Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
File: sf_ufb9_RWbqnjBUaywqLnM28vQ.mft (raw, json)
Hash identifier: 4uC87NYd+H3dKGHpaWqoRiGwLh/OuY8npzG43yzVnfk=
Subject key identifier: A8:23:87:80:D8:8A:41:5F:84:8A:61:FB:C9:9F:1A:4E:19:17:D5:E2
Authority key identifier: B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
Certificate issuer: /CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Certificate serial: 01A02056057930B8CFFD184BC951406C514F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
Manifest number: 1A14
Signing time: Thu 20 Aug 2026 18:01:43 +0000
Manifest this update: Thu 20 Aug 2026 18:01:43 +0000
Manifest next update: Fri 21 Aug 2026 18:01:43 +0000
Files and hashes: 1: P4g9yTAv1bQsEHzbCNOJ067tquU.roa (hash: kouwCvNmAHfMnCaV0S5emEt24x5TunBBSbVBzdGSrqY=)
2: Y360lwoG9eyseVvOT5wT1Z7gt7U.roa (hash: U9JtvNrirG87zfze5K4hjslK7QIiDoWF/Ia/56lwbBw=)
3: pWNFve3JFzOWEIOafmb-tq3ozgk.roa (hash: J9P5fP20DSym7BQV4ZtLFdmGdvrRCw0F5AUaKX6zn0M=)
4: sf_ufb9_RWbqnjBUaywqLnM28vQ.crl (hash: xfo6htMhXQUm5DZUSkQdIKeL/iKUsFThAMnr718urhI=)
5: wjwk4znZSgE3afujO_o00KJ1wc4.roa (hash: /EHRjEt0mZL7bm2KcS0WqhNixMXZVUS3aHhSERVsdww=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:56:05:79:30:b8:cf:fd:18:4b:c9:51:40:6c:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1ffee7dbf7f4566ea9e30546b2c2a2e7336f2f4
Validity
Not Before: Aug 20 18:01:43 2026 GMT
Not After : Aug 21 18:01:43 2026 GMT
Subject: CN=a8238780d88a415f848a61fbc99f1a4e1917d5e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ad:31:5a:fb:7a:dd:9c:70:b6:5f:21:28:c3:
ba:4b:d7:a7:88:bd:86:1c:ae:fa:24:f5:89:df:d2:
a2:dd:59:c9:f2:df:dc:b4:0c:79:ab:82:38:15:a8:
94:da:d1:02:ec:c1:91:c3:7b:3c:6e:d5:22:e5:69:
5d:76:2c:c7:8c:bd:b9:5b:fd:10:ed:db:35:13:fa:
40:b3:7d:b8:a5:f0:33:27:69:0e:ae:fe:57:e2:ae:
2b:61:3f:8a:93:0f:e0:88:0a:5b:b5:f9:6f:3f:97:
ba:16:fd:bf:5d:00:ef:af:df:6e:5f:1c:54:ae:f2:
c7:e4:a7:41:67:74:48:6f:c6:08:28:af:d6:bc:fd:
c0:ab:04:a8:8e:2d:89:9d:2c:aa:5f:15:bd:f0:d4:
26:b8:90:cf:e7:02:f3:de:06:0a:8d:a0:31:d7:c0:
26:02:12:50:75:7a:15:34:e8:94:3d:04:70:a2:b8:
3a:d4:fe:00:b3:ae:79:f1:ae:16:0b:ca:b9:6e:05:
b2:6c:0d:51:9c:b1:b5:2d:72:4d:85:2a:8d:7d:b8:
7a:10:d7:3c:bc:53:a8:c5:6a:e3:57:e5:14:9c:ad:
8b:76:ce:68:7d:22:99:f7:b9:dd:b0:4d:62:8e:e9:
fc:e8:73:4a:64:b0:0c:a9:a2:ae:b3:10:33:f2:e5:
09:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:23:87:80:D8:8A:41:5F:84:8A:61:FB:C9:9F:1A:4E:19:17:D5:E2
X509v3 Authority Key Identifier:
keyid:B1:FF:EE:7D:BF:7F:45:66:EA:9E:30:54:6B:2C:2A:2E:73:36:F2:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sf_ufb9_RWbqnjBUaywqLnM28vQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/2fcbb2-c3c0-4b1e-8ad5-7f5f78346d6f/1/sf_ufb9_RWbqnjBUaywqLnM28vQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:29:59:f6:a3:d9:66:32:af:ec:3c:54:ac:a6:9b:3f:9d:f7:
4a:a6:26:58:ab:86:36:0f:9b:68:bf:28:34:91:83:ca:52:68:
50:4a:6a:16:80:fb:3f:4a:5c:01:54:44:3d:19:e4:1c:b4:13:
63:95:09:a7:0e:e6:b2:03:b4:30:6d:f2:67:26:79:3f:22:f2:
5d:9d:80:ca:6d:e2:47:bd:62:13:8a:33:b9:57:3f:cc:cc:55:
2a:e4:a3:cf:91:a5:a1:29:e9:26:3c:37:fb:31:7b:96:4c:34:
34:02:30:ba:f2:fb:db:7e:7d:dd:5d:8e:88:48:79:ac:8a:77:
43:16:a3:60:2f:7e:c1:8c:23:ac:41:ca:41:0c:35:98:3a:ed:
f6:74:dd:5e:5e:0f:6b:44:72:48:55:90:d1:65:d7:b5:3d:51:
48:40:be:8b:9e:5a:ee:73:b5:ec:7e:e5:bd:7d:3d:0b:7c:17:
25:a3:54:a9:6e:dc:d2:83:2c:8d:f4:12:ea:4c:ee:8a:6c:56:
67:df:1a:a2:23:3a:fe:ba:eb:d1:aa:9e:c2:c5:d8:32:43:fb:
ae:3b:e9:95:67:ed:9d:06:e0:5b:7a:8d:22:cb:a3:d9:f2:3a:
96:5f:d0:7a:f3:46:0e:29:68:da:b0:34:25:0d:3b:65:25:e6:
e1:a1:33:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:27 2026 by rpki-client