Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: Hsan3wupkFqnHyILdSSfD7Rem/cDdY9UJC1hE8gkwJM=
Subject key identifier: 80:D2:2A:C0:01:84:C9:50:FB:F2:EC:A9:1D:EB:59:6A:2B:1C:C6:86
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 01A17BF3058B8E639DC78BE0A3D3B106B4F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 12D2
Signing time: Tue 27 Oct 2026 06:01:26 +0000
Manifest this update: Tue 27 Oct 2026 06:01:26 +0000
Manifest next update: Wed 28 Oct 2026 06:01:26 +0000
Files and hashes: 1: D-37R8pTtaYyRSvFF1cIYOk-kgs.roa (hash: VVl+RrZKwp2SWM55JhoijG/n/TZ6UrTZnaeJgiQh+QM=)
2: W9qey5baqBHma2r8fwFEZR9-Ldg.roa (hash: SLfqUOdbocOr5Q5po7pEM7KSA8EWeYDYOcBra5k0Jbo=)
3: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (hash: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: xiEmR1bqWy4OJdiPfoACLV4iQiGl0zPe3wac89Rdl6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f3:05:8b:8e:63:9d:c7:8b:e0:a3:d3:b1:06:b4:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Oct 27 06:01:26 2026 GMT
Not After : Oct 28 06:01:26 2026 GMT
Subject: CN=80d22ac00184c950fbf2eca91deb596a2b1cc686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:7e:e8:6a:b0:9d:c6:3c:43:14:fb:9e:00:7b:
6e:df:a5:96:38:dc:21:10:5b:5a:ac:cd:a0:8e:ec:
90:f0:44:86:28:8f:88:02:55:76:b8:db:d8:14:b8:
72:01:79:a1:80:5b:18:20:3f:c6:d5:a9:8e:7c:c2:
36:5e:49:f8:46:9d:19:dd:7c:7b:5f:d1:30:52:d6:
8c:3f:f6:c8:d7:09:71:bf:0b:fe:45:25:4a:38:4e:
c6:6d:d7:12:d3:93:7e:d7:6b:e0:59:68:31:1d:e3:
bc:6f:ff:50:de:fd:eb:48:7e:04:8c:a2:32:c4:d8:
2a:36:73:87:9f:ca:0f:9d:e0:13:98:6b:5b:0d:b6:
a1:d7:59:a2:e6:45:4b:8c:79:34:35:c9:1f:1a:45:
20:5a:1f:9d:ba:bc:f7:cc:5a:5b:06:92:17:eb:0f:
14:2c:50:18:c0:fe:27:b6:f0:2a:28:3a:fa:83:cc:
57:fc:52:f9:0e:38:ea:0a:24:4e:ec:bb:7b:a5:f5:
96:24:96:45:d2:c2:09:b1:18:fd:16:5a:06:3c:50:
e6:6c:0c:2a:3c:d1:f2:ea:9c:c3:18:ba:89:9d:95:
96:16:19:94:14:b1:25:51:01:a1:62:c1:1b:63:43:
20:5d:85:ac:73:2b:df:d0:9e:91:e4:18:7e:b2:00:
9c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:D2:2A:C0:01:84:C9:50:FB:F2:EC:A9:1D:EB:59:6A:2B:1C:C6:86
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:04:54:a7:b5:60:92:fc:e0:67:a4:9c:ff:4f:03:0f:b0:9e:
68:25:14:8e:72:44:aa:5e:ef:b4:82:0d:99:8b:36:a6:cc:60:
40:05:58:78:8d:89:b8:b7:33:d4:ff:08:85:76:42:9b:4e:1e:
5b:19:46:5f:23:36:24:db:ac:7b:12:db:b1:42:62:29:a5:c8:
0f:e1:85:d1:ed:ed:d0:e3:0c:9c:4b:59:11:fd:4b:4d:15:6e:
fd:3f:5c:f7:8c:56:98:0f:70:e2:02:22:c3:95:a1:73:47:0d:
d0:f8:52:53:d6:38:94:44:98:a7:b5:99:d5:4a:c6:10:77:9c:
43:9c:97:cd:c8:07:e4:1c:21:c6:43:5a:e0:52:f9:50:ed:78:
29:52:b8:a7:c0:d3:02:d2:67:02:d6:3b:61:7f:c0:31:fe:a0:
00:be:82:f1:b1:d7:c6:79:ae:37:c0:a8:ef:80:89:4a:ca:fe:
04:7a:10:11:94:b1:90:d0:9a:2c:69:2d:d9:79:5f:d2:4f:f7:
8d:e0:28:4b:50:35:42:0f:4f:f7:a1:28:d6:81:3f:7a:51:50:
0d:5c:d9:36:2e:fd:dc:73:b9:83:e6:3c:a0:b4:b8:eb:71:31:
d7:24:d3:24:c6:44:67:04:d9:f9:ac:11:4c:b9:82:6f:48:dc:
14:fa:5d:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:32:37 2026 by rpki-client