Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
File: UFBG2nJq75m-uIowyKb67-dSB1M.mft (raw, json)
Hash identifier: pLSpXnCcI8uttX4FAI4TUVuXDbmRMIEO/TijoNChEQo=
Subject key identifier: 46:8A:0F:CD:C2:65:03:91:62:0B:62:A6:FF:CD:37:52:27:93:2B:59
Authority key identifier: 50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
Certificate issuer: /CN=505046da726aef99beb88a30c8a6faefe7520753
Certificate serial: 01A17439A6FF0F59AB03FFF4CBA264B4DCB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
Manifest number: 133F
Signing time: Sun 25 Oct 2026 18:01:37 +0000
Manifest this update: Sun 25 Oct 2026 18:01:37 +0000
Manifest next update: Mon 26 Oct 2026 18:01:37 +0000
Files and hashes: 1: UFBG2nJq75m-uIowyKb67-dSB1M.crl (hash: 8rdSbM+gK+wLtJozFutOREu+CVYOtWYPBGuZkN4rhpo=)
2: VrllH5lvxOXiEVVSba8nkT-lWmQ.roa (hash: MptkH7rNuQFXgV7cW16D7ZIxR771HBqFh8JOnOVzIAw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:39:a6:ff:0f:59:ab:03:ff:f4:cb:a2:64:b4:dc:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505046da726aef99beb88a30c8a6faefe7520753
Validity
Not Before: Oct 25 18:01:37 2026 GMT
Not After : Oct 26 18:01:37 2026 GMT
Subject: CN=468a0fcdc2650391620b62a6ffcd375227932b59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:6e:7f:1b:e2:15:58:80:9b:f6:66:cb:8d:63:
fb:ef:a0:4d:f8:8a:58:c1:e4:75:fe:16:dc:06:4b:
68:4c:3f:5f:b2:68:1f:05:dd:7b:5a:95:96:e2:fc:
bc:71:b8:5c:62:79:eb:77:c4:b7:a1:70:0d:ce:0c:
df:4f:7e:ab:e4:f5:91:5c:6f:44:5e:66:9c:ea:90:
40:26:2d:d4:4d:a7:d1:b7:27:d0:14:9c:e2:2b:4d:
60:34:37:c5:d3:47:3b:45:ff:77:c2:80:2b:f7:40:
cd:d3:1c:c6:ba:49:a8:ad:f5:41:7a:8f:52:5e:42:
28:87:b4:c7:63:95:7d:11:23:5e:7b:ce:bf:ca:8d:
39:49:b6:c2:40:55:40:f3:1e:f9:6b:0b:36:89:8e:
05:d8:1a:11:ee:b0:19:51:ec:2d:66:65:3c:23:f2:
46:c3:9a:90:10:ec:e1:36:90:e1:ed:09:f5:e5:13:
61:bd:1b:f5:b2:45:1a:08:3f:5a:fb:a2:e9:1d:2d:
7f:7e:b5:a3:d6:c1:59:6e:a2:66:fa:c7:a6:2c:1f:
e1:01:ae:20:83:0d:97:68:0a:37:fd:c2:83:75:2b:
2f:b8:1e:f8:05:8f:d6:83:47:aa:57:50:7f:08:e4:
4d:5b:14:6c:4c:d1:9c:e4:1b:62:31:98:26:f2:3c:
e0:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:8A:0F:CD:C2:65:03:91:62:0B:62:A6:FF:CD:37:52:27:93:2B:59
X509v3 Authority Key Identifier:
keyid:50:50:46:DA:72:6A:EF:99:BE:B8:8A:30:C8:A6:FA:EF:E7:52:07:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFBG2nJq75m-uIowyKb67-dSB1M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/47c2da-9c68-4f6f-9798-282fa2c01153/1/UFBG2nJq75m-uIowyKb67-dSB1M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:15:40:78:a2:1f:f1:4e:21:6a:5f:73:3e:a1:97:f9:6e:a4:
45:2b:a6:f0:94:d3:6f:b0:9f:30:b7:99:98:16:37:ef:1b:7d:
fa:15:99:6f:5b:22:6e:e9:58:1b:be:54:45:3b:34:c9:8f:af:
bd:8d:7d:c2:f9:32:2e:7c:bd:d6:15:33:b3:35:6f:b9:df:4a:
06:bc:c4:70:b7:44:39:3a:34:86:e6:2e:e6:82:96:60:60:a8:
31:fe:7e:93:1f:18:29:c6:f6:9b:b1:9a:52:fe:03:59:ea:46:
ed:7e:fc:b0:79:54:ce:b3:a7:e1:52:88:18:d9:26:85:9c:5e:
17:2f:27:e8:88:af:99:a6:37:39:da:48:71:48:fb:59:cf:47:
36:28:04:bf:34:52:86:ed:fa:e2:59:af:d6:37:a8:0e:6d:02:
bd:87:e2:28:94:74:a0:c1:e9:17:7b:a0:da:74:53:8e:20:f4:
08:23:b4:e4:68:11:ba:40:12:33:81:83:85:91:31:d2:7d:a4:
b3:d4:b8:08:fa:34:ea:90:44:05:f9:e4:d8:1b:e5:62:a7:c4:
24:66:2e:9b:cd:fe:25:57:d2:b9:cd:e8:99:ff:e5:6b:01:bd:
e2:34:93:61:3b:5f:b7:89:a0:2d:f0:48:92:5b:86:cf:75:29:
46:46:bb:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF0Oab/D1mrA//0y6JktNywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTA0NmRhNzI2YWVmOTliZWI4OGEzMGM4YTZmYWVmZTc1
MjA3NTMwHhcNMjYxMDI1MTgwMTM3WhcNMjYxMDI2MTgwMTM3WjAzMTEwLwYDVQQD
Eyg0NjhhMGZjZGMyNjUwMzkxNjIwYjYyYTZmZmNkMzc1MjI3OTMyYjU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG5/G+IVWICb9mbLjWP776BN+IpY
weR1/hbcBktoTD9fsmgfBd17WpWW4vy8cbhcYnnrd8S3oXANzgzfT36r5PWRXG9E
Xmac6pBAJi3UTafRtyfQFJziK01gNDfF00c7Rf93woAr90DN0xzGukmorfVBeo9S
XkIoh7THY5V9ESNee86/yo05SbbCQFVA8x75aws2iY4F2BoR7rAZUewtZmU8I/JG
w5qQEOzhNpDh7Qn15RNhvRv1skUaCD9a+6LpHS1/frWj1sFZbqJm+semLB/hAa4g
gw2XaAo3/cKDdSsvuB74BY/Wg0eqV1B/CORNWxRsTNGc5BtiMZgm8jzgXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEaKD83CZQORYgtipv/NN1InkytZMB8GA1UdIwQY
MBaAFFBQRtpyau+ZvriKMMim+u/nUgdTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgt
MjgyZmEyYzAxMTUzLzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC80N2MyZGEtOWM2OC00ZjZmLTk3OTgtMjgyZmEyYzAxMTUz
LzEvVUZCRzJuSnE3NW0tdUlvd3lLYjY3LWRTQjFNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoxVAeKIf
8U4hal9zPqGX+W6kRSum8JTTb7CfMLeZmBY37xt9+hWZb1sibulYG75URTs0yY+v
vY19wvkyLny91hUzszVvud9KBrzEcLdEOTo0huYu5oKWYGCoMf5+kx8YKcb2m7Ga
Uv4DWepG7X78sHlUzrOn4VKIGNkmhZxeFy8n6IivmaY3OdpIcUj7Wc9HNigEvzRS
hu364lmv1jeoDm0CvYfiKJR0oMHpF3ug2nRTjiD0CCO05GgRukASM4GDhZEx0n2k
s9S4CPo06pBEBfnk2BvlYqfEJGYum83+JVfSuc3omf/lawG94jSTYTtft4mgLfBI
kluGz3UpRka7Ng==
-----END CERTIFICATE-----
Generated at Sun Oct 25 19:53:46 2026 by rpki-client