Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: x758F3A/8yW/4Wk0+gb9SLXCOlhGXgFzWTQMpOka7Mg=
Subject key identifier: 77:68:B0:7E:DD:DA:66:67:70:93:F5:2D:EF:3A:F2:27:AF:6D:EE:6A
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 01A120F7D3836CA372EA008558746CDDEA9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 0B20
Signing time: Fri 09 Oct 2026 14:01:14 +0000
Manifest this update: Fri 09 Oct 2026 14:01:14 +0000
Manifest next update: Sat 10 Oct 2026 14:01:14 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: Wljk2yzLHGPnSl/9yKSP8ocF1VbC/gJ1vg4upD9k7TE=)
2: n29c-eqwdShZtcEOhZv3Ign1VGo.roa (hash: uxh/IP+egHWNQsX3vB68RQ/0/wzosXKCxI7jga5PL14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:f7:d3:83:6c:a3:72:ea:00:85:58:74:6c:dd:ea:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Oct 9 14:01:14 2026 GMT
Not After : Oct 10 14:01:14 2026 GMT
Subject: CN=7768b07eddda66677093f52def3af227af6dee6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:4c:3d:79:38:6d:5c:77:ce:82:81:9d:97:86:
bd:4f:2c:7a:1d:b0:05:87:a8:2e:6b:4c:f5:6d:cd:
49:84:1f:31:3d:12:1e:19:d5:d9:e7:53:da:ca:fb:
10:94:a1:08:da:d9:8e:dd:90:11:e8:17:57:06:16:
af:e3:82:63:07:33:83:2c:6b:97:8f:63:f9:0c:ac:
96:21:10:c3:95:91:12:73:fb:42:49:10:09:dc:5e:
29:f4:a2:08:4e:1d:fe:e0:69:06:cf:7e:77:84:d5:
7c:3e:14:3b:50:87:fe:cf:44:3f:f9:40:63:53:33:
13:f0:ac:0e:3b:af:80:bb:77:c8:fc:2f:ff:8b:11:
bf:2d:23:ef:35:96:57:c4:90:f5:c2:a9:cb:ad:44:
45:02:a2:57:46:22:75:87:a2:78:f4:1b:55:7b:f8:
bb:88:96:eb:05:a2:18:84:a8:6f:c2:3a:39:63:6e:
bc:75:0e:28:2e:b1:6a:cd:5a:1e:a1:71:93:50:f8:
b6:f4:2d:70:ca:14:ff:b2:ab:19:45:a0:9e:8b:ce:
1c:45:69:91:d3:3f:cf:4f:56:87:ee:44:42:73:ec:
7e:6c:54:f2:e3:cf:34:4f:9e:b9:a1:de:ed:3f:da:
ea:a2:0f:cd:f7:06:19:e0:91:82:ec:6f:a5:ae:51:
df:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:68:B0:7E:DD:DA:66:67:70:93:F5:2D:EF:3A:F2:27:AF:6D:EE:6A
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ec:dd:ca:78:94:ce:55:c2:04:f8:b0:47:76:58:85:ec:26:
46:b7:3c:52:cf:e0:29:8b:e3:ed:cf:5f:b0:6a:c5:20:bb:69:
58:51:77:20:8c:72:e6:ea:2d:0f:27:0a:42:10:fa:36:e8:ad:
f7:9f:02:8f:23:28:b1:f7:af:52:46:93:63:aa:73:b3:57:e1:
82:e4:a5:ef:49:d6:1b:cb:ca:a6:22:7a:e9:c8:bf:34:38:85:
e7:8a:9b:28:aa:84:e8:65:31:ca:c3:80:8c:c2:cc:3a:25:7e:
5a:97:c8:2c:d2:4e:a8:dc:a6:fb:f4:30:55:84:82:c9:95:62:
f7:e6:fe:1a:94:70:a0:4e:b8:f6:42:52:ba:7c:75:2d:b4:b4:
29:30:14:a0:b3:74:e0:cf:f6:49:cd:4f:f4:33:a4:7d:a5:9b:
6c:b7:43:d3:12:bc:09:13:0b:8b:ee:76:d6:87:85:d3:bd:08:
60:57:01:b9:4d:1c:b6:07:97:08:91:a1:16:94:b6:98:7d:c0:
22:d2:63:ef:c3:22:6d:4e:ae:98:08:17:80:45:cc:5b:11:93:
9c:01:e9:73:df:ef:bb:81:21:60:f0:6e:d2:52:8e:28:77:4e:
3c:f1:ea:63:bb:d1:2c:2f:c9:f6:27:35:48:37:27:8d:66:54:
a1:77:92:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 00:38:38 2026 by rpki-client