Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: t4Q0p4w1b0ng6TrqZe3qxxjC1q0271W0gAPWP3tEnXE=
Subject key identifier: 3B:C0:05:C9:70:05:58:54:8C:BA:13:03:7E:00:5D:4F:12:B2:79:23
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 01A18C412CDFEAD2C454EA80EDAA55E31C84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 1AD0
Signing time: Fri 30 Oct 2026 10:00:43 +0000
Manifest this update: Fri 30 Oct 2026 10:00:43 +0000
Manifest next update: Sat 31 Oct 2026 10:00:43 +0000
Files and hashes: 1: F9fOaYPqb4gxUHFeWSAIKisXq8Q.roa (hash: PHpRDYyGYnqjTmjt3ejWEskYaaVTFLnfQhZUlCEYSpg=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: MIvxwQg9RtI8G/YQosQI3HM4R8d3E+94SjjiiMMY4uY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 08:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8c:41:2c:df:ea:d2:c4:54:ea:80:ed:aa:55:e3:1c:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Oct 30 10:00:43 2026 GMT
Not After : Oct 31 10:00:43 2026 GMT
Subject: CN=3bc005c9700558548cba13037e005d4f12b27923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:d2:10:ef:60:a4:ee:43:f7:9f:2f:ab:6f:ad:
91:54:fc:91:06:11:0b:4b:cd:48:97:63:f6:f9:fd:
8a:4d:23:bd:0a:01:e2:80:22:97:07:ae:b7:b9:fc:
cf:39:64:77:9b:fc:79:7a:ef:46:08:2b:29:70:ff:
04:f6:25:7d:09:7d:b7:a4:d6:a0:25:de:b2:42:06:
80:58:d5:56:1c:9a:45:9c:0e:b5:14:4f:d7:8e:a5:
7e:ce:a2:4b:3a:58:d0:ee:8d:c0:37:ee:4e:1d:a0:
78:53:77:37:80:0d:49:c1:59:8e:48:85:b3:07:3b:
3c:2e:0c:bd:ac:03:bb:4c:ef:5a:35:8f:6f:aa:a7:
2a:9a:68:35:eb:cb:9f:17:e1:91:86:9a:53:6e:24:
14:48:fc:bb:77:c9:61:15:61:cb:bc:3a:c7:14:d2:
e3:d2:3b:33:85:43:af:97:55:af:59:b1:8e:c8:f0:
a3:36:9e:44:01:c8:53:1a:dc:7c:3a:64:e0:1c:98:
71:ac:e6:03:23:e9:0a:16:dc:b0:a9:df:de:7c:f2:
e0:d6:01:8e:60:63:20:88:51:b8:24:d8:a6:f1:f4:
58:30:01:01:63:0f:84:d9:66:13:0f:7b:b9:09:3b:
fa:6e:c2:11:7f:8c:97:b8:6b:71:64:b2:f9:3a:c7:
c0:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:C0:05:C9:70:05:58:54:8C:BA:13:03:7E:00:5D:4F:12:B2:79:23
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:b4:b2:da:2e:7a:11:0d:5f:49:1b:5c:3c:d9:fc:13:fd:fb:
84:1f:be:c5:0e:56:84:11:9a:12:51:8f:d3:12:e1:40:80:de:
5a:e9:6c:a2:3d:c9:60:51:0f:72:1f:9d:9b:e2:dc:c2:70:3e:
9d:49:ea:03:be:72:8e:f7:5d:b8:9a:eb:07:e2:f8:8e:27:46:
74:8a:fb:46:cc:9b:f0:46:7c:3b:b2:ca:06:f4:83:05:ed:b2:
10:3c:66:e6:25:5b:38:7d:53:34:b2:5b:5b:dd:59:b5:e9:29:
46:1a:ec:fc:9a:bb:7c:de:8a:10:80:ce:52:fc:4d:3e:63:d2:
61:87:f4:72:de:e5:88:f6:45:03:dc:6f:bc:8c:c8:0d:56:e8:
5e:1e:ae:cf:62:bc:33:c1:3a:e7:36:52:6d:9d:52:4e:17:a5:
01:36:3e:22:fd:9f:fc:a5:71:06:f9:46:73:3c:7b:c3:0d:15:
c2:9e:44:e3:98:8f:6e:76:78:c8:0f:b9:2c:42:54:b7:f2:24:
73:4d:c7:58:41:c5:78:1e:7f:4d:f5:1e:fd:1d:a6:c7:fd:f6:
48:bb:bd:00:d4:68:b7:cd:0f:14:be:3b:1a:95:7b:b6:21:29:
ce:31:c0:7b:f0:15:a7:51:b6:20:cc:86:2a:0c:e9:8c:94:87:
a3:cf:6e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 14:08:31 2026 by rpki-client