Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
File: 1UfPnyd2dHcSCx07JsxXphCZpyQ.mft (raw, json)
Hash identifier: 32BWTL8BljydGOn2apkKBnG1a/+lkTWmar025nCyZHE=
Subject key identifier: 3D:DB:CD:21:B5:99:EA:5B:A5:2D:BA:DA:C7:48:8E:63:51:D5:BC:92
Authority key identifier: D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
Certificate issuer: /CN=d547cf9f27767477120b1d3b26cc57a61099a724
Certificate serial: 01A1423A712845EF6D77A39BC1294C6790F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
Manifest number: 0856
Signing time: Fri 16 Oct 2026 01:01:28 +0000
Manifest this update: Fri 16 Oct 2026 01:01:28 +0000
Manifest next update: Sat 17 Oct 2026 01:01:28 +0000
Files and hashes: 1: 1UfPnyd2dHcSCx07JsxXphCZpyQ.crl (hash: VpFlONK2xUo4jXxBXHJHSeOmxfM/i0SRrT8rni2BhYw=)
2: QQJWhed3rfbvr8DSkn4rG6p-5Co.roa (hash: JUa0kpGlxdjoqBVc/7DWrRkAYISE+s2XuClwXnSqTUk=)
3: kMBoN8BIPVWo7lqtxGHBrurWvHw.roa (hash: i1cQsNkY+Ek8/EIGbv2ilZlKDr5/h3NWpJx8CDdeQnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 17 Oct 2026 01:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:42:3a:71:28:45:ef:6d:77:a3:9b:c1:29:4c:67:90:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d547cf9f27767477120b1d3b26cc57a61099a724
Validity
Not Before: Oct 16 01:01:28 2026 GMT
Not After : Oct 17 01:01:28 2026 GMT
Subject: CN=3ddbcd21b599ea5ba52dbadac7488e6351d5bc92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a6:a2:20:bc:c9:f6:9f:be:57:2b:95:e9:56:
14:35:0f:b6:6b:f9:7f:3c:9c:6c:3e:8d:df:d0:b9:
ca:e8:0d:61:ad:bb:52:ad:1f:e9:25:8d:f6:be:17:
b7:8b:fa:33:ad:42:00:d7:c4:9e:a5:44:9f:7d:d2:
e7:7f:4d:6c:00:e4:4b:15:78:6f:a0:e1:d8:f9:d9:
10:62:e3:c5:28:ff:c3:be:07:91:4b:bc:e5:c0:da:
3f:0f:94:3c:5c:0c:9b:c5:66:1f:ac:c8:dd:73:3a:
55:a9:ab:0a:40:24:ec:fd:62:43:12:cc:ab:df:5f:
e8:03:f7:3c:d7:87:98:cc:c6:6b:68:71:dd:31:4f:
34:22:fc:ea:66:42:6b:94:09:54:47:88:3b:d0:b9:
58:2c:b5:f1:b3:77:27:06:07:43:8a:7f:2c:b2:78:
d7:55:ee:67:d7:d6:91:46:e7:9d:31:f9:c8:72:f0:
e1:18:67:45:d7:cf:b3:c8:23:7d:f4:8e:13:88:cc:
6b:aa:14:f5:7f:8c:61:f2:61:67:a1:18:19:ac:97:
53:d5:35:5a:d7:f5:a2:05:6b:24:39:f7:d6:1e:fa:
13:b5:90:78:e8:df:fa:bd:0e:5b:c1:95:25:85:61:
be:72:51:41:e7:8b:6f:93:7f:d5:e3:cd:3f:cd:99:
7a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:DB:CD:21:B5:99:EA:5B:A5:2D:BA:DA:C7:48:8E:63:51:D5:BC:92
X509v3 Authority Key Identifier:
keyid:D5:47:CF:9F:27:76:74:77:12:0B:1D:3B:26:CC:57:A6:10:99:A7:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1UfPnyd2dHcSCx07JsxXphCZpyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/063e59-9e94-4e91-8b7e-6f4de020aae6/1/1UfPnyd2dHcSCx07JsxXphCZpyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ce:e7:25:7a:7b:8b:99:6f:8f:0b:b5:c5:ab:a8:19:68:b2:
73:95:e0:1c:79:14:08:1c:8d:6e:50:0c:13:d9:5b:f6:15:b1:
fe:6c:5b:42:45:ab:e1:59:92:74:bc:bc:ad:e6:98:95:51:85:
a2:8b:08:a6:b1:0d:00:32:aa:17:42:60:35:d7:50:eb:f7:3d:
52:1a:9d:ff:53:51:a8:46:cf:b1:aa:f4:0b:99:f6:f5:8a:b6:
5b:c2:94:4a:3f:c4:df:61:d0:1d:e1:ac:e8:3f:97:ab:9f:4f:
d6:4f:43:d2:1e:99:98:3f:88:cf:6c:c4:18:4a:26:43:90:87:
87:4a:f5:e7:78:15:42:53:d3:d8:f1:e2:a9:1a:90:c1:22:30:
ab:e7:94:8a:cf:78:98:70:d1:56:fa:6d:7c:2b:eb:99:7f:43:
f0:1a:43:0a:03:b6:df:f7:42:51:44:7c:a8:56:8d:0d:8d:30:
98:94:97:7f:cd:e7:04:83:33:0f:8e:72:a9:be:6b:90:c2:27:
90:32:2a:b3:a2:5e:2b:b2:70:a0:5f:5a:63:28:ff:ee:8e:2f:
54:b0:55:36:aa:4e:c4:d0:7e:ce:87:26:0b:1e:19:06:45:b7:
59:f0:e5:bf:01:26:c2:ba:5b:2b:b9:22:63:4f:9d:7d:eb:f2:
fc:37:9d:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 11:14:16 2026 by rpki-client