Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
File: ujfIenFHccKUkkjf-wehVd_jIEI.mft (raw, json)
Hash identifier: 8xkVCZpg0/kaBHUe1ixbhoOcpBz1nljWaGKy7qjEYSs=
Subject key identifier: 00:7E:1D:3C:37:46:44:DC:92:4E:B0:76:80:DF:9B:F6:2D:11:52:2A
Authority key identifier: BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
Certificate issuer: /CN=ba37c87a714771c2949248dffb07a155dfe32042
Certificate serial: 01A1795EFB178E201860C53052B0C1236D2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
Manifest number: FC
Signing time: Mon 26 Oct 2026 18:00:30 +0000
Manifest this update: Mon 26 Oct 2026 18:00:30 +0000
Manifest next update: Tue 27 Oct 2026 18:00:30 +0000
Files and hashes: 1: TBVe841E8hTpt49jYkM2WIOXK_k.roa (hash: NOuhNXk/OufxdL7HRlmsabi419cAeXvXPi+Yj06V8K4=)
2: ujfIenFHccKUkkjf-wehVd_jIEI.crl (hash: A5ldAeDoNgAGdmN3VS6B6PgrtArwgweA8GFQEjXgytE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5e:fb:17:8e:20:18:60:c5:30:52:b0:c1:23:6d:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba37c87a714771c2949248dffb07a155dfe32042
Validity
Not Before: Oct 26 18:00:30 2026 GMT
Not After : Oct 27 18:00:30 2026 GMT
Subject: CN=007e1d3c374644dc924eb07680df9bf62d11522a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:1b:7c:3a:23:23:d1:01:ab:af:03:0f:0b:
fa:66:28:55:d1:16:fd:23:41:4a:17:e2:78:a5:67:
0c:7a:21:ec:3c:b0:9e:d4:74:ee:9a:a6:25:42:f4:
ce:0d:2e:6c:03:3b:be:01:5a:bf:4c:98:2c:cd:55:
46:af:1e:d2:c8:0d:70:78:26:9f:3c:ef:52:93:31:
55:dc:2d:9d:d0:22:0a:bf:5f:b2:e8:55:8b:bf:56:
f6:3b:20:62:bd:00:98:fa:e4:29:f4:e4:70:65:8b:
40:81:27:f6:96:33:d0:ad:4b:52:ff:5e:33:c4:2b:
1f:f7:f5:52:9a:d2:23:40:8d:13:86:02:e9:17:f2:
be:d8:53:b4:e3:70:e2:d9:8c:9b:ca:fb:d4:98:72:
b9:34:88:9a:81:82:aa:16:10:15:b9:a4:4e:28:e8:
c8:d6:e8:77:f7:93:bb:41:36:b0:a6:df:36:48:28:
e1:ee:89:1f:81:66:4c:c1:7d:ba:2f:c6:6e:b0:b0:
d2:53:9d:27:f0:2c:b5:1d:1c:66:f2:19:3d:97:e4:
9a:4b:55:d8:32:24:d7:15:dd:b6:1f:91:7a:a8:06:
ba:48:61:7f:5e:79:f0:0f:9f:ac:08:85:57:8f:e0:
f4:cb:30:d5:d2:9c:72:1c:45:b3:05:1d:64:43:5e:
eb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:7E:1D:3C:37:46:44:DC:92:4E:B0:76:80:DF:9B:F6:2D:11:52:2A
X509v3 Authority Key Identifier:
keyid:BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:ef:29:0a:a0:61:97:23:12:96:85:f4:63:03:ba:22:be:65:
c6:00:a1:e2:25:93:cf:68:95:83:20:2e:3c:08:59:05:93:bd:
95:ff:a0:93:59:62:bf:5f:e9:97:e4:a4:b5:2b:b9:bb:be:83:
ea:0b:27:2c:71:b6:98:cf:db:6e:9b:92:60:f6:14:0b:44:7e:
fa:87:de:54:3d:9c:ae:b0:74:33:5f:93:d1:a3:7d:b3:7b:9f:
87:34:ba:41:83:1f:2c:87:e2:a1:d8:6d:d3:b7:ef:e3:1a:e6:
71:42:e7:5a:99:2a:49:26:13:0c:d8:cc:47:5e:c4:b6:26:fb:
b2:74:bf:a3:58:a8:00:39:74:10:7b:e6:fa:a8:d9:70:2a:95:
93:24:fc:f0:ca:b4:03:06:7c:73:d2:ac:43:de:a1:92:80:ce:
b5:d0:bc:3a:b6:3c:f1:02:05:b8:92:75:c3:00:62:74:7d:94:
61:9c:a7:16:a9:4b:ad:21:f6:8b:4b:3d:98:d4:90:db:38:d2:
19:55:53:4b:71:f9:dc:f2:16:41:6d:5c:ab:d9:8b:92:00:ea:
05:6f:c3:9f:04:be:64:4c:7d:58:8b:ae:6e:dd:e9:bc:8e:e0:
ab:09:da:c0:05:cb:ad:c4:23:9a:96:a0:74:6d:16:26:34:cb:
b6:e2:d7:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 22:56:48 2026 by rpki-client