Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
File: ufQO9_E-yaFW77DbOWCQvHXanUM.mft (raw, json)
Hash identifier: T2Fjenie4Dw51oHDDE+04lH+hxFQASdHey69ut8zOps=
Subject key identifier: 26:A7:6E:CA:C0:47:17:3C:FE:7C:79:48:FB:EC:17:A2:BF:64:71:6F
Authority key identifier: B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
Certificate issuer: /CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Certificate serial: 019D56398C8400E72C6344E4B2FB58C28B13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
Manifest number: 189F
Signing time: Sat 04 Apr 2026 02:01:45 +0000
Manifest this update: Sat 04 Apr 2026 02:01:45 +0000
Manifest next update: Sun 05 Apr 2026 02:01:45 +0000
Files and hashes: 1: bYWnNBJ88LbQXbWSQLO05IsIsMk.roa (hash: 8zUO33POztpiVvtW7T3x8U4nLE2YNCP2J0oxQWs2DYg=)
2: ufQO9_E-yaFW77DbOWCQvHXanUM.crl (hash: JXUvPWlqkG2+cakTcF8yL7KvkFSumKG0ZKS9ih3r1xU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Apr 2026 02:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:56:39:8c:84:00:e7:2c:63:44:e4:b2:fb:58:c2:8b:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f40ef7f13ec9a156efb0db396090bc75da9d43
Validity
Not Before: Apr 4 02:01:45 2026 GMT
Not After : Apr 5 02:01:45 2026 GMT
Subject: CN=26a76ecac047173cfe7c7948fbec17a2bf64716f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:41:0a:30:67:29:f9:50:68:9b:16:25:c0:e3:
06:b1:13:60:28:7a:3b:6d:88:67:c7:4f:08:f7:d5:
7d:67:7e:35:43:dc:46:fc:29:19:c6:f5:db:29:eb:
b0:b6:77:39:1f:1f:8c:d9:0b:d3:00:01:dc:fe:09:
8f:76:ec:d9:5d:58:fd:99:7d:ed:46:18:be:43:6c:
2d:3e:3e:d8:d1:d0:58:d6:61:ce:ba:80:cd:6b:c7:
12:bf:99:cd:b6:ca:08:1d:9d:23:cb:01:1b:de:4b:
10:7c:6e:55:79:86:93:1f:16:b9:0e:66:d6:42:4b:
f3:a1:d2:18:be:97:ae:67:b7:3c:63:da:fb:37:26:
6b:cd:fd:df:f1:8c:72:ba:e8:9a:2f:6c:44:dd:fb:
6d:53:01:38:26:fc:06:d8:7c:f8:26:56:f5:27:af:
f6:7c:49:ca:e6:8a:eb:55:13:c3:a5:3c:bd:2a:4e:
37:24:72:98:4c:3c:20:9d:ed:b9:a8:a8:42:dc:d9:
69:bd:1e:5c:da:31:de:a4:d3:60:c7:5b:98:d8:8c:
49:93:be:54:56:2f:1d:df:67:b9:92:1b:7e:b3:cc:
84:a1:2d:96:6a:8c:1c:09:83:7a:79:75:cc:b6:12:
00:2b:13:2f:2f:10:ae:88:26:6a:c8:e4:63:83:15:
34:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:A7:6E:CA:C0:47:17:3C:FE:7C:79:48:FB:EC:17:A2:BF:64:71:6F
X509v3 Authority Key Identifier:
keyid:B9:F4:0E:F7:F1:3E:C9:A1:56:EF:B0:DB:39:60:90:BC:75:DA:9D:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufQO9_E-yaFW77DbOWCQvHXanUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/e7725d-4c16-4867-8c4d-fc5590cb8f6b/1/ufQO9_E-yaFW77DbOWCQvHXanUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:5b:26:39:51:f5:16:b8:1b:9f:f8:32:26:a0:bb:08:52:02:
7c:dc:e9:2e:28:ba:30:e7:8e:dd:49:98:26:94:42:cb:14:94:
5c:1d:50:33:5d:4a:5f:e1:d8:40:a2:2c:91:fd:32:c4:75:37:
6f:9c:57:8f:6b:f2:a1:3f:7c:6f:f3:f1:1c:0e:8f:75:e7:39:
e7:9c:34:2b:5b:91:03:7e:86:c7:0b:4a:d6:2d:21:56:e4:c8:
59:58:3e:bc:67:d1:70:14:3d:0c:ab:7a:96:e6:03:b4:36:78:
a4:b9:c2:8f:b9:ff:c3:d0:91:fe:b8:3b:3f:67:fd:dc:d6:ee:
a2:c7:4f:90:3c:63:0f:37:8f:c0:ed:49:e8:7f:51:fc:ce:1d:
d0:bc:8d:e2:71:f1:26:a2:b1:0b:87:e0:d2:4f:6c:f3:54:f5:
73:0c:b9:1c:e9:d6:32:cf:56:8c:a3:0f:67:06:cc:e9:4f:96:
47:02:44:40:38:25:12:3a:c6:04:98:f4:da:93:44:96:67:82:
09:97:76:60:69:51:ce:79:63:6a:65:b1:43:d6:4a:c7:56:56:
6f:94:b0:c9:9d:75:cb:92:39:dd:b8:e0:95:e2:c9:c4:93:87:
5e:36:73:ce:f8:29:ac:8f:e5:53:fc:6f:5c:7b:3f:ad:34:e2:
83:e3:ae:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 4 12:15:33 2026 by rpki-client