dd:d1:64:6e:64:dd:76:1c:
fa:1d:44:4a:38:a5:db:64:fd:b1:a9:99:02:ba:27:48:7a:39:
9c:7c:3e:57:45:da:6e:f8:b6:9b:16:60:7c:5c:9f:40:57:06:
0d:89:4e:ea:89:5b:cf:2f:1a:a9:1d:64:8c:a0:42:e7:e6:bd:
8f:91:8d:71:7e:7e:68:7d:39:98:04:81:f0:4c:06:87:d4:9c:
d6:74:e3:d8:15:09:c0:c4:7a:62:ed:40:e3:b9:6b:5e:15:a9:
fa:92:ca:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:16:26 2026 by rpki-client