Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
File: ufR3lXXLm_BYJDKH6YI03sqRH8k.mft (raw, json)
Hash identifier: /fj7Om6QVroSIlMZd8l5oIqkfOpAHwNYE30giIa3X+Q=
Subject key identifier: 4B:05:56:CA:CC:64:1B:F1:1D:14:CE:4F:AC:2B:09:A6:5F:1C:7F:E1
Authority key identifier: B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
Certificate issuer: /CN=b9f4779575cb9bf058243287e98234deca911fc9
Certificate serial: 019F1A5631241357C76AC6FFE018F9E21EB9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
Manifest number: 1702
Signing time: Tue 30 Jun 2026 21:01:23 +0000
Manifest this update: Tue 30 Jun 2026 21:01:23 +0000
Manifest next update: Wed 01 Jul 2026 21:01:23 +0000
Files and hashes: 1: hnzPcfA-WTbRE5DU83lcya93NtI.roa (hash: eJY1ydfJH0OH+/eaUrXt46LOHtMoo4DttqnkB8iWeQI=)
2: ufR3lXXLm_BYJDKH6YI03sqRH8k.crl (hash: l1RlpKVy8HRsWGNkG26fKY0h6pyDf5MDS6VTe5gc3mU=)
3: w8eGCjiWGTOI4FkMUZbb3XQCOIc.roa (hash: Euc8vUvtSSRVkYtTGIk9H6z9LA8UdTND/KFcVeS4Zo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:31:24:13:57:c7:6a:c6:ff:e0:18:f9:e2:1e:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f4779575cb9bf058243287e98234deca911fc9
Validity
Not Before: Jun 30 21:01:23 2026 GMT
Not After : Jul 1 21:01:23 2026 GMT
Subject: CN=4b0556cacc641bf11d14ce4fac2b09a65f1c7fe1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fa:f5:c0:0d:0d:eb:98:4c:50:2d:a7:5b:a7:
43:46:be:d4:df:41:5c:cf:f2:e4:ee:89:7b:ba:2d:
62:bf:5f:b6:8a:df:f2:f6:84:30:67:66:89:9b:9a:
2c:52:9c:0a:d1:df:d0:17:3a:78:97:74:cd:05:e0:
53:5b:27:f1:13:fc:4a:3a:8d:53:70:22:11:a8:4c:
39:2a:f5:45:15:40:d7:b0:56:ce:a5:27:5a:f7:86:
c4:f4:0a:f9:88:0e:4a:7a:00:77:52:1e:3e:27:d6:
88:6a:98:96:3f:f8:d0:1e:31:e5:2e:84:bf:44:b2:
f7:76:06:12:67:4e:c5:6c:70:85:d5:84:e6:a7:72:
c9:6f:1d:c8:b6:94:13:fe:8b:b7:db:57:1a:dd:91:
59:ef:92:9c:e7:67:ec:7d:ef:b5:ba:01:ab:0b:a4:
e9:55:0f:d5:e2:30:62:3b:6f:6d:8d:45:7c:80:1f:
17:7c:56:38:e4:10:48:8d:21:b6:2f:f8:1d:39:5f:
37:d2:b4:61:2d:73:99:63:31:3e:80:0b:46:f9:26:
65:9d:36:b5:c8:d1:e9:34:61:f3:63:6e:67:4a:76:
7b:be:88:86:ae:fb:cc:9f:6f:83:82:14:64:6d:36:
20:9a:5b:6b:0a:38:b8:35:23:78:c2:ed:10:ff:af:
3d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:05:56:CA:CC:64:1B:F1:1D:14:CE:4F:AC:2B:09:A6:5F:1C:7F:E1
X509v3 Authority Key Identifier:
keyid:B9:F4:77:95:75:CB:9B:F0:58:24:32:87:E9:82:34:DE:CA:91:1F:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufR3lXXLm_BYJDKH6YI03sqRH8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/f6d2dd-03a7-4f1f-b890-cd9ff0552f92/1/ufR3lXXLm_BYJDKH6YI03sqRH8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:a4:8d:20:ec:01:f3:37:85:b8:13:07:2a:bb:91:ba:36:ea:
00:c7:e2:54:e8:c3:49:b1:f1:53:8c:96:fd:23:0f:00:3e:34:
97:cd:ce:ac:d8:a3:34:ca:85:1d:fd:05:4b:f3:2e:ca:4f:f9:
5e:ab:81:db:72:b3:3b:84:2e:5f:3e:7a:bf:6a:00:78:46:3c:
6c:3e:e6:fe:ad:d7:43:cc:3f:9a:b5:11:84:36:d2:ad:5a:cc:
2d:29:8f:80:68:71:7b:d4:88:b0:86:4a:68:02:a5:59:d2:8b:
10:60:1a:a2:64:32:6c:b9:0a:fb:00:08:47:f3:dd:b7:ba:bb:
df:bd:93:10:f8:48:d0:8a:4f:b8:e8:ba:ac:df:dd:9a:f6:b4:
05:e8:7f:9f:ca:d6:d6:03:ac:68:5b:46:3f:30:4e:03:f9:24:
f9:87:93:6d:88:2e:6c:52:e5:c9:32:40:29:cb:f8:b6:cd:88:
56:a8:9e:34:6d:f5:07:9f:ff:2f:39:8b:fb:49:55:cb:ba:ff:
99:cb:d9:aa:72:f9:56:4f:44:25:e7:d6:4e:cc:77:44:52:b0:
1f:1b:d3:d6:af:d4:f8:9e:df:0b:83:09:33:80:a0:f6:1e:71:
ae:64:52:e1:3e:f5:ec:a5:12:c2:74:63:b3:06:2e:e1:2e:11:
0d:0b:5f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:41:32 2026 by rpki-client