Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
File: uP5lGLdAqxQFS-d0iZKLuffa8O4.mft (raw, json)
Hash identifier: YvCLiTGb0VlHUyLqVaAHa1bt6yevrlpRpng/WBrAHhM=
Subject key identifier: 8A:4A:15:B4:8F:D6:CC:6F:AD:29:24:7C:59:FB:51:DB:BC:11:E5:0F
Authority key identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
Certificate issuer: /CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Certificate serial: 019E1D5910A39C44ACEA6A0558447822E251
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
Manifest number: 014E
Signing time: Tue 12 May 2026 18:00:36 +0000
Manifest this update: Tue 12 May 2026 18:00:36 +0000
Manifest next update: Wed 13 May 2026 18:00:36 +0000
Files and hashes: 1: 4JCwNfUv9gLIG6iBe09ZnK0H4TA.roa (hash: 4RF+vi5lJMgYaMGuykMUcyN+ULDUABSxuTpTzGdpNR8=)
2: MYaYUHXegH6A3meVfIW9b0WZCQI.asa (hash: HCtWYbG0IxlPZ6Hn3ACDheREE8y6xefhsWjII5d7rK0=)
3: uP5lGLdAqxQFS-d0iZKLuffa8O4.crl (hash: firzT6JguCNkixsA+3Zq2qwktKPliMjT9x5W6yat7oY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:59:10:a3:9c:44:ac:ea:6a:05:58:44:78:22:e2:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Validity
Not Before: May 12 18:00:36 2026 GMT
Not After : May 13 18:00:36 2026 GMT
Subject: CN=8a4a15b48fd6cc6fad29247c59fb51dbbc11e50f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ef:7a:b6:02:b4:a4:25:8b:c7:a4:d5:4b:c7:
95:5e:eb:74:3c:9c:25:34:ff:2d:a5:b1:13:ce:1e:
aa:77:79:17:36:25:0a:82:c7:43:ce:ac:04:d9:b8:
4c:5f:89:fa:16:2f:92:e2:43:4a:cd:df:72:d1:20:
62:65:0e:04:a7:c4:24:9e:69:0c:7c:fa:2c:17:74:
e1:3c:96:05:e1:49:46:e1:e8:49:ff:3c:1a:1c:f8:
56:18:bb:65:82:14:ed:01:b6:a7:7b:0b:cd:b6:e2:
36:63:9b:2f:30:4d:cb:e3:e0:9b:ba:e7:cd:f3:f7:
76:73:4a:69:c5:4f:32:43:a4:e3:1b:aa:30:df:c3:
3c:f3:ac:de:04:43:9c:92:ab:9d:fc:c1:c9:f2:2f:
18:ed:05:be:74:45:b6:6f:6e:13:dd:89:60:eb:86:
d9:a2:43:a3:c7:57:f1:ad:3e:f4:c0:c6:c2:53:e8:
90:5c:63:f8:0b:54:3b:64:09:35:52:32:c6:d9:a7:
2b:06:3f:f0:d7:bb:a5:55:d6:80:09:4d:82:a6:62:
41:19:18:ee:10:c5:fd:18:69:44:2a:e6:ba:59:d9:
93:5a:7d:b4:66:5a:62:cc:37:ea:90:98:89:48:bb:
2a:73:5d:19:fa:a7:fe:e4:24:1e:7b:fa:60:8d:a0:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4A:15:B4:8F:D6:CC:6F:AD:29:24:7C:59:FB:51:DB:BC:11:E5:0F
X509v3 Authority Key Identifier:
keyid:B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:8a:24:ff:26:e3:0e:b1:05:0f:46:24:9b:a4:37:0b:be:54:
9a:e4:d0:61:ec:0d:19:7d:47:08:17:55:fe:6c:40:52:0b:20:
c3:84:ea:3d:da:11:b1:17:57:6c:cf:fd:d6:c1:88:d5:6f:50:
12:f3:65:0e:93:bb:82:0e:7e:18:66:32:15:69:fd:c5:8d:d1:
41:1b:70:17:11:7f:9a:db:ea:e3:70:09:65:fb:ad:ac:8e:e2:
ec:50:8e:dd:1c:d3:be:13:5a:eb:b4:d4:22:7f:46:57:c8:ef:
c5:1e:d8:52:46:54:35:42:ce:ab:71:0c:bf:49:9d:1e:af:97:
81:79:e8:36:38:7f:db:1b:29:bb:0a:6b:d5:c0:30:30:5f:6f:
6a:4a:1d:45:d0:70:00:68:43:48:72:55:ca:40:9d:78:c3:96:
73:d3:0c:e7:39:28:3c:5e:19:04:36:14:bb:3e:ce:93:05:f9:
f3:6d:2e:ca:87:21:f6:90:f2:8c:5b:04:c1:a9:2d:97:51:a8:
f5:18:b4:4a:e5:3c:fc:1b:06:bc:8e:1b:e8:f6:47:06:45:1c:
9d:af:d8:8b:0e:bc:62:ba:34:24:c3:df:14:98:2f:f3:06:81:
0d:51:1a:8e:46:b0:42:e5:2c:46:3c:fb:71:e3:29:b8:9c:40:
18:e4:56:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:56:57 2026 by rpki-client