Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: W29VgJtpGXYVVM9T8Guznx18ezW2YQQjpTeXse8vnVc=
Subject key identifier: 6D:D5:BE:01:06:FB:C1:61:38:92:80:3E:B1:41:14:47:22:4B:A7:E4
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 019F935B531E2BA60083B09E08C345A1081C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 124B
Signing time: Fri 24 Jul 2026 09:01:03 +0000
Manifest this update: Fri 24 Jul 2026 09:01:03 +0000
Manifest next update: Sat 25 Jul 2026 09:01:03 +0000
Files and hashes: 1: GYTArtIgvINKT637yicE0RzC_gA.roa (hash: Lep0lB2c1nnq/plQOSLHCa5SiVLmUmJL/Hit/FXoSs8=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: shQS6LUxPKzsqdmRa9LftSXsn72EPBlFY59fT36+J+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:53:1e:2b:a6:00:83:b0:9e:08:c3:45:a1:08:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Jul 24 09:01:03 2026 GMT
Not After : Jul 25 09:01:03 2026 GMT
Subject: CN=6dd5be0106fbc1613892803eb1411447224ba7e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d5:50:18:79:71:f2:13:73:90:6b:f4:fd:ff:
e4:c1:d3:63:df:c4:55:1c:0e:82:2e:53:ed:19:29:
6f:97:f9:2e:c7:8a:87:36:0c:79:42:3f:3c:12:35:
68:8c:9c:62:09:c6:0e:c2:8f:76:4d:d1:80:da:15:
cb:16:24:24:67:e0:88:0a:4b:47:ba:8b:00:08:db:
d0:ad:6e:90:42:76:a0:db:92:7b:54:42:72:6f:be:
6a:5e:0b:43:07:c5:c4:41:b1:50:c6:b0:01:eb:6d:
10:9e:4a:7c:39:17:9b:1f:a5:31:f4:8c:7c:6d:bb:
74:b5:ba:02:64:05:78:ad:57:6a:fe:37:60:ff:e5:
11:a4:eb:38:51:f2:c0:65:c3:7a:1e:43:20:f0:be:
b6:59:d0:a0:80:1c:47:7f:88:7c:92:f4:5d:d4:5e:
0b:c4:88:b3:b3:f8:bb:ee:43:b7:ce:0a:9f:36:be:
ce:b9:74:c2:ec:ac:4b:cc:0c:3b:65:b9:fd:5c:89:
da:30:68:9f:2b:b3:87:e0:60:e2:a5:7e:69:8c:b3:
82:ac:83:7e:81:8c:39:83:fe:ae:23:03:fd:81:18:
44:66:39:dd:32:e7:2e:ee:4a:e2:bf:ce:b2:e4:5f:
4e:aa:73:2e:50:d0:fa:88:df:90:51:a1:48:31:b2:
71:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D5:BE:01:06:FB:C1:61:38:92:80:3E:B1:41:14:47:22:4B:A7:E4
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:ad:ae:22:52:4c:8b:64:2b:b5:eb:98:3c:30:7f:4a:ea:08:
50:b3:33:d8:b7:02:23:d7:b6:91:73:f1:a7:e6:be:02:aa:b7:
a3:d5:71:02:0d:20:e4:3b:0f:cf:4f:8d:77:c2:ae:74:ac:16:
a8:2a:1a:5b:43:71:47:24:f9:7d:62:70:5f:a9:3d:8c:7a:e5:
68:3c:0a:df:74:e7:64:16:2a:ba:25:20:e7:8e:1c:26:81:09:
07:22:d5:51:b2:90:be:88:61:b0:7b:b7:08:f8:2c:95:11:b8:
b9:67:8d:c8:80:5e:64:a2:93:91:2b:fa:cc:a6:96:6e:3a:82:
7b:5d:cd:30:8f:57:34:69:2a:7b:23:fa:fd:44:d1:d4:16:0f:
11:9d:de:98:a2:d9:a0:ed:1e:82:41:be:00:de:5e:8f:e7:17:
59:e8:92:0a:61:f8:ca:2c:bb:19:e1:43:b4:f2:1c:13:8a:6f:
46:9f:90:03:03:5f:96:70:bc:9c:1a:ec:ca:43:48:54:c6:bc:
d3:84:e7:db:61:8c:7a:00:c1:6c:25:c6:0f:88:2d:35:e5:09:
82:2e:c5:c2:0c:49:5a:81:04:ae:35:07:42:b5:31:5b:0a:c4:
42:46:a2:22:96:ff:92:65:10:9e:95:92:75:29:9c:41:7a:5a:
3d:ba:73:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:09:51 2026 by rpki-client