Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: /1Wn/2nDtq1jouHC7eBG6GXtiFDbABHrHnj3CZfLXwM=
Subject key identifier: 22:15:F2:25:34:6C:A1:41:C2:93:E8:95:25:5A:A2:4A:26:A7:64:D0
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 01A0E0618A0D9A42DBE5B80B36715DD8BE2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 10C3
Signing time: Sun 27 Sep 2026 01:01:23 +0000
Manifest this update: Sun 27 Sep 2026 01:01:23 +0000
Manifest next update: Mon 28 Sep 2026 01:01:23 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: 91DBuseIJt2nn199BKY6E+3QMnENAPUbRKWP1xe32h8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:61:8a:0d:9a:42:db:e5:b8:0b:36:71:5d:d8:be:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Sep 27 01:01:23 2026 GMT
Not After : Sep 28 01:01:23 2026 GMT
Subject: CN=2215f225346ca141c293e895255aa24a26a764d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:8d:a5:fc:64:ec:33:69:b3:df:61:64:7a:37:
9a:87:9a:53:ee:cb:ed:6f:75:68:b7:a8:ae:06:38:
98:13:b6:e5:18:26:8a:8d:20:07:01:95:8e:e9:83:
fa:ab:4e:df:54:08:01:1c:d8:6d:4b:c6:8b:05:8a:
0f:1c:25:3b:f9:3b:89:8d:f3:dd:bc:1d:4b:b2:a1:
4d:25:20:14:36:f9:da:54:0b:bc:de:80:99:3b:48:
27:21:26:60:f4:a1:00:4a:49:84:91:93:1d:5e:6b:
40:90:11:eb:e4:84:67:de:68:96:0a:57:c4:22:66:
5e:43:a0:64:80:ec:4d:91:81:f7:7e:b9:81:f9:dc:
2d:af:44:33:51:a4:fd:93:7a:84:65:67:3d:e8:ce:
6a:c0:2b:db:3b:ed:b3:b3:31:58:48:48:f9:0d:f1:
ba:97:a2:44:b9:bd:2d:fa:94:ad:d8:f7:91:13:77:
fe:20:79:93:82:8f:39:5b:6b:60:11:d9:0c:a4:60:
f2:31:31:d0:9a:b3:18:20:57:0e:8a:ed:b5:25:1e:
d1:90:a4:3b:fb:26:16:91:d1:53:4e:fc:9d:df:60:
77:59:8e:be:55:67:8a:e3:39:f3:fb:79:fc:48:e5:
be:17:81:74:fb:ff:98:2e:68:08:cc:d1:43:ba:29:
4a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:15:F2:25:34:6C:A1:41:C2:93:E8:95:25:5A:A2:4A:26:A7:64:D0
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:7f:d9:c9:d2:14:eb:f2:f1:24:a2:91:dd:9f:6c:3c:99:f1:
17:d4:b2:17:fd:85:40:82:6a:31:e0:39:f5:21:8c:8e:05:7e:
0f:2f:74:e1:6d:a8:c5:8f:de:23:30:bf:9f:3b:b6:b2:fe:6d:
21:59:02:72:52:34:fc:ad:6b:60:95:5d:7b:b5:04:d8:a0:03:
c1:3e:7d:93:dd:8a:b5:c7:9d:ed:70:98:15:9a:ed:09:69:3b:
13:c3:d8:a7:d3:04:d6:69:0e:2a:b2:08:ad:be:2a:2c:fd:f3:
3c:16:5b:b7:f7:21:52:3d:5b:63:a7:f4:b2:09:f5:d2:ef:63:
70:a8:ee:c8:55:04:95:ac:b8:37:d9:f5:d3:96:d6:42:d1:c7:
60:12:ca:95:49:fa:b2:87:1a:c7:54:20:78:7d:45:a6:e2:c9:
e3:a2:62:33:64:97:c6:86:5c:c4:b3:af:ce:d7:8f:3a:c1:70:
60:6f:5d:2a:54:b0:10:04:b8:60:dc:f8:df:9e:e0:b4:a9:17:
33:e3:8e:15:2a:1d:e9:57:81:11:5a:26:6e:84:33:ac:ed:f4:
ad:8a:89:06:55:b4:0a:28:df:bb:46:f4:03:33:68:1c:8e:26:
86:98:77:ba:5c:83:bf:f8:eb:67:2f:6e:b7:a0:f4:3b:b4:9e:
e4:f7:24:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:31:23 2026 by rpki-client