Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: 5Ow0JLaRKOxKoCHQdSwzVRx2zf4L/rw9uLmT5CJfSxg=
Subject key identifier: D3:C8:D0:81:B2:DC:63:7A:CC:9A:8C:DA:82:5D:9D:90:6C:2B:1B:9D
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019F91DA1896F09E2E2612D53666487DAB8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 0998
Signing time: Fri 24 Jul 2026 02:00:17 +0000
Manifest this update: Fri 24 Jul 2026 02:00:17 +0000
Manifest next update: Sat 25 Jul 2026 02:00:17 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: GF32EAUtk3zKw4a794kg0feTQboB1FSdqERofoCDUgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:18:96:f0:9e:2e:26:12:d5:36:66:48:7d:ab:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Jul 24 02:00:17 2026 GMT
Not After : Jul 25 02:00:17 2026 GMT
Subject: CN=d3c8d081b2dc637acc9a8cda825d9d906c2b1b9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:87:e8:13:0c:3d:26:5a:31:3f:12:ad:fa:6a:
bf:72:cc:2a:b5:e3:c0:29:aa:4d:51:c5:b3:6a:46:
60:7e:2e:7c:db:d7:74:6a:db:97:56:f9:0c:c2:51:
a3:e7:d2:27:78:a3:9c:e9:73:05:22:b5:5e:a7:46:
5a:32:8e:20:06:cb:ee:07:e4:c4:6f:22:c8:27:7c:
fb:64:ed:9c:3a:8d:91:85:09:55:c9:8a:ae:a1:c2:
d7:38:8a:a3:93:72:5d:0f:07:70:0c:3b:15:38:22:
b2:dd:18:df:64:d5:65:fd:99:72:8d:22:54:cb:7f:
8b:31:d3:e5:a2:03:6b:68:65:ab:d4:ef:02:c5:3a:
71:3b:2a:30:18:85:5f:64:6f:60:d6:f1:02:68:64:
8e:6f:39:43:2f:bb:f0:d6:f4:2e:85:19:3c:a0:69:
f1:71:ca:a2:04:22:0b:d1:10:d7:bf:72:83:94:fe:
b9:fb:c5:7d:ab:76:f3:90:dc:e2:33:a4:6c:5b:ab:
84:b2:2a:83:7d:2d:60:27:d3:41:a5:67:34:23:c9:
d8:61:5c:af:2f:d8:b5:b1:f7:8b:37:e3:ac:18:57:
de:63:70:07:dc:b8:d7:ee:4d:8c:33:dd:a1:16:c0:
f4:09:81:ba:33:ef:00:bc:81:9a:6c:f4:49:7b:53:
ed:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:C8:D0:81:B2:DC:63:7A:CC:9A:8C:DA:82:5D:9D:90:6C:2B:1B:9D
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bb:55:16:c2:6f:cf:e8:f1:b3:70:05:f9:4d:f6:02:b3:22:
5b:f1:1c:ab:87:4a:ec:ac:91:32:49:88:86:1f:64:48:a7:45:
dc:8b:3e:74:4a:03:25:ed:8d:6e:2e:d5:8b:c7:70:2a:ec:3b:
21:4c:ea:16:73:36:0b:5d:3b:dd:ed:83:cd:5d:df:a8:f3:b8:
a7:b8:df:4c:93:c0:51:9a:8b:a3:da:05:11:5b:52:38:d5:d0:
21:b5:58:41:b3:d4:75:e6:77:1e:bf:f0:ac:31:4d:43:70:c0:
17:9d:1e:28:30:b2:19:24:f1:2b:ad:e0:65:ff:c8:b2:24:b5:
60:8b:08:5f:f5:4c:e1:ab:c7:b8:94:34:c6:cd:44:6f:ec:45:
93:7d:1d:02:26:5e:d1:76:34:ca:f5:35:86:7c:c4:c6:13:df:
8f:44:20:e9:47:63:9a:b3:8c:1f:e0:14:1c:1e:c3:b9:02:4d:
fd:b0:78:2e:0c:df:63:c3:ec:ce:3b:bb:0b:51:db:a7:21:5c:
23:a1:ad:dd:a7:5f:d4:49:ed:49:74:45:d4:1b:bc:a6:63:a1:
db:b6:63:50:d1:49:ae:34:3b:b4:bc:ae:02:43:fd:ad:9f:9b:
76:ad:62:ca:4c:bd:c8:98:bb:33:ad:fd:29:15:81:68:50:03:
d8:c4:6d:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:25:54 2026 by rpki-client