Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: 0FW+kk1X6oIymoT3dNUAvcsL/ToJUAM8ULzNXRXJtfI=
Subject key identifier: 8B:72:27:3A:D0:A4:8E:07:43:D5:EC:EF:B1:50:AE:3C:6C:E0:D6:02
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 01A1521AE21A23326EC6BC183B6D3C9B4B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 1828
Signing time: Mon 19 Oct 2026 03:00:55 +0000
Manifest this update: Mon 19 Oct 2026 03:00:55 +0000
Manifest next update: Tue 20 Oct 2026 03:00:55 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: 6UxlN5KY802Mm3ChROSvjS6ti9g34QalvRiPTm8+n08=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:1a:e2:1a:23:32:6e:c6:bc:18:3b:6d:3c:9b:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Oct 19 03:00:55 2026 GMT
Not After : Oct 20 03:00:55 2026 GMT
Subject: CN=8b72273ad0a48e0743d5ecefb150ae3c6ce0d602
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:0b:8a:bf:a3:b3:07:82:ae:7d:e4:b0:b2:80:
ce:d0:b7:37:ba:ff:74:2d:d6:34:df:4c:0b:29:72:
7c:05:4e:2e:4d:a1:c9:3a:5c:7f:4e:e5:ca:61:ba:
72:f9:aa:d6:eb:3a:74:10:45:d0:63:65:ec:36:bc:
64:98:83:28:8d:02:65:5a:fb:b6:ea:b6:71:21:7e:
00:65:4d:0f:1d:bb:9d:54:d2:4b:ed:53:40:39:00:
5f:ef:de:56:bb:fc:2c:ff:1f:c3:3b:e7:2e:28:e5:
e5:17:f3:1a:cb:6d:51:39:82:8e:52:27:10:f4:14:
86:a1:66:9c:a6:f1:db:b6:34:7e:ea:2b:0a:15:36:
f0:ea:0e:6d:01:04:81:4a:67:f6:41:36:cc:e2:50:
22:db:ff:e9:a0:3e:d4:3e:03:ab:7c:18:d2:80:44:
e9:59:7a:5c:50:95:07:ba:42:fa:a3:26:48:a1:97:
c2:b7:27:b0:aa:6d:1b:c6:c8:25:9f:20:6b:f3:b8:
c5:ca:86:45:91:9b:22:90:f1:ca:5e:1a:a9:6b:ff:
ba:6b:17:7b:5b:f1:a4:45:ea:43:a7:8a:aa:58:1f:
31:32:95:8a:0a:bd:5f:75:9a:1c:06:b2:6f:47:05:
c0:d8:fa:e3:1c:96:38:89:cc:08:f0:45:ab:73:74:
14:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:72:27:3A:D0:A4:8E:07:43:D5:EC:EF:B1:50:AE:3C:6C:E0:D6:02
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b6:ef:11:0f:aa:7d:82:f7:03:46:b1:40:06:ad:1d:7a:49:
89:25:93:c0:f6:10:17:da:41:ae:8e:df:91:6e:01:02:25:2d:
e6:0c:68:0a:27:b3:a0:b4:a1:37:a4:0d:ef:07:22:5d:a7:4c:
88:e3:3f:d5:00:b9:db:89:a4:2b:dd:63:c5:e7:cb:90:6b:2f:
e5:c4:cd:4f:c0:ee:6e:f2:45:1e:a2:91:12:7d:5d:a8:7d:96:
ec:8b:2f:63:f3:d8:57:b8:0f:82:5d:94:2a:5e:22:43:e4:62:
57:6b:0f:8d:9c:ec:ad:8d:b3:19:fe:e6:56:4c:95:32:d3:ed:
b1:ae:b1:af:3d:48:ea:99:ba:64:40:36:07:70:cd:36:a7:97:
91:b1:1c:15:c9:46:64:d8:0c:c6:73:35:3e:8f:d8:3d:90:21:
7c:36:30:ce:9c:f2:5e:7f:c7:7e:d3:89:9b:1a:24:00:5a:5b:
ee:2e:03:03:29:b0:0c:71:aa:f4:a6:9d:90:98:89:1e:e6:05:
c3:24:03:c7:8e:8d:1d:8b:6a:fd:cd:76:69:e9:32:e4:82:fa:
6d:dd:f1:79:73:46:97:f0:50:53:e4:06:bc:93:d2:f4:34:e7:
64:ee:8b:df:79:f7:bd:96:1c:bf:cc:cc:47:d3:9d:0c:f3:63:
60:22:a9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 07:39:30 2026 by rpki-client