Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
File: ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft (raw, json)
Hash identifier: 5fxes5lRbOH59+RXO6OTGxvSCPVC5HmFKqTDoI7DEhI=
Subject key identifier: F9:18:84:31:AD:CF:BB:18:FF:42:BE:61:3D:69:42:A3:3E:26:92:E4
Authority key identifier: B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
Certificate issuer: /CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Certificate serial: 01A0ED0A5FB7B90D07EA9434D74642B9CF8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
Manifest number: 010C
Signing time: Tue 29 Sep 2026 12:01:14 +0000
Manifest this update: Tue 29 Sep 2026 12:01:14 +0000
Manifest next update: Wed 30 Sep 2026 12:01:14 +0000
Files and hashes: 1: DKOFsgb7qfiMFr6u1pXtWkG08Mo.asa (hash: MYuauknUj8ILkdpPYSvz2pmzvLoBzkJyYwifgZnzKlU=)
2: ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl (hash: 5bZhTZsEryUxVrBs/FAIySwnthj2tLjzsTZZw0gawzw=)
3: zBMcLd77LbRwu-15HrKqi2yyi1Q.roa (hash: iHUOLbWgSZf1fiwd7lTBMIB/vmb/88ZnKoALd8JP6QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:0a:5f:b7:b9:0d:07:ea:94:34:d7:46:42:b9:cf:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Validity
Not Before: Sep 29 12:01:14 2026 GMT
Not After : Sep 30 12:01:14 2026 GMT
Subject: CN=f9188431adcfbb18ff42be613d6942a33e2692e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:09:cd:cd:f0:08:4c:18:fb:33:2d:3a:40:e3:
23:bb:98:94:70:0b:c3:a1:18:03:c2:ef:8b:91:64:
48:f5:77:8b:11:44:5c:63:0a:da:e8:70:64:20:23:
32:36:4d:d8:80:07:9e:8e:48:cc:c7:b3:c0:00:e4:
37:45:fb:9b:5f:8a:29:e3:b0:ef:27:40:12:80:cc:
30:c8:f5:62:53:47:f4:30:34:f5:d7:9d:4f:de:05:
73:80:07:f4:ae:5f:8d:2c:a6:17:33:d8:9d:c6:83:
ba:47:05:e8:73:64:22:69:2f:e0:65:46:d4:88:fa:
db:51:e4:3f:20:65:94:ec:4c:84:d2:9b:92:4c:8e:
3d:6c:c1:4a:33:af:31:29:c7:20:73:94:43:a0:73:
ed:f4:b5:e1:7f:d0:c9:7b:7c:13:7c:d5:4c:0c:93:
d5:23:5f:d0:46:cd:ef:28:eb:5d:c3:d0:af:b2:70:
80:63:cb:45:2a:39:bb:f9:2a:c4:4f:1f:34:9b:e9:
0c:1e:c0:45:6d:df:d2:67:cd:8e:4a:0a:c2:c0:1d:
43:99:ba:c6:48:c7:1e:f4:17:28:38:5b:58:da:78:
eb:eb:6d:7d:b2:f1:d6:d0:c1:3d:05:e6:ad:32:30:
0f:c6:b8:ea:09:0f:01:24:f5:4a:88:45:3a:fd:74:
cc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:18:84:31:AD:CF:BB:18:FF:42:BE:61:3D:69:42:A3:3E:26:92:E4
X509v3 Authority Key Identifier:
keyid:B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:8e:64:be:66:c7:4b:61:df:80:46:fb:38:39:0a:e3:2e:fb:
f2:8f:cb:9e:b1:67:1a:c2:7f:24:44:2a:6f:74:36:ec:29:91:
fc:c9:ad:37:26:1a:c4:46:39:e2:44:8e:fa:d9:36:e5:b6:10:
ca:f0:ad:b3:a0:ec:01:94:45:67:ea:f3:2d:2d:5e:6b:53:eb:
e7:c9:3b:da:bf:24:de:02:e2:64:7f:7a:14:9b:08:2f:42:6b:
20:ab:22:74:60:18:1a:b5:fa:3e:2e:21:7c:1e:f1:83:d7:ef:
a3:11:57:a2:e9:e8:18:5b:90:dd:17:52:a8:0a:20:ef:5c:45:
ce:44:d9:82:f3:e1:fa:87:fb:3d:a8:f3:40:10:a8:0d:f3:c9:
ad:0b:cd:45:ea:72:e9:44:1b:ff:70:c2:d7:56:db:be:82:74:
ba:46:84:2d:b5:70:45:7c:03:4e:95:80:2e:0f:b3:9a:05:3b:
d8:90:04:52:ea:3e:bb:1a:4c:d8:42:d1:04:2a:b2:4e:0f:94:
b7:51:f6:55:af:4a:7a:bd:3a:31:88:71:2d:d8:29:b3:6a:a7:
8e:07:2e:56:5f:08:0d:64:7a:51:7f:2c:8f:ac:56:fe:01:68:
3b:9f:c2:91:29:8b:a6:c0:11:20:94:d1:36:5e:86:24:19:14:
67:c9:14:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 15:43:25 2026 by rpki-client