Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: yrR2dzuKx8nHbtD2rCTsdcOBrZ77HJk8Rcp/x04GJlY=
Subject key identifier: F4:10:9F:AE:81:FB:D0:5C:8C:40:D4:38:53:A3:B2:7D:F5:F0:6B:02
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019E1F111D605CFAB3E6E0031CED01AD3843
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 08D8
Signing time: Wed 13 May 2026 02:01:15 +0000
Manifest this update: Wed 13 May 2026 02:01:15 +0000
Manifest next update: Thu 14 May 2026 02:01:15 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: 3Rr/O+e8BK+6+rnV2uxT86G0tuUa99VcjweA0Rh/p54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 02:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:11:1d:60:5c:fa:b3:e6:e0:03:1c:ed:01:ad:38:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: May 13 02:01:15 2026 GMT
Not After : May 14 02:01:15 2026 GMT
Subject: CN=f4109fae81fbd05c8c40d43853a3b27df5f06b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:ed:ca:ba:10:f1:01:cc:6e:1d:23:77:1c:fd:
eb:9d:b4:98:8a:f7:26:cb:dd:21:6d:5a:ed:fd:7a:
1a:15:5d:68:6d:99:81:f5:da:62:f7:08:de:6a:29:
55:b0:0c:2e:dc:09:8d:32:36:98:05:e6:74:99:08:
16:57:e7:cc:b4:b9:65:ea:02:e9:7d:44:5d:36:72:
28:d2:6e:79:a4:1b:35:b9:11:ad:d8:fb:08:dd:56:
c9:77:ad:49:77:5c:bd:80:44:e2:02:56:c7:1c:19:
46:c6:8e:e5:da:51:52:3a:62:78:65:67:e4:e2:50:
a5:bc:7b:61:80:17:68:3c:32:51:f2:40:45:01:02:
d0:88:66:54:9f:11:99:25:07:62:eb:fb:67:f1:22:
c7:1d:43:b1:47:72:74:0d:58:85:c4:ec:e7:21:d3:
ae:07:0b:07:c9:9d:04:0b:46:de:ce:3c:05:f8:b3:
17:a4:54:29:ed:a5:e9:6b:9e:85:b4:d2:8f:3a:a6:
66:4f:35:58:21:0e:8d:d0:9d:45:fb:54:8e:d5:56:
c1:74:7a:13:03:32:4f:c2:98:24:bc:98:d3:98:40:
79:6b:06:fb:63:a6:f9:4a:3f:4b:11:16:4f:17:af:
f5:77:0b:0f:63:7b:b3:7f:a0:cc:69:9a:2f:02:d1:
d5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:10:9F:AE:81:FB:D0:5C:8C:40:D4:38:53:A3:B2:7D:F5:F0:6B:02
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:0e:40:e5:b2:7c:5c:32:3b:f0:ab:e7:b5:95:e8:bb:da:55:
ac:03:61:ae:f1:9d:f5:90:7b:42:fe:7c:09:9c:a3:34:17:c8:
db:e6:5d:2b:09:05:72:b6:a8:57:d7:32:ab:3f:d6:db:6c:f9:
ee:09:e7:44:55:ef:66:7a:3f:a2:ce:9d:40:4c:f4:86:d6:da:
29:f4:c2:44:74:35:cd:0a:01:73:2a:e1:37:83:f8:a4:cf:fc:
ed:6f:67:98:b4:4e:84:33:26:7e:65:ed:26:dd:2e:21:e3:94:
44:ee:04:24:8f:fe:46:f1:26:5e:e1:e9:0f:9c:15:34:79:53:
ae:d6:de:67:c4:c3:7f:0d:22:3a:0b:bd:c8:84:b4:59:68:d6:
18:10:12:b3:7e:11:a1:aa:32:e4:23:52:4d:e8:f6:dd:d5:f0:
c8:aa:e8:c8:75:76:65:cb:58:c2:e5:cf:74:90:2b:79:31:42:
34:f9:f5:66:1c:22:7c:1f:39:62:6d:66:75:fe:02:a2:ae:2f:
e1:b5:1c:b0:86:5b:bc:1a:14:38:ae:fe:60:e1:98:50:58:5b:
1a:90:a3:3f:e2:4f:36:04:27:2e:3d:82:8f:ca:e2:c4:e1:05:
f5:15:15:fe:dc:fe:a0:a9:fc:03:97:33:d6:01:3d:09:40:a0:
b3:cb:d3:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fER1gXPqz5uADHO0BrThDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWQ2NzkxYjhkYmU5YzM1MmJkNjRhOTMyMjE3MmI0MWM0
YjIxNzEwHhcNMjYwNTEzMDIwMTE1WhcNMjYwNTE0MDIwMTE1WjAzMTEwLwYDVQQD
EyhmNDEwOWZhZTgxZmJkMDVjOGM0MGQ0Mzg1M2EzYjI3ZGY1ZjA2YjAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApO3KuhDxAcxuHSN3HP3rnbSYivcm
y90hbVrt/XoaFV1obZmB9dpi9wjeailVsAwu3AmNMjaYBeZ0mQgWV+fMtLll6gLp
fURdNnIo0m55pBs1uRGt2PsI3VbJd61Jd1y9gETiAlbHHBlGxo7l2lFSOmJ4ZWfk
4lClvHthgBdoPDJR8kBFAQLQiGZUnxGZJQdi6/tn8SLHHUOxR3J0DViFxOznIdOu
BwsHyZ0EC0bezjwF+LMXpFQp7aXpa56FtNKPOqZmTzVYIQ6N0J1F+1SO1VbBdHoT
AzJPwpgkvJjTmEB5awb7Y6b5Sj9LERZPF6/1dwsPY3uzf6DMaZovAtHVTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPQQn66B+9BcjEDUOFOjsn318GsCMB8GA1UdIwQY
MBaAFFGtZ5G42+nDUr1kqTIhcrQcSyFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMt
MWE4OWZmMTE5NjVlLzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMtMWE4OWZmMTE5NjVl
LzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXw5A5bJ8
XDI78KvntZXou9pVrANhrvGd9ZB7Qv58CZyjNBfI2+ZdKwkFcraoV9cyqz/W22z5
7gnnRFXvZno/os6dQEz0htbaKfTCRHQ1zQoBcyrhN4P4pM/87W9nmLROhDMmfmXt
Jt0uIeOURO4EJI/+RvEmXuHpD5wVNHlTrtbeZ8TDfw0iOgu9yIS0WWjWGBASs34R
oaoy5CNSTej23dXwyKroyHV2ZctYwuXPdJAreTFCNPn1ZhwifB85Ym1mdf4Coq4v
4bUcsIZbvBoUOK7+YOGYUFhbGpCjP+JPNgQnLj2Cj8rixOEF9RUV/tz+oKn8A5cz
1gE9CUCgs8vT9g==
-----END CERTIFICATE-----
Generated at Wed May 13 12:31:55 2026 by rpki-client