Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/uf_ER1yDzdeLLm-So3-yVvUsV9I.mft
File: uf_ER1yDzdeLLm-So3-yVvUsV9I.mft (raw, json)
Hash identifier: CjqrCAuTvY/FOzhK62MfE3XADMIGggHS3EkbC951Ah0=
Subject key identifier: 8D:8C:18:CD:D6:93:7B:2F:77:CA:E9:54:FC:62:7C:49:74:0B:D6:25
Authority key identifier: B9:FF:C4:47:5C:83:CD:D7:8B:2E:6F:92:A3:7F:B2:56:F5:2C:57:D2
Certificate issuer: /CN=b9ffc4475c83cdd78b2e6f92a37fb256f52c57d2
Certificate serial: 01A12B442989F07FD3A5FB3EC543040A2799
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uf_ER1yDzdeLLm-So3-yVvUsV9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/uf_ER1yDzdeLLm-So3-yVvUsV9I.mft
Manifest number: 37
Signing time: Sun 11 Oct 2026 14:00:49 +0000
Manifest this update: Sun 11 Oct 2026 14:00:49 +0000
Manifest next update: Mon 12 Oct 2026 14:00:49 +0000
Files and hashes: 1: UQaYZisc4uIpdIV5Qcgu2CBhpm4.roa (hash: btFExtXBGZm6iyT34KsvRoOlCqR0AR8BiTbQZcr4gU4=)
2: uf_ER1yDzdeLLm-So3-yVvUsV9I.crl (hash: MIROAilBL7ih+yXPv89NEUw4IvcUHWofd+YwhFDOLAs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/uf_ER1yDzdeLLm-So3-yVvUsV9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/uf_ER1yDzdeLLm-So3-yVvUsV9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/uf_ER1yDzdeLLm-So3-yVvUsV9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:29:89:f0:7f:d3:a5:fb:3e:c5:43:04:0a:27:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ffc4475c83cdd78b2e6f92a37fb256f52c57d2
Validity
Not Before: Oct 11 14:00:49 2026 GMT
Not After : Oct 12 14:00:49 2026 GMT
Subject: CN=8d8c18cdd6937b2f77cae954fc627c49740bd625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:be:98:3a:2e:e2:47:41:b2:57:0d:b4:8d:0e:
21:f7:a0:3d:c0:7a:08:44:8a:7a:6d:17:30:46:43:
f4:fb:5d:b0:45:4e:0b:5c:bc:7d:49:32:b3:f0:a2:
c7:ad:fa:12:4f:1e:6e:a8:bc:d2:51:7a:4a:32:19:
89:5a:de:0b:95:99:a1:c5:31:2b:8a:95:f3:ab:22:
b4:e0:9f:75:4a:b5:5f:40:96:25:bd:ef:aa:4f:dd:
dc:df:f0:ad:36:8f:09:2c:05:b3:8d:2a:ac:ef:79:
bd:83:d4:b9:f6:a7:c2:ad:b4:00:86:2e:52:62:87:
1d:f0:b7:00:0d:cb:78:30:cd:20:7a:4e:40:9e:9f:
a7:07:57:be:9d:c2:55:a6:32:12:63:e5:6f:b4:1d:
65:f9:b1:65:8d:1e:19:68:cb:12:c5:c3:a9:70:9b:
09:3b:b6:44:c1:06:81:89:cb:90:bc:24:e4:bf:12:
91:4f:bd:17:20:fe:88:31:02:cb:e5:8e:6e:13:d0:
52:e4:16:46:56:69:0f:ff:6f:27:84:7d:97:2c:8a:
00:76:3a:63:a0:da:8a:21:fb:5c:10:c1:9e:cb:7f:
72:50:c8:5d:3a:b5:d4:a7:7a:59:19:66:e5:9e:7d:
7a:bd:43:b8:06:97:ee:7a:9d:de:ed:a6:e1:7f:bf:
41:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:8C:18:CD:D6:93:7B:2F:77:CA:E9:54:FC:62:7C:49:74:0B:D6:25
X509v3 Authority Key Identifier:
keyid:B9:FF:C4:47:5C:83:CD:D7:8B:2E:6F:92:A3:7F:B2:56:F5:2C:57:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uf_ER1yDzdeLLm-So3-yVvUsV9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/uf_ER1yDzdeLLm-So3-yVvUsV9I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/13c4f2-18bc-491e-baf6-63440dcfeb99/1/uf_ER1yDzdeLLm-So3-yVvUsV9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:c0:66:70:60:5e:3b:97:1a:f0:1b:de:40:75:c3:af:ee:a5:
1a:13:22:bf:e6:01:fa:f4:4d:0e:6b:9e:49:94:48:b3:e6:b2:
78:4c:ff:75:86:cd:0a:37:f0:64:28:11:5c:3c:b4:d3:c2:6e:
0e:8e:1c:6c:33:ef:ae:52:93:30:2c:d3:dd:aa:e8:d1:29:b7:
9b:95:5d:99:03:77:00:a9:c7:bf:fe:d9:52:19:6e:74:89:e7:
32:d3:1b:2d:74:47:26:a7:ba:28:8b:2a:74:5c:d8:7a:7b:90:
58:2e:aa:a5:4c:ec:e0:10:93:e7:1d:08:67:1d:b1:73:18:16:
c7:60:c7:8a:d4:a1:90:91:0d:4c:6a:3a:2e:70:a6:ff:b2:9d:
75:6e:6f:a8:cf:b1:8d:22:7a:2d:21:a5:f7:83:b5:ab:7a:98:
11:eb:93:9c:c6:73:33:9a:97:ff:41:af:fc:a9:5f:a7:b7:d9:
9a:2d:c9:2b:a7:0e:98:6a:24:e3:6c:9f:05:41:30:db:36:8a:
fd:b8:92:17:5e:0b:f6:71:d2:5d:7f:c8:cb:2c:90:b4:f8:6d:
8b:df:9f:88:8a:8c:2f:cf:74:b8:07:1c:30:7e:b9:89:15:7e:
0e:df:bd:06:0e:a1:99:48:aa:46:9c:15:a3:ea:bd:78:ed:b8:
f5:2b:81:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 17:51:16 2026 by rpki-client