Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: vDmHjgBtZprGbKhZfPzc+VgL5enMRp34sEkaBd09AI8=
Subject key identifier: 48:EF:9D:AE:43:67:DA:BA:54:84:E0:71:16:B1:4B:9F:FF:DD:56:D0
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 01A1705C3C721F76EBF1EBFD5CC47B36BC88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 133D
Signing time: Sun 25 Oct 2026 00:00:55 +0000
Manifest this update: Sun 25 Oct 2026 00:00:55 +0000
Manifest next update: Mon 26 Oct 2026 00:00:55 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: EGinlQLR1rwzWr6+ia9DnjrkytSgVaZwR7NH4nay0rk=)
2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:3c:72:1f:76:eb:f1:eb:fd:5c:c4:7b:36:bc:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Oct 25 00:00:55 2026 GMT
Not After : Oct 26 00:00:55 2026 GMT
Subject: CN=48ef9dae4367daba5484e07116b14b9fffdd56d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:ef:59:99:8e:c3:cc:4a:80:50:3c:ae:98:ea:
ff:8d:b6:dc:4b:ed:75:01:9b:9d:91:4b:92:02:34:
71:2c:e5:7b:87:38:a1:ce:cf:1f:16:38:c5:0e:03:
87:d6:c9:a6:de:d1:6b:fc:a6:66:f7:70:39:6f:ec:
aa:da:0f:3b:bb:c2:39:e3:75:f0:5b:1e:93:76:42:
b5:d1:d6:78:a4:05:da:92:18:78:39:38:99:b8:e0:
7f:5f:2e:27:25:82:b6:26:41:14:93:d4:1e:bf:23:
19:ce:6b:71:61:64:9b:4d:90:32:1f:92:d9:c4:9d:
5d:88:c3:f6:8d:c8:0c:7a:1d:45:64:9d:26:be:86:
10:70:1b:62:d2:87:3b:e4:65:65:ed:ac:40:76:4b:
6c:8e:37:dc:35:77:55:7c:b7:19:25:fe:10:c4:46:
01:41:f7:02:08:14:a1:48:b5:97:aa:f7:8c:5c:2a:
ca:d3:30:e1:b7:d1:3a:06:00:69:43:63:c3:aa:ad:
49:d4:da:5c:2a:37:95:63:3e:6c:eb:e8:da:4f:34:
b5:16:3e:a4:24:52:04:d2:dd:41:74:65:74:40:87:
cc:ce:09:8f:32:6a:98:c3:f8:17:b6:de:a0:6a:0d:
37:a8:92:c6:d0:f0:00:9c:45:07:85:de:09:0b:09:
af:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:EF:9D:AE:43:67:DA:BA:54:84:E0:71:16:B1:4B:9F:FF:DD:56:D0
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:64:79:11:d3:0e:4f:5f:fd:31:56:c1:f5:f8:3d:9d:53:f8:
1d:94:eb:9f:73:f1:0f:b6:f4:1c:23:fa:85:d5:d8:79:83:df:
2c:d9:d4:82:af:7e:54:95:3f:63:97:56:4a:de:4f:83:0f:5e:
36:f7:b4:08:21:8b:5b:50:75:ed:4c:ae:21:d6:04:ec:e5:9e:
60:bb:3d:47:25:14:44:bb:ec:b5:c9:1c:5c:7c:77:72:bc:a7:
23:06:9c:b3:d9:bc:61:05:e8:4c:d4:50:2c:b5:a7:4a:43:57:
03:91:9b:c5:b7:3c:d9:18:76:5e:7e:ee:c5:77:d7:d4:2c:ed:
66:23:f9:8d:5f:2c:91:58:f8:14:9f:9a:0e:84:d2:cd:20:22:
90:e0:64:ed:21:3d:d5:ec:68:e1:ce:aa:ed:c5:59:e0:91:07:
72:30:fd:50:dd:4f:ea:d8:f9:a5:7c:1e:ed:51:3a:11:5c:48:
84:60:23:f4:bb:78:21:fb:22:21:e0:c1:51:2f:09:c6:3b:2f:
08:bb:86:f8:18:89:96:a7:30:78:cb:99:d4:97:fd:4d:a7:55:
cf:a1:4e:d5:0a:20:e2:84:b6:e7:af:95:b5:6d:f5:64:c8:7e:
4f:a2:4d:7e:3c:a3:37:37:cf:89:b5:d5:da:aa:cd:8c:fa:2f:
60:df:8a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 06:09:36 2026 by rpki-client