Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: EV20j+BWoexZUng+2Vnz0oW8CSTBVFR0FnpTsENfFVY=
Subject key identifier: 94:82:BA:B5:CE:61:90:B7:6C:DA:9B:05:42:30:36:0A:C3:DD:47:50
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 019E9C298FAF2611A69E413FD283347F0E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 11C6
Signing time: Sat 06 Jun 2026 09:00:29 +0000
Manifest this update: Sat 06 Jun 2026 09:00:29 +0000
Manifest next update: Sun 07 Jun 2026 09:00:29 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: Q7USvezS7Uisk69SK3GtkW/vaJAVDpVaZYFn4k8Sx1U=)
2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:9c:29:8f:af:26:11:a6:9e:41:3f:d2:83:34:7f:0e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Jun 6 09:00:29 2026 GMT
Not After : Jun 7 09:00:29 2026 GMT
Subject: CN=9482bab5ce6190b76cda9b054230360ac3dd4750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8a:ab:92:e8:00:b9:46:a2:2c:e3:8b:7b:7a:
5a:86:c0:fa:9d:da:93:a2:24:14:f3:20:b5:12:cf:
36:d8:93:d7:58:39:31:21:d2:eb:cc:45:3e:97:ff:
f1:ce:b2:be:2a:f8:07:0c:91:1d:4e:28:a2:56:4f:
48:03:fa:dd:b0:21:d6:2a:4d:5b:16:a6:f5:d1:0d:
1f:e4:ee:85:81:d2:41:4a:e9:f6:9b:f5:eb:ab:d1:
cf:5d:33:ce:12:0d:7c:e6:10:5c:65:b6:f8:2f:66:
0e:5e:b7:e7:0b:42:c3:83:a2:18:1f:79:46:84:11:
e3:cc:71:03:b2:54:09:88:18:3b:ba:eb:fb:c1:a9:
c4:27:4f:c8:c0:9d:a3:c1:8b:b5:e9:5d:65:0a:70:
fc:78:65:20:b7:42:c0:f0:7b:2a:75:a6:5d:38:d1:
31:6b:44:76:8b:8b:94:ef:3d:22:e3:a0:39:fe:96:
73:4c:3e:ed:cf:9b:4f:6b:83:73:34:18:79:71:66:
fa:7f:7a:43:f5:41:e7:e0:6a:d2:a6:41:01:f1:19:
02:3f:73:8b:69:52:34:40:3c:46:13:ea:8f:5a:8d:
8a:6c:d3:1a:09:9f:80:84:6b:ee:16:5a:da:6e:41:
72:82:2c:26:1a:34:d1:f0:2f:ab:fe:8d:91:03:e9:
f7:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:82:BA:B5:CE:61:90:B7:6C:DA:9B:05:42:30:36:0A:C3:DD:47:50
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:f4:79:ea:f5:8f:65:3e:af:0e:cc:cf:4c:79:cc:ca:67:46:
7e:39:30:99:fd:21:37:c0:36:bf:c1:c4:1c:73:33:7e:b7:53:
00:b7:55:82:0c:27:ef:e8:9c:42:e1:23:ab:9a:a9:40:42:c1:
8e:52:90:b5:78:cf:13:9f:0b:f6:1b:3e:ef:5a:1f:8c:f2:7b:
a5:a1:d7:6b:23:3f:19:a7:a3:9b:79:73:1d:19:1e:e3:35:00:
8d:6e:31:30:7e:88:e4:cc:13:3b:49:ba:f4:c7:1f:63:14:cb:
97:5b:d4:bb:0a:20:dd:a0:c2:5d:a8:50:51:7f:f7:75:9e:36:
a6:78:83:89:57:98:af:23:b9:d3:ba:4f:0c:16:54:70:bb:26:
66:f9:2a:dc:50:64:d7:4c:ae:15:9d:50:ea:04:2b:da:d8:17:
d9:20:a9:7f:4f:5c:eb:3e:61:a8:41:00:2a:39:ca:6c:59:4b:
b5:a3:3c:eb:a0:19:1b:09:88:35:d5:17:0f:6f:a2:7d:92:52:
91:f0:a1:f8:24:c1:7a:c8:24:b5:7a:2c:5a:03:59:55:2b:3c:
e9:82:38:8c:5d:38:e4:7a:db:62:60:14:61:51:b0:f3:6b:c8:
e3:55:0c:d5:d5:3a:db:8a:70:d5:8d:0c:19:d5:e2:b8:02:e9:
9f:92:1f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:23:51 2026 by rpki-client