Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/UWa5EXnAfjSfylNI6k2BJMA-eYM.mft
File: UWa5EXnAfjSfylNI6k2BJMA-eYM.mft (raw, json)
Hash identifier: A2qLKOHU1FMrMfY8WOlXokri2tMTC2A7ile7Xcgs+Ts=
Subject key identifier: 8A:0B:EF:76:03:B6:BB:47:78:F4:40:0B:2C:89:BB:0F:39:3D:14:12
Authority key identifier: 51:66:B9:11:79:C0:7E:34:9F:CA:53:48:EA:4D:81:24:C0:3E:79:83
Certificate issuer: /CN=5166b91179c07e349fca5348ea4d8124c03e7983
Certificate serial: 01A1DBA688AD84DD01C63D0D1D23004A6F98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UWa5EXnAfjSfylNI6k2BJMA-eYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/UWa5EXnAfjSfylNI6k2BJMA-eYM.mft
Manifest number: A3
Signing time: Sat 14 Nov 2026 20:01:26 +0000
Manifest this update: Sat 14 Nov 2026 20:01:26 +0000
Manifest next update: Sun 15 Nov 2026 20:01:26 +0000
Files and hashes: 1: EuKejVNSbVkVfdpMijMMkKc4iIs.roa (hash: 1DWWx4F4OjWg9qPN2dpeYGA2/7Q+syRfWE3gfur/Hos=)
2: UWa5EXnAfjSfylNI6k2BJMA-eYM.crl (hash: k1t91RK+ze44SWBMIe9QrbkwbN6Lk26+hlyL7DQx6rg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/UWa5EXnAfjSfylNI6k2BJMA-eYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/UWa5EXnAfjSfylNI6k2BJMA-eYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UWa5EXnAfjSfylNI6k2BJMA-eYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 20:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:db:a6:88:ad:84:dd:01:c6:3d:0d:1d:23:00:4a:6f:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5166b91179c07e349fca5348ea4d8124c03e7983
Validity
Not Before: Nov 14 20:01:26 2026 GMT
Not After : Nov 15 20:01:26 2026 GMT
Subject: CN=8a0bef7603b6bb4778f4400b2c89bb0f393d1412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:83:70:c9:db:b2:78:1a:c9:56:f5:da:b4:
5b:fe:60:ce:4c:55:84:b4:fa:9e:dc:d3:ca:5a:0a:
d6:87:4b:bd:4e:3a:49:c6:a9:46:e9:a2:d9:c7:ae:
23:03:ed:d1:77:0b:4e:eb:fe:a2:2f:6f:ff:a6:db:
65:9b:5a:1a:1a:32:89:71:3f:f0:be:54:18:85:a4:
46:4e:07:73:06:a6:16:d7:76:77:12:e1:07:dc:be:
ea:af:f6:28:a3:6f:db:e6:8e:b6:8b:88:17:b6:51:
af:c1:63:ae:dc:a3:1c:9d:10:93:61:a0:4b:4d:4e:
b8:d9:2b:02:91:d3:7c:c6:b6:a1:93:89:d6:69:3b:
97:01:1e:15:ee:d0:4e:32:e4:ba:3c:bf:b8:fa:57:
70:01:bd:ca:38:56:de:d8:65:8b:46:e1:48:01:d5:
80:a2:03:1b:63:32:23:c4:bf:da:5a:74:ee:33:76:
48:b3:76:1a:4c:16:24:47:6a:dd:f8:fd:1f:13:70:
de:97:47:fc:ff:6c:0c:85:72:73:ef:6f:50:5f:f7:
9e:0c:1f:4c:8c:4c:d5:62:6c:d3:90:62:27:39:8f:
13:13:50:0d:14:78:10:ba:50:bf:fa:23:58:5b:5b:
54:74:e8:74:38:2a:e8:66:9b:96:42:6b:57:2c:88:
25:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0B:EF:76:03:B6:BB:47:78:F4:40:0B:2C:89:BB:0F:39:3D:14:12
X509v3 Authority Key Identifier:
keyid:51:66:B9:11:79:C0:7E:34:9F:CA:53:48:EA:4D:81:24:C0:3E:79:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UWa5EXnAfjSfylNI6k2BJMA-eYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/UWa5EXnAfjSfylNI6k2BJMA-eYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/05e5b9-2275-49b7-bee5-37eab9214863/1/UWa5EXnAfjSfylNI6k2BJMA-eYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
eb:ef:e9:6e:da:07:50:a5:7a:48:fc:92:be:0a:66:59:84:8d:
38:72:18:3d:90:79:ef:0d:e7:c1:c0:ad:40:c9:1f:73:39:fe:
95:be:75:92:29:bf:18:15:64:69:66:72:f5:bc:d0:65:62:e9:
e3:d9:3d:63:84:47:1d:43:e1:5d:73:dc:2e:f4:1e:a7:71:c0:
56:89:01:c0:b2:11:4a:77:27:59:79:07:a9:d6:a8:83:b1:88:
f0:1c:b0:fe:cb:fd:2b:fd:20:1b:d3:83:2c:90:b3:73:e1:04:
7c:6f:4d:70:56:c5:81:60:30:44:ac:a9:cc:8b:61:d3:13:2b:
0b:a3:62:ab:df:bd:0b:04:5c:05:f2:73:75:c4:6e:d3:9b:06:
a4:89:ba:f6:28:a6:7e:7a:7a:8f:c6:cd:c1:ed:1d:ff:95:05:
d9:5d:cd:a4:7e:aa:53:84:7a:3a:e6:c2:fb:55:f0:98:7d:74:
2d:42:dd:bb:47:ad:da:3b:b3:5d:0e:df:62:ec:cc:a4:7e:6c:
07:e4:a9:a9:bb:89:05:87:a2:cc:ad:4b:13:18:0b:aa:c7:87:
36:c7:48:bd:93:81:a1:b9:f4:90:31:53:41:90:c0:c3:cc:20:
e3:ac:7d:51:55:f9:11:77:fd:69:80:36:a8:98:4c:50:e3:46:
4b:13:28:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 06:31:03 2026 by rpki-client