Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
File: ui1f0wndbMbPeIYEHl6cLBomzqs.mft (raw, json)
Hash identifier: B12Xtynk7YOGIy1oxdHrKMK9634iOjsiLKbZmbrlPNU=
Subject key identifier: B6:70:04:6A:08:5A:20:BD:9C:3B:5A:C3:30:E3:CF:04:DB:1B:28:B3
Authority key identifier: BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
Certificate issuer: /CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Certificate serial: 01A08A8D3EF9DCFD182DED39E5A455B67DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
Manifest number: 19DC
Signing time: Thu 10 Sep 2026 09:01:47 +0000
Manifest this update: Thu 10 Sep 2026 09:01:47 +0000
Manifest next update: Fri 11 Sep 2026 09:01:47 +0000
Files and hashes: 1: H7BooEdH7pGN2Xwo9YCOFmNvgQE.roa (hash: x9lq9TZ8d9AJh1ukxrBbxQpkG7M8rCAHXmSmUA8oD+A=)
2: ui1f0wndbMbPeIYEHl6cLBomzqs.crl (hash: HZkI4mv8DQiLgCP+Kf/GqKHmgIZa3YbrkM2QNCk3WRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8d:3e:f9:dc:fd:18:2d:ed:39:e5:a4:55:b6:7d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba2d5fd309dd6cc6cf7886041e5e9c2c1a26ceab
Validity
Not Before: Sep 10 09:01:47 2026 GMT
Not After : Sep 11 09:01:47 2026 GMT
Subject: CN=b670046a085a20bd9c3b5ac330e3cf04db1b28b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:08:1d:69:95:85:88:91:e2:c9:27:cd:65:64:
4a:bf:63:3e:05:5b:e4:a2:22:53:c1:86:d4:20:47:
a8:00:5e:8a:a8:23:85:2a:b7:9e:c2:ac:bb:9d:ff:
be:44:7c:90:44:d0:3a:22:bd:ba:e1:1c:62:f1:47:
4d:d3:cc:fc:ad:aa:64:0c:6d:1e:fe:ad:cf:5e:6c:
80:89:9a:f0:f0:cb:ec:78:5e:07:11:8e:dd:ca:23:
ee:92:81:9e:f5:59:12:9d:eb:be:c0:cb:a5:3a:3d:
9a:89:43:42:d5:ae:0b:d5:f5:79:1d:e1:a7:a0:35:
54:f6:14:3e:2a:e4:39:27:fb:c8:be:99:02:20:1c:
93:2f:cd:60:6a:7b:94:46:d7:84:8f:a9:34:cb:d5:
90:f1:b9:fd:39:8d:93:64:4b:43:4e:c0:bb:6b:b7:
f7:f3:61:31:a7:33:a0:b7:05:28:f4:69:81:e2:00:
69:59:f7:fd:5a:f0:d8:f5:7b:bf:f4:ba:cd:60:7d:
24:3f:7c:2d:8a:92:56:2e:3b:98:67:97:b2:ec:0d:
be:32:f9:c7:c7:2a:15:05:56:5b:d1:4e:43:12:f2:
a4:ba:3b:4a:36:7e:f0:60:d7:09:98:24:9c:ea:05:
4e:fb:6a:e3:8e:82:53:44:d7:47:17:f6:2b:3f:97:
84:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:70:04:6A:08:5A:20:BD:9C:3B:5A:C3:30:E3:CF:04:DB:1B:28:B3
X509v3 Authority Key Identifier:
keyid:BA:2D:5F:D3:09:DD:6C:C6:CF:78:86:04:1E:5E:9C:2C:1A:26:CE:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ui1f0wndbMbPeIYEHl6cLBomzqs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/2cbde9-8480-440d-abcf-6d755052bb24/1/ui1f0wndbMbPeIYEHl6cLBomzqs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:c8:db:98:cb:8f:70:35:51:67:e1:45:c5:2a:d7:8a:80:0d:
ec:be:81:70:87:1f:34:dd:86:78:90:79:04:ba:98:ed:b3:05:
0f:57:90:3d:20:09:27:e6:4d:46:26:ce:f3:28:77:80:a7:26:
ab:b4:05:19:4d:28:71:11:a2:d5:31:91:7a:3c:f1:79:f1:da:
ae:2b:7b:08:7f:8e:17:40:25:54:b2:fd:62:23:e6:da:d3:3d:
b0:52:d2:42:10:70:c3:a6:31:71:91:89:0f:29:9e:d6:01:79:
34:46:46:c1:58:05:9b:e2:f2:a7:22:5b:bb:4a:fd:9e:f9:73:
94:8c:cc:1e:b5:49:5a:4b:a0:14:4f:99:80:23:e1:ba:e2:68:
8e:56:41:2d:79:75:65:f5:54:7c:8b:99:1a:f8:f4:73:4b:ee:
c4:23:0f:f0:18:ca:07:53:76:b4:40:1e:a2:e2:06:67:ef:d5:
56:95:61:18:25:39:c1:65:f2:e9:59:5e:53:85:db:9a:dc:b2:
a2:85:24:e9:76:07:12:e1:ef:75:20:02:92:e6:84:b5:12:b7:
ab:f0:b1:0c:6f:13:a9:44:0d:f6:9f:30:a6:eb:d5:b3:4a:05:
de:15:1d:ed:f8:20:2d:23:72:91:3f:05:87:52:35:3c:1c:96:
e8:1c:b2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:05:07 2026 by rpki-client