Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: sv6d2PD48Z4ha7HJftCLm4hgp+4p+2YKUYX3YW/Q7II=
Subject key identifier: 4E:AB:1D:4F:B2:65:81:C1:FB:86:48:82:44:7D:8C:9D:44:F1:AB:02
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 019FA0A8F89BC02EFFAD4211D9906FA6B0E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 11DA
Signing time: Sun 26 Jul 2026 23:00:55 +0000
Manifest this update: Sun 26 Jul 2026 23:00:55 +0000
Manifest next update: Mon 27 Jul 2026 23:00:55 +0000
Files and hashes: 1: D-37R8pTtaYyRSvFF1cIYOk-kgs.roa (hash: VVl+RrZKwp2SWM55JhoijG/n/TZ6UrTZnaeJgiQh+QM=)
2: gkon8URGKawWYsPCktsOv4GJyC0.roa (hash: wGsl+Lv3yiWPoxNTkh9Ez43KMkCIutQ7CbBGSolZmCM=)
3: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (hash: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: fAK/OdZnroEy73dEXL0LeJpZzBWubwGinlBIjObe6Ek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:f8:9b:c0:2e:ff:ad:42:11:d9:90:6f:a6:b0:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Jul 26 23:00:55 2026 GMT
Not After : Jul 27 23:00:55 2026 GMT
Subject: CN=4eab1d4fb26581c1fb864882447d8c9d44f1ab02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:72:41:62:b1:50:77:44:18:ac:78:b9:de:23:
df:18:38:73:e9:75:aa:e5:48:a8:03:ad:8e:2f:cb:
d9:57:bb:46:2a:98:b5:37:2d:1b:80:cc:d7:24:4a:
6b:9c:49:60:c3:b8:40:7f:e2:da:0a:c7:89:ed:e1:
91:e5:96:6b:16:b3:ad:27:72:6c:7a:4d:d5:43:73:
7f:0f:7c:97:63:00:35:aa:e0:9d:4d:1e:fa:08:ea:
6c:d6:3a:e7:1f:fe:ac:be:4c:34:33:b9:8f:e0:84:
eb:0f:2d:f5:ee:54:45:77:98:00:3b:ce:45:73:de:
26:6d:2d:17:49:dd:f4:92:f0:f6:6e:7a:44:ce:4a:
8d:0e:d1:9f:93:d7:4a:f8:f7:80:64:12:b6:28:b0:
44:e6:92:71:b3:e2:bd:2c:b5:2f:80:30:92:ed:4c:
f1:29:b6:76:13:66:1c:c5:d5:a9:1c:09:53:58:53:
1c:60:c4:ad:1e:08:52:64:a7:68:d8:a5:e2:78:83:
33:58:88:1b:6f:38:da:c5:a3:5b:2e:16:05:a9:c3:
47:e3:a1:cd:51:1a:b1:84:95:5c:f0:b1:ee:e5:7e:
ea:7a:d0:76:58:37:cb:fe:f1:f7:ad:c7:47:ba:dd:
6a:c0:f5:bb:79:d9:31:2b:88:47:7f:3e:47:04:9a:
c4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:AB:1D:4F:B2:65:81:C1:FB:86:48:82:44:7D:8C:9D:44:F1:AB:02
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:3d:ff:1a:f7:dd:fa:3b:64:f5:c9:99:fc:34:38:9f:74:d0:
a6:d5:9e:2f:33:23:96:54:5f:28:65:08:52:c6:92:ea:3d:23:
78:e4:a8:eb:01:f0:b7:d3:c2:b6:81:05:e7:83:b5:e3:72:bc:
12:fb:f7:78:fa:de:a8:20:44:7d:63:53:c9:f5:6d:87:ae:a7:
87:1a:1f:5e:4d:ed:fb:d4:36:1d:50:9b:19:95:a7:67:f9:51:
5a:74:e8:78:d3:86:88:20:0b:a3:36:7d:e5:4f:44:82:b3:32:
40:5a:7f:40:3b:ce:3b:96:94:f2:ea:af:f2:e7:e8:03:06:91:
ce:16:5e:1d:17:04:8e:9a:a7:93:9a:a5:ff:9d:ca:bf:51:76:
4f:e0:9a:c6:34:d3:14:3a:86:9c:45:35:2b:70:26:b1:1d:44:
b1:51:90:bc:af:ab:32:70:80:94:2e:a3:a2:d6:d4:03:cf:8f:
5c:3c:c7:e9:fd:bf:dc:9b:8a:7c:34:5e:7b:07:1f:dc:93:c9:
28:83:1a:5b:1b:6f:b8:cf:9e:c0:c3:91:f4:29:33:2f:46:48:
57:02:a2:17:35:4d:b2:f0:31:77:97:e1:a7:2a:08:52:4b:ea:
70:15:9c:75:10:5b:4c:83:a3:a1:b2:83:cc:6c:cc:3f:fa:68:
92:90:a5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:01:59 2026 by rpki-client