Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: zjYzcCQdzNktjWnyO2wEHyVRcrq5jNAC7DvcHiHqKpI=
Subject key identifier: 91:07:D1:ED:19:C8:06:37:B0:57:80:7F:58:CF:8B:DA:88:B5:90:56
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 019D389BB282E592FA728E0AB8C4827ECC84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 109B
Signing time: Sun 29 Mar 2026 08:00:20 +0000
Manifest this update: Sun 29 Mar 2026 08:00:20 +0000
Manifest next update: Mon 30 Mar 2026 08:00:20 +0000
Files and hashes: 1: D-37R8pTtaYyRSvFF1cIYOk-kgs.roa (hash: VVl+RrZKwp2SWM55JhoijG/n/TZ6UrTZnaeJgiQh+QM=)
2: gkon8URGKawWYsPCktsOv4GJyC0.roa (hash: wGsl+Lv3yiWPoxNTkh9Ez43KMkCIutQ7CbBGSolZmCM=)
3: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (hash: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: rY5PUxqm6iMygVR+IcFuTaLQrbYq5ptujUHfbX4Vhac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:b2:82:e5:92:fa:72:8e:0a:b8:c4:82:7e:cc:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Mar 29 08:00:20 2026 GMT
Not After : Mar 30 08:00:20 2026 GMT
Subject: CN=9107d1ed19c80637b057807f58cf8bda88b59056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:8c:06:dd:67:a4:68:ea:02:3e:06:a8:a6:3d:
a4:fa:7a:e4:09:25:b0:48:e9:87:78:c7:6c:66:81:
41:ad:9f:6c:e5:4d:87:34:6a:ea:22:75:d3:5d:44:
fe:5a:89:fb:3d:71:b6:03:65:ba:2a:cc:b2:f2:79:
bd:7e:7c:ff:35:33:40:1e:4d:c4:c7:5c:6b:e0:ac:
c2:de:6c:98:87:36:7f:68:b3:bb:84:d8:93:16:63:
b4:05:1c:20:06:89:a7:c9:b6:9e:f0:81:c6:74:e9:
f9:d9:42:84:84:5e:a4:fc:6b:31:e5:a3:ae:b0:e8:
38:36:51:75:ad:9d:29:0b:09:5b:6a:28:ea:0b:0c:
81:47:77:a3:6e:b1:4c:db:9b:bf:17:43:8e:cb:36:
7d:86:16:7f:de:c9:5c:42:52:e0:92:b3:ef:fa:c3:
1a:31:7a:1a:e6:fc:18:fe:bf:13:7c:29:91:b2:87:
98:49:d8:ef:de:6b:9c:f6:d2:8d:01:20:49:db:6c:
fe:f8:78:f4:9f:f1:22:8e:5b:23:77:aa:7d:1b:ea:
11:6d:9b:5b:ed:d3:dc:1e:22:16:e5:44:15:18:1a:
1e:a1:ae:64:dd:3a:8e:84:1d:3e:11:9c:fe:b5:d7:
42:96:78:f9:37:80:fb:f7:af:58:25:d5:71:bf:fc:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:D1:ED:19:C8:06:37:B0:57:80:7F:58:CF:8B:DA:88:B5:90:56
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d4:84:7c:b3:67:36:7d:49:f7:4f:9c:b2:c7:09:43:cf:77:4d:
72:c0:51:89:ea:95:d4:17:e1:da:07:a0:04:89:2f:c4:c5:48:
7c:01:b3:83:2c:00:b3:ba:4d:2a:69:7b:6b:3a:33:29:bd:0d:
77:8d:47:10:99:4f:19:35:f3:4b:bf:67:8b:4b:75:a8:aa:ee:
c2:3b:f8:ef:dc:5c:9b:a0:f0:4f:e0:a4:75:6b:3c:0e:ba:c6:
fc:2c:db:a3:1a:e3:ef:4f:f5:8c:a4:0e:da:bc:b2:5d:43:89:
bf:da:93:c1:4a:c7:07:df:b2:84:3d:92:64:88:a5:4c:03:a3:
b2:3f:31:4e:88:e9:64:1c:bc:0d:15:36:31:51:21:a7:f2:9c:
6a:9d:8e:e4:4d:cd:bc:7d:1b:69:28:6c:1a:8e:52:a2:0a:4e:
3b:c9:a8:27:db:de:90:14:3e:4e:59:b9:da:1a:8c:67:8d:9b:
b7:97:36:fd:ba:26:51:eb:02:bf:d0:c8:b5:44:59:ec:ee:c1:
be:75:e4:b1:72:bb:8f:b9:64:85:0b:41:0a:17:3a:d7:41:a3:
6d:15:e9:9f:f7:c7:79:85:29:72:7b:5a:47:f1:70:22:42:7c:
17:9f:7f:ec:3b:41:7e:f2:16:1b:a7:65:56:e3:16:ca:43:f3:
a8:25:f6:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:53 2026 by rpki-client