Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
File: uFnbfywuOzq9i_QV8M4f_zNDKew.mft (raw, json)
Hash identifier: YwPXudzJlVMxmvhblYoy/eqxyrNAIqyH7O6sdSv920M=
Subject key identifier: AE:5E:B5:D5:E5:96:E9:79:27:F4:3C:81:BB:A4:EC:D9:DF:14:0B:4E
Authority key identifier: B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
Certificate issuer: /CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Certificate serial: 01A08C7B0EC0941098425A55C713E53A50DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
Manifest number: 11A4
Signing time: Thu 10 Sep 2026 18:01:09 +0000
Manifest this update: Thu 10 Sep 2026 18:01:09 +0000
Manifest next update: Fri 11 Sep 2026 18:01:09 +0000
Files and hashes: 1: lWdEpowAzHConUoYGbrc4-nSOV4.roa (hash: 9/NPZ8xgxrX7894j4qUQTxzBQ0X/YCJM81igBGzxaPE=)
2: uFnbfywuOzq9i_QV8M4f_zNDKew.crl (hash: C+tCRga3F2mAXCCcXViWmt4C4jhV7Oc1uXoWvRrKQm4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:0e:c0:94:10:98:42:5a:55:c7:13:e5:3a:50:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b859db7f2c2e3b3abd8bf415f0ce1fff334329ec
Validity
Not Before: Sep 10 18:01:09 2026 GMT
Not After : Sep 11 18:01:09 2026 GMT
Subject: CN=ae5eb5d5e596e97927f43c81bba4ecd9df140b4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:09:09:d0:46:17:30:33:7b:b2:7c:e9:bb:1c:
fe:6a:b2:4c:9c:04:64:7a:1b:fb:e1:a5:57:60:59:
1b:ae:46:14:63:84:d6:61:d3:4b:8e:df:69:09:9a:
b6:88:23:83:bd:a2:56:74:db:c5:37:1d:7b:65:e0:
af:20:3e:f2:9d:97:7e:95:2f:55:fc:f3:6b:54:77:
07:ac:25:99:46:89:f8:0e:41:95:27:c6:7b:bc:06:
dd:9d:ba:9b:ae:fd:4d:b9:36:ac:e1:ec:04:11:e6:
ff:3c:1c:da:a5:da:50:70:c7:ad:31:9a:28:63:62:
a7:0d:46:b9:a1:fc:68:9a:23:69:1b:67:b2:79:45:
f2:0b:6d:e1:7a:de:92:c2:c1:b7:be:4d:a5:7a:b0:
33:10:76:90:3f:c6:3b:69:a1:fa:f8:a3:82:4a:b8:
59:bf:23:26:e6:f6:54:32:4d:90:47:e1:8a:6b:1b:
dd:73:b1:e5:1a:22:e5:03:16:6c:dd:46:4b:7b:f7:
d8:26:5a:1c:c6:d8:77:d1:3a:70:02:fd:2a:36:bb:
1d:8d:9b:57:1a:fc:d0:de:fd:eb:72:a6:ab:72:2b:
06:3b:d5:5c:d0:40:5f:e3:3a:66:b8:88:eb:ec:3d:
2f:72:fa:3e:05:cf:27:84:23:a4:23:aa:27:89:31:
06:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:5E:B5:D5:E5:96:E9:79:27:F4:3C:81:BB:A4:EC:D9:DF:14:0B:4E
X509v3 Authority Key Identifier:
keyid:B8:59:DB:7F:2C:2E:3B:3A:BD:8B:F4:15:F0:CE:1F:FF:33:43:29:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFnbfywuOzq9i_QV8M4f_zNDKew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7eb7c3-e34a-4fbc-9272-4c1c57a81ffd/1/uFnbfywuOzq9i_QV8M4f_zNDKew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:8b:87:4c:d4:ff:f8:ac:c1:ea:fb:6b:ec:a6:5c:f3:32:e2:
16:d9:16:9f:93:32:08:cd:9d:7a:68:d8:6b:5f:4e:95:68:39:
90:b7:88:4a:e5:df:62:a2:9b:e1:79:04:58:1d:42:be:63:ec:
b8:89:c7:ea:49:2c:8f:3d:e2:89:87:73:7c:36:1a:60:b6:d3:
b8:fe:ab:13:3c:b7:c6:2f:5a:5a:e8:ab:b5:d4:9b:66:f4:33:
80:6e:7a:8a:bc:91:eb:75:ee:4f:7a:04:34:39:6f:cd:e6:c6:
38:94:08:27:8b:10:9b:b7:42:91:0a:20:46:9c:72:13:3e:6e:
27:f5:ec:c7:ec:28:48:15:26:c4:63:6b:d5:4e:56:76:33:ac:
cb:c4:00:d7:ff:51:e6:bb:7a:be:55:d3:e9:30:61:7b:a7:e2:
24:c1:75:27:7b:89:4f:98:32:0c:36:a1:17:4b:83:b5:48:fd:
c3:32:0a:b5:ba:ff:26:c4:4c:cc:61:4d:f7:89:5e:c0:92:9f:
f0:5c:18:34:16:60:b3:ac:e4:a9:a2:6b:0a:7a:31:18:60:07:
8a:41:dd:3e:6d:d2:05:63:d6:73:21:50:24:f4:35:ae:70:34:
7c:5a:cf:68:82:2f:a8:e0:5b:8c:46:ee:38:5a:27:c6:bb:3f:
bd:6f:53:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:55:14 2026 by rpki-client