Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
File: ujfIenFHccKUkkjf-wehVd_jIEI.mft (raw, json)
Hash identifier: USUbYUaPFOMFaCJjR6SjIC9qX0GnktcqwMgNuHMV25s=
Subject key identifier: FE:D7:52:E1:95:1A:C4:46:D3:39:E5:1B:63:BE:7A:98:A6:83:9D:EE
Authority key identifier: BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
Certificate issuer: /CN=ba37c87a714771c2949248dffb07a155dfe32042
Certificate serial: 01A08BD5DF697A030D989F52F436C7B9C510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
Manifest number: 81
Signing time: Thu 10 Sep 2026 15:00:44 +0000
Manifest this update: Thu 10 Sep 2026 15:00:44 +0000
Manifest next update: Fri 11 Sep 2026 15:00:44 +0000
Files and hashes: 1: TBVe841E8hTpt49jYkM2WIOXK_k.roa (hash: NOuhNXk/OufxdL7HRlmsabi419cAeXvXPi+Yj06V8K4=)
2: ujfIenFHccKUkkjf-wehVd_jIEI.crl (hash: rdMXIkOBhGOWwhPJ/8la/bb8LiqQHzlNQlBpT/ny24E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:df:69:7a:03:0d:98:9f:52:f4:36:c7:b9:c5:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba37c87a714771c2949248dffb07a155dfe32042
Validity
Not Before: Sep 10 15:00:44 2026 GMT
Not After : Sep 11 15:00:44 2026 GMT
Subject: CN=fed752e1951ac446d339e51b63be7a98a6839dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:ca:61:e3:ee:f9:f5:92:97:e9:32:31:9b:
0d:a2:ab:cc:6a:b3:98:b8:9b:91:26:26:70:9f:89:
ef:3d:e7:34:00:37:77:eb:88:be:e3:92:99:f4:f0:
03:80:94:c9:f9:13:95:c5:2d:30:0d:7d:e1:86:60:
15:5c:f0:18:29:c4:ba:0e:20:a7:6f:a8:5a:78:d0:
68:fe:b0:31:b8:00:ae:ba:4d:0e:f9:9d:27:c6:47:
e4:62:6b:46:d2:4d:b6:a4:f8:67:54:4c:80:a8:99:
7d:5c:70:c0:b1:58:71:05:96:83:24:b4:15:1e:e3:
dd:91:5a:e7:fa:8f:fe:3c:74:0b:dd:6d:db:22:d2:
55:f8:4f:03:32:4e:02:ad:f1:1b:bf:13:95:90:c4:
b3:a6:3c:5f:28:f9:16:c0:50:15:e5:51:6d:92:50:
ff:6e:98:5a:73:43:31:ef:f1:e2:45:90:46:f7:32:
5d:75:24:72:7d:cd:ca:c7:14:69:fa:8c:29:e4:87:
8f:7b:d7:95:d2:95:fe:58:e0:48:3d:89:8a:b2:b2:
22:65:62:5a:c0:6e:ea:b7:de:ca:8f:d6:aa:94:3a:
07:21:64:45:e8:42:fb:5c:41:d3:1b:68:a2:bc:03:
9d:0a:8a:03:94:85:b6:ff:8a:76:27:d0:f7:4d:4f:
ce:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D7:52:E1:95:1A:C4:46:D3:39:E5:1B:63:BE:7A:98:A6:83:9D:EE
X509v3 Authority Key Identifier:
keyid:BA:37:C8:7A:71:47:71:C2:94:92:48:DF:FB:07:A1:55:DF:E3:20:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ujfIenFHccKUkkjf-wehVd_jIEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9b519c-61d0-41fc-bc66-219e0ecca660/1/ujfIenFHccKUkkjf-wehVd_jIEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:1b:4b:ef:1f:9b:f0:a3:c2:21:77:01:85:4e:a2:09:e7:87:
9c:f5:19:2d:96:d4:1b:d3:1d:64:fb:80:c5:d2:02:47:d8:38:
ca:95:77:ed:c2:3d:4d:72:ff:58:04:14:b9:a7:6b:4c:93:21:
1d:aa:5d:d0:85:d3:11:4f:51:e2:bb:8a:51:6a:ac:aa:47:ea:
0e:47:d7:0a:c7:2b:25:3b:ea:a1:bc:04:9f:23:f9:6b:a7:2c:
40:62:4d:a3:20:17:3b:ea:44:2c:0f:a1:f4:4a:85:fb:9e:25:
e3:e4:2c:56:ef:2e:ac:2f:8f:6c:18:8d:f8:9b:5f:ba:2d:0a:
14:f6:db:fc:34:0a:eb:76:10:9d:83:5f:8f:ad:c0:06:6d:93:
a3:ac:33:c4:02:ed:3e:45:d7:f8:42:30:f5:4e:86:32:d4:7a:
fb:1f:b4:b5:3f:64:cc:6b:18:97:f4:8f:be:3d:91:2e:21:7e:
57:c1:64:d8:4f:13:f9:50:b3:eb:03:80:b1:0c:98:d2:a8:42:
18:b4:14:b1:42:1e:22:89:54:74:c5:0f:f1:45:af:87:db:56:
87:71:c1:92:87:09:9a:00:29:1c:b8:c3:1c:d2:3d:2a:44:33:
b9:b8:7e:04:16:19:ea:68:fb:76:01:86:20:0d:d5:f6:ca:a2:
77:17:fa:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:07:51 2026 by rpki-client