Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
File: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft (raw, json)
Hash identifier: lhUwEj6JIOEr94gVnIH6y+O8kjaS//K4tJWPXJhaOc0=
Subject key identifier: 8F:4F:E5:28:87:BC:DA:A7:BF:60:2E:B1:9E:B9:E1:DB:08:7E:01:44
Authority key identifier: 50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
Certificate issuer: /CN=505cec09bfd85db2762696345d68871d09d5e8bd
Certificate serial: 019FA30509ED658177E59A1E210A46B01F7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
Manifest number: 01D5
Signing time: Mon 27 Jul 2026 10:00:44 +0000
Manifest this update: Mon 27 Jul 2026 10:00:44 +0000
Manifest next update: Tue 28 Jul 2026 10:00:44 +0000
Files and hashes: 1: UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl (hash: 5iVswhh6qSmruQcn+Ff22/jPVEUfoAphdkQjsAv5a3o=)
2: iHf5pzR2G0Z6T_ZJi-EaUcBL-Pg.roa (hash: xmsgXuBrJTw5PmZn+vLgj/qAwG4jTdhGkBSvr8O5tbU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:05:09:ed:65:81:77:e5:9a:1e:21:0a:46:b0:1f:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505cec09bfd85db2762696345d68871d09d5e8bd
Validity
Not Before: Jul 27 10:00:44 2026 GMT
Not After : Jul 28 10:00:44 2026 GMT
Subject: CN=8f4fe52887bcdaa7bf602eb19eb9e1db087e0144
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:be:41:f5:3a:38:07:67:cf:05:ea:ae:16:97:
48:ae:ad:56:2c:1d:eb:9d:bb:66:82:b2:a4:93:33:
80:db:57:ed:32:57:8e:52:73:71:9d:2e:42:84:fd:
aa:1a:3e:22:1d:38:ff:e3:06:71:45:0c:7e:95:f9:
a8:04:5e:f1:69:15:6c:3d:89:bc:69:91:86:d4:9d:
c1:0e:58:12:cb:76:c3:f1:d0:d8:0d:76:62:1b:83:
06:2f:b7:a3:9e:72:bc:f3:d5:93:95:64:fa:6f:e3:
e4:d3:c8:d9:67:08:40:62:67:29:40:e9:f4:af:fe:
c9:84:30:4b:d7:39:d3:7c:7e:6c:0c:c3:6a:6d:86:
bd:9b:70:96:18:d7:ff:23:aa:94:b0:ea:2c:65:5b:
f5:58:c3:27:eb:c7:81:22:da:18:72:d2:c9:5c:96:
f9:13:9e:5e:3d:83:06:64:b5:2a:c2:ea:b8:e9:73:
59:65:dc:cf:55:cf:91:b5:af:48:3b:8b:eb:d6:81:
90:6b:e6:87:33:63:21:38:32:e3:6d:94:97:d8:02:
d3:dd:a6:c9:66:8c:fe:4e:4c:54:52:f7:26:b7:f6:
92:0e:02:46:cf:0d:09:2d:13:ed:fa:3b:10:44:dd:
a3:07:2c:de:5a:f1:19:78:d1:ee:56:d4:cc:4b:73:
63:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:4F:E5:28:87:BC:DA:A7:BF:60:2E:B1:9E:B9:E1:DB:08:7E:01:44
X509v3 Authority Key Identifier:
keyid:50:5C:EC:09:BF:D8:5D:B2:76:26:96:34:5D:68:87:1D:09:D5:E8:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/48ac2a-0a5e-40c4-b3d4-675dcb39e77a/1/UFzsCb_YXbJ2JpY0XWiHHQnV6L0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c0:35:ab:3f:b2:c1:3d:7d:fa:7e:9b:1a:d7:aa:7b:58:2f:
f4:59:e2:cd:40:88:78:ff:24:6c:b3:51:e4:0d:3f:d0:b1:b2:
47:ea:ab:0a:f5:de:0c:10:1f:14:9d:80:07:df:82:17:95:bc:
2b:16:a3:91:bd:9b:5d:46:10:16:75:5d:5b:81:2b:82:8e:80:
6d:a8:ac:62:0f:25:ca:fd:b3:0a:53:4e:ab:c6:64:b6:96:71:
1f:39:09:90:d4:25:21:9d:13:86:d5:a1:ab:17:b5:3c:b7:9a:
89:7a:6f:1f:32:47:a9:53:53:11:75:b5:66:77:47:30:6e:db:
88:cb:e6:9e:c7:46:bb:f1:31:a0:e6:ce:ae:76:3d:dc:16:3c:
0c:41:59:cd:21:1f:8e:93:aa:53:f6:e7:25:da:d0:b5:14:b5:
09:be:f8:e4:80:03:89:5f:d9:a2:d5:20:5b:5c:75:f4:6f:bc:
00:5a:e7:c0:23:6f:79:dd:62:c9:a0:29:35:5a:d8:6d:2a:6e:
22:a2:f5:dd:b3:b4:d6:74:95:13:59:8f:bb:f2:53:04:ea:ff:
87:ca:92:de:dc:5c:cf:e8:95:3e:7e:b1:d7:0b:c1:64:dd:16:
71:64:6c:14:52:d4:c0:96:8c:97:ad:f0:f9:d2:b5:21:02:b9:
13:54:d7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 12:54:20 2026 by rpki-client