Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: GuvRMjuuVZG6HvBoikSn35HL+PRVpyTSl2ZRVln6pro=
Subject key identifier: 16:CF:06:3F:24:26:11:F7:44:23:04:CF:BE:32:CB:64:DC:9D:E9:32
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 01A06EDE15996E0530FBA540F58E19F71059
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 09D2
Signing time: Sat 05 Sep 2026 00:00:43 +0000
Manifest this update: Sat 05 Sep 2026 00:00:43 +0000
Manifest next update: Sun 06 Sep 2026 00:00:43 +0000
Files and hashes: 1: _E-18Yix5OeOjpkpq4btG5ylqEQ.roa (hash: G5MMNAQN+PyBy79Pw9SL7XUT08jrMuESj9HjH5BbLWA=)
2: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
3: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: wLVXuV2DU7uKWaA8gZ40iT86q/72CcD7EkRGRVbnyI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:de:15:99:6e:05:30:fb:a5:40:f5:8e:19:f7:10:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Sep 5 00:00:43 2026 GMT
Not After : Sep 6 00:00:43 2026 GMT
Subject: CN=16cf063f242611f7442304cfbe32cb64dc9de932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:6e:d5:55:5a:a0:1f:5d:df:96:b7:e2:c9:4f:
f1:f7:2c:bd:23:71:48:0c:b2:ac:16:84:c0:61:7d:
12:ba:5b:d2:30:a9:84:dd:08:27:4c:0a:cc:64:e9:
b4:a9:82:66:8e:40:4b:72:c5:e1:cf:12:3f:db:9e:
9e:f6:8c:a0:2b:26:70:db:13:56:d5:47:a1:40:df:
a9:38:75:77:cf:00:79:70:0f:b7:eb:01:de:c6:a9:
13:a7:08:d6:d9:f4:87:0a:d3:3c:ec:b1:99:b9:c7:
c0:03:ef:92:8f:c6:04:2b:c7:06:6e:6f:80:17:d1:
72:6a:90:e5:ae:e2:2c:be:19:87:6c:ef:26:f4:88:
bb:5f:fb:bb:b1:8b:4c:ba:05:0d:19:82:28:56:d0:
61:a2:cc:d6:89:9e:8d:fa:50:a7:39:55:1e:ea:97:
8b:11:e9:ac:bb:f2:8c:ee:53:0e:fd:97:91:4c:0f:
a4:92:35:93:8e:ef:4f:af:ff:5f:a6:7d:06:31:47:
67:48:56:f8:cb:aa:18:86:ae:57:5b:b2:2c:b7:37:
f5:8f:fd:a3:c2:dd:49:48:fb:84:62:9f:72:22:20:
74:14:8d:93:31:46:b1:69:54:d4:54:ae:9f:45:76:
aa:38:30:92:30:d5:66:e4:34:91:4c:a8:d0:cf:27:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CF:06:3F:24:26:11:F7:44:23:04:CF:BE:32:CB:64:DC:9D:E9:32
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:a1:fe:62:90:55:00:16:6e:7a:69:47:4d:aa:1e:d8:f4:03:
b9:85:2a:05:49:3d:5e:f8:f0:94:90:fb:3d:de:1d:15:8a:6f:
5a:db:ca:bd:37:ac:8f:99:3f:2d:4c:73:cc:3b:42:45:97:d2:
0c:ae:24:1c:28:58:f4:e9:ef:e2:bc:dc:3e:72:da:66:b4:33:
b3:69:4f:3a:82:58:76:22:b9:28:3f:46:7f:80:f9:b8:90:d6:
86:28:b4:d2:ef:1e:6d:db:84:7b:8b:26:b0:92:33:1d:5e:ea:
ae:7c:3e:da:9f:2d:75:cf:ce:c2:d6:c2:7c:e7:3d:fb:4b:8b:
35:f2:27:9d:f9:a8:76:95:ec:dc:20:64:33:00:dd:3f:98:71:
6a:d0:55:73:28:5b:cb:ba:ad:44:88:2a:9e:bb:49:67:f7:39:
51:d9:ee:d6:38:65:b8:cc:92:3a:17:1c:10:e2:5f:58:39:ab:
a9:3f:12:57:5e:d6:c4:eb:50:22:34:32:cb:3c:1a:90:cf:10:
45:72:80:fe:2d:e4:8a:36:c5:9c:4a:4b:ef:4b:55:01:03:16:
ae:26:c0:e8:e9:f3:28:b9:b1:76:51:9c:66:30:7f:26:00:f7:
d9:43:73:99:a7:5e:0d:b6:03:16:d6:86:d5:ed:10:18:94:4b:
0a:1d:7a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:54:09 2026 by rpki-client