Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: Afd0vRF7wSzljuyyCFQRpoITZPhqyuD4BhC+t9Bc0UE=
Subject key identifier: 5B:3C:80:77:19:8B:C7:06:32:E6:E4:27:05:EF:1E:75:88:1F:7E:A7
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 01A08F457FE6CCCE7A8AD5507EDD2FB721A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 1A4D
Signing time: Fri 11 Sep 2026 07:01:31 +0000
Manifest this update: Fri 11 Sep 2026 07:01:31 +0000
Manifest next update: Sat 12 Sep 2026 07:01:31 +0000
Files and hashes: 1: F9fOaYPqb4gxUHFeWSAIKisXq8Q.roa (hash: PHpRDYyGYnqjTmjt3ejWEskYaaVTFLnfQhZUlCEYSpg=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: ujBpEHdfWCXMHRzRIlgWSn7zmrHr8WThzuOp6KUpEnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 07:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8f:45:7f:e6:cc:ce:7a:8a:d5:50:7e:dd:2f:b7:21:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Sep 11 07:01:31 2026 GMT
Not After : Sep 12 07:01:31 2026 GMT
Subject: CN=5b3c8077198bc70632e6e42705ef1e75881f7ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2d:bc:8a:bc:c2:c1:3d:f1:c4:8a:09:f1:66:
7e:c7:47:63:17:ac:35:c3:77:cc:07:34:a0:6f:23:
fe:3b:68:ff:8b:e1:d4:e8:bc:56:6e:fa:68:8b:35:
9a:c2:1c:5c:e5:c1:b7:97:90:77:20:b9:75:8a:5d:
5e:6c:9c:c0:f8:13:62:27:49:ac:6c:98:59:b4:e8:
5f:5f:4c:f6:c6:d3:8a:21:ef:04:2e:07:70:1a:39:
a9:c2:6b:34:d2:f8:ee:0b:3e:75:ff:1b:fe:66:b8:
30:69:f2:5a:d1:2d:49:c5:63:eb:4b:00:b3:1e:1b:
91:f0:f7:e1:32:bc:91:0c:d3:21:61:ca:b8:44:38:
ee:b2:bf:8c:d4:ee:43:b1:54:d0:71:83:84:ad:06:
a6:d5:5e:e7:b9:b4:cd:f6:4c:9b:73:5b:34:92:3f:
6f:51:e7:0a:c8:3d:94:6a:a3:ec:7e:d4:ad:3d:2e:
8c:e8:88:1d:3a:dd:f0:7b:2e:27:ea:28:db:20:30:
b1:58:93:eb:69:74:26:51:c9:ae:5e:b0:34:e1:d4:
b1:0b:1e:87:92:4a:58:d4:50:7c:52:f1:d3:9c:b8:
8f:c4:fc:dd:6a:49:5d:d4:c7:4e:35:8e:67:69:f4:
c7:b5:2c:b5:e1:8d:bf:6f:ac:24:ea:64:5b:b5:a4:
b1:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3C:80:77:19:8B:C7:06:32:E6:E4:27:05:EF:1E:75:88:1F:7E:A7
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:84:b6:c3:2e:28:b3:0c:bb:e4:e8:b1:33:0d:24:96:2f:7f:
bf:74:53:35:fe:00:1d:cb:8e:47:26:9d:d0:49:fa:93:6d:e0:
c9:ee:fe:04:90:18:a9:cd:c9:a1:8e:f8:ed:d8:f6:03:23:c6:
f7:c1:d0:5a:9b:53:90:b5:a7:51:ac:9a:90:c9:53:ef:62:82:
86:a7:3a:25:82:e1:1d:bd:61:dd:77:1b:c1:9f:8a:f2:df:0f:
d9:75:a3:a3:96:42:50:69:1c:23:d4:b8:0e:cf:ed:e5:77:62:
5f:5c:16:a1:08:0d:3b:47:dc:68:ec:37:f8:e8:f5:b2:29:13:
4b:45:8f:ff:3e:01:55:7d:7b:5e:33:a0:07:57:7a:65:a3:24:
1b:c2:00:4f:89:bc:d6:27:47:31:40:10:e0:6c:8c:82:d9:58:
83:e0:a0:1b:6a:a9:c4:30:f6:e8:74:bb:ba:d7:fc:5d:33:11:
c0:d2:16:f1:50:c4:11:db:4c:50:3a:49:fe:fa:f2:92:a9:3f:
cb:62:6c:05:84:26:c1:9a:62:f9:3f:f7:eb:60:64:29:58:46:
99:61:ff:de:cf:4e:a0:a2:6d:df:23:13:5a:df:7d:41:9c:2d:
2f:3f:aa:54:5c:03:dd:8f:34:c8:9f:ee:35:3b:c6:54:15:33:
70:8c:7f:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 13:24:10 2026 by rpki-client