Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: MRxjX505ZnACWTrf9M6p5GNoLiRHT/41BTOJbGxycWE=
Subject key identifier: C4:7F:9D:69:27:B7:D8:26:59:63:7B:F8:EB:D4:26:07:37:36:CF:1C
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019E30A957F668C7F5872EF5B30C9A25B3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 1689
Signing time: Sat 16 May 2026 12:01:04 +0000
Manifest this update: Sat 16 May 2026 12:01:04 +0000
Manifest next update: Sun 17 May 2026 12:01:04 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: CECNDH5surYwyyRy3Zk4VfnF0oPBjzqOQINBStwOsmk=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:30:a9:57:f6:68:c7:f5:87:2e:f5:b3:0c:9a:25:b3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: May 16 12:01:04 2026 GMT
Not After : May 17 12:01:04 2026 GMT
Subject: CN=c47f9d6927b7d82659637bf8ebd426073736cf1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4d:57:f0:8e:80:c5:ab:e1:27:80:76:cb:2e:
5b:c7:55:05:94:bd:c5:9f:20:8d:50:12:d3:d7:94:
0f:da:2b:3f:34:89:dc:cb:e7:81:e4:4d:d9:c2:3f:
3f:d6:a2:29:20:cb:02:3e:2a:26:10:f2:43:91:f8:
b8:dd:a4:c7:fd:8a:fb:83:5b:ac:10:30:b5:ff:4a:
f2:2e:91:05:58:a6:01:33:84:31:03:b9:bd:f2:8c:
3e:31:a5:5c:f2:6e:a8:1f:88:eb:39:98:6e:63:25:
e9:35:6b:3c:27:12:ab:14:8e:eb:79:ec:5d:34:b6:
98:bd:56:6b:a5:43:26:7b:49:f6:7b:39:54:a1:fc:
15:8f:8d:d1:1b:aa:a8:77:54:af:fc:29:59:19:e0:
bf:c0:d4:f5:cf:d7:ec:38:85:c3:41:59:6b:1b:25:
ee:4f:e0:b2:15:43:13:a6:1a:72:f5:a6:b7:9f:ff:
b2:48:f3:af:42:38:f6:f3:17:ec:df:15:0a:76:76:
0e:09:73:47:03:91:3c:86:4f:d2:af:ef:ce:1d:7a:
e2:48:e1:61:3d:cf:35:04:99:42:90:34:56:97:92:
c7:67:de:ae:2c:0c:c5:78:6e:c4:98:68:59:be:24:
0a:a6:4c:b0:ae:2e:08:50:70:e5:14:ab:c7:08:ea:
a4:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7F:9D:69:27:B7:D8:26:59:63:7B:F8:EB:D4:26:07:37:36:CF:1C
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:4d:58:ee:8a:21:8b:02:b1:11:5f:88:e4:7c:22:00:c3:53:
03:5f:db:41:15:b8:c0:fa:38:c9:83:c0:4d:88:2f:f4:bb:72:
00:cc:48:52:92:0d:71:36:80:32:35:f3:62:b8:b3:68:e9:b2:
9f:31:55:77:ff:f8:7e:7b:d4:91:4e:c2:cb:7f:d7:cf:6c:52:
16:ca:fa:99:b8:ad:8b:f3:c4:cb:de:29:9f:1b:89:be:7e:3b:
b7:89:54:1c:78:99:51:10:01:6e:bf:31:96:88:b2:ec:dd:29:
13:75:34:97:dc:d9:5e:06:09:46:ac:d4:9b:6c:04:f5:31:94:
92:94:44:ac:8e:a0:54:c4:e3:7c:f2:fe:6e:14:8d:1f:f6:e9:
77:51:5b:e9:cd:1d:af:c4:61:49:d0:12:c1:fc:27:ae:f4:ae:
32:34:13:09:9a:3c:87:b0:a8:9d:4c:fa:37:6f:08:b9:5c:71:
da:6e:0f:64:82:27:c8:db:de:93:9a:79:dd:b1:67:82:97:3d:
e6:9b:84:b5:59:76:45:ef:cf:56:75:e0:98:7b:b5:f0:e5:d4:
5a:f6:6b:6a:c1:8b:92:a2:36:ba:eb:fe:a6:2f:6a:6e:aa:fc:
3d:06:b9:01:2a:93:c4:ed:83:f8:97:1a:91:11:5c:ad:5e:99:
3d:5d:3c:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 18:43:43 2026 by rpki-client