Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: YY7tcD7rFzo+jAh+r99iJfSFGzjPDEaq4Ix0AkEuTMA=
Subject key identifier: 4E:96:83:A8:44:1F:56:90:AC:B7:33:28:DE:13:A7:CC:97:4A:52:D1
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 01A0EB8AA08752032E1219495F189DAA2F1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 0A4B
Signing time: Tue 29 Sep 2026 05:02:05 +0000
Manifest this update: Tue 29 Sep 2026 05:02:05 +0000
Manifest next update: Wed 30 Sep 2026 05:02:05 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: eRlyiyPdD3dJ4Zf+fACyqc6HQXM71zVjX2Wup5DD+rA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:a0:87:52:03:2e:12:19:49:5f:18:9d:aa:2f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Sep 29 05:02:05 2026 GMT
Not After : Sep 30 05:02:05 2026 GMT
Subject: CN=4e9683a8441f5690acb73328de13a7cc974a52d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:69:72:f4:28:4c:38:89:bc:65:c6:b3:a2:66:
8e:2e:7e:92:be:ac:5d:07:85:7b:2d:ed:a0:35:5d:
4c:65:96:d6:91:50:48:09:a7:e9:c3:a7:25:d8:fa:
15:4a:1c:f3:e3:35:1c:17:f4:9a:f5:98:35:d3:34:
81:a7:bb:f9:93:1e:e0:98:6f:9a:09:83:d0:8e:3e:
97:b7:a0:b7:a7:80:a4:09:90:f6:9f:f2:5d:f6:68:
c5:04:f1:bb:10:34:6c:d3:b4:61:a0:f0:97:fa:b4:
53:87:7e:5b:48:04:7b:60:a5:49:07:20:05:07:65:
cf:bc:eb:46:4d:88:89:f2:02:1b:45:40:71:ea:3b:
01:29:76:bb:03:d5:a3:ca:ae:f2:80:39:66:35:7d:
0b:96:41:1a:e7:fa:48:39:82:16:c6:92:70:3d:fd:
44:17:e1:03:4d:5f:37:a9:39:97:be:0c:fd:0d:46:
de:ec:03:3a:12:1f:67:f7:b9:b6:63:a3:83:d7:b1:
ea:29:a2:c1:cb:d1:75:ad:f7:6e:a5:6d:5f:4a:d6:
1e:0b:27:3e:ae:04:49:68:25:6a:2e:50:6b:ec:e2:
39:b5:75:44:25:5f:f1:09:b2:16:86:7c:45:bd:f2:
c0:ea:ec:ca:ac:04:06:ee:5b:9b:7b:ff:4b:d7:e1:
a5:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:96:83:A8:44:1F:56:90:AC:B7:33:28:DE:13:A7:CC:97:4A:52:D1
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:61:f5:e0:df:67:12:26:a6:f0:63:bc:63:ac:dd:93:ae:63:
41:9a:9c:69:83:9b:9f:b0:c2:b2:f9:bc:61:28:7a:d6:15:b5:
4b:bd:c1:4b:b2:8c:61:8b:e9:66:22:f8:01:34:d6:ef:85:8f:
19:8b:8b:df:6e:81:17:79:f4:6d:d2:2d:46:5d:63:fb:9f:32:
bd:fe:32:19:e3:07:05:15:95:52:8c:08:05:00:66:be:46:e3:
20:90:f0:00:3f:71:1c:cb:f4:26:5f:4a:db:31:46:8d:2f:83:
f1:74:d3:2f:c6:9e:2d:ec:ee:52:01:92:c0:00:b6:83:6e:5c:
88:3e:37:9c:83:35:b9:5f:6f:a7:e7:f7:d1:ed:cc:2f:a3:f2:
ba:b1:60:de:a9:47:f2:cd:e6:85:98:fa:5f:81:eb:1b:74:e4:
c2:b6:d6:e9:65:4e:7c:61:b2:a3:47:0e:68:75:be:53:a2:3b:
18:6f:fa:47:7f:c3:0f:33:48:6b:b1:a2:11:b8:d5:e7:42:e4:
c4:5d:30:1e:20:f1:97:bb:ad:0c:44:55:9d:23:d7:13:6c:18:
78:19:24:f8:e1:7a:f2:e5:f2:c1:86:5c:96:53:04:73:bf:6e:
3e:ef:43:bc:07:c2:4d:c6:89:69:cd:6e:89:51:a7:df:8b:42:
0e:9d:99:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 17:10:30 2026 by rpki-client