Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: 50Gsoqtknq3ruvV25LYUztydlnG6hF5qnpAmZ0DZj8w=
Subject key identifier: EC:6B:F0:83:56:83:88:F1:93:62:94:0A:35:CD:8E:C4:F0:04:2F:45
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019D29CE4CD394187A85606EBBCA6E954237
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 0859
Signing time: Thu 26 Mar 2026 11:01:19 +0000
Manifest this update: Thu 26 Mar 2026 11:01:19 +0000
Manifest next update: Fri 27 Mar 2026 11:01:19 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: W/s+1gay3IqaXVH4egwJ+cspRLlZkV09zPNYvGMyJs4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:ce:4c:d3:94:18:7a:85:60:6e:bb:ca:6e:95:42:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Mar 26 11:01:19 2026 GMT
Not After : Mar 27 11:01:19 2026 GMT
Subject: CN=ec6bf083568388f19362940a35cd8ec4f0042f45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:6a:9b:76:fb:60:48:85:8d:3b:6d:d9:19:ce:
9c:34:2e:1c:f8:47:99:37:d0:a1:97:d7:d4:87:08:
c2:dd:ed:a8:1a:e1:11:0b:32:28:1b:e6:2b:62:8b:
1e:7b:bd:6b:6a:4c:86:1a:59:7b:da:37:18:6a:63:
a4:6d:34:0f:95:61:c8:60:46:6f:75:64:e1:54:a6:
7a:50:06:e4:20:47:9d:97:d4:a8:1a:98:1c:5b:71:
27:15:d5:5d:99:3b:bb:98:29:20:98:5b:4d:c2:f6:
e9:e9:14:b0:20:fa:68:7f:a0:c7:94:f3:a9:5b:8b:
1e:90:34:54:c7:bf:a9:4a:8a:1d:78:ba:70:81:4f:
97:fe:3f:11:a3:d0:98:18:78:1f:7d:48:92:41:78:
fe:31:1d:64:d0:14:47:81:e5:ac:78:e4:99:05:89:
1c:99:85:67:6a:ff:c4:0e:60:01:5b:99:37:16:d4:
3f:e2:2e:fb:6e:b9:d5:4d:d2:76:e3:10:8f:1d:97:
0d:96:cd:c3:25:c3:eb:70:ef:88:dd:8d:56:66:8e:
da:9d:56:b4:5f:74:e9:b6:ee:1d:83:84:8e:42:f7:
ea:5d:22:21:e4:f4:0b:fb:46:8f:dc:31:b3:68:0b:
26:6f:bb:c6:0c:b0:f1:ee:72:18:99:02:7f:ac:c2:
5e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6B:F0:83:56:83:88:F1:93:62:94:0A:35:CD:8E:C4:F0:04:2F:45
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:db:d1:8e:fd:35:e2:7e:3e:e9:ab:56:f7:97:04:92:f9:15:
54:01:63:97:42:b1:7f:a7:1f:2a:92:9c:7f:49:84:2c:71:0f:
ae:13:c5:e6:31:09:4a:8e:d6:ce:a3:16:0f:37:68:c6:90:8c:
60:1c:b4:d6:75:f1:e2:5f:68:a0:ac:3b:63:cb:72:21:49:e3:
45:9d:8c:46:52:db:00:db:54:7c:05:38:b1:2e:d5:12:91:4a:
85:16:55:09:29:3f:d6:e1:fa:06:66:64:1d:fb:9c:01:a8:77:
ff:88:ed:a8:da:25:c1:62:e5:d7:a6:d5:61:85:f9:71:f5:fe:
63:d9:c7:2c:fa:d5:73:34:c1:30:e0:23:5b:47:3e:dd:ba:3f:
8f:73:c1:de:9d:5e:3b:2f:82:a8:fa:d6:f4:1c:49:15:09:56:
62:36:3e:4c:4e:02:5b:ed:07:36:f6:5f:3b:e8:69:19:38:a8:
5b:ca:ae:12:c7:12:70:d7:3f:b6:3c:20:42:fa:bc:ad:e8:10:
ba:97:46:93:1c:d7:6f:32:0e:44:55:40:07:54:8b:7e:14:ea:
c3:b1:ec:89:10:f4:e8:c8:13:98:3d:6b:66:e7:e7:9e:e6:ed:
91:84:14:20:f0:f3:66:6c:05:8a:8c:a7:a9:09:14:62:cc:d8:
94:8f:0a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:32:28 2026 by rpki-client