Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: 1MM0oZxklm72WfK6a3j0h4WaRSA1JcIRPI1G69h70ek=
Subject key identifier: 4E:65:5A:B5:03:BF:E6:9B:D9:C7:7E:E0:CC:62:0C:DF:5C:C2:82:EE
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019F91DB27528B892457C649D28D0EA98BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 12EC
Signing time: Fri 24 Jul 2026 02:01:26 +0000
Manifest this update: Fri 24 Jul 2026 02:01:26 +0000
Manifest next update: Sat 25 Jul 2026 02:01:26 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: vr+WNTDlcODYl0e20aMsbnDlZtVyXkPqolzN017ym58=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:db:27:52:8b:89:24:57:c6:49:d2:8d:0e:a9:8b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jul 24 02:01:26 2026 GMT
Not After : Jul 25 02:01:26 2026 GMT
Subject: CN=4e655ab503bfe69bd9c77ee0cc620cdf5cc282ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b6:df:99:a4:4d:28:64:04:95:bd:9a:5e:2a:
ff:48:e2:d3:cc:7d:ee:98:7f:3e:0b:b8:fd:b8:e1:
ed:72:3d:58:8a:26:1f:f6:09:bb:3a:a7:3f:65:e9:
da:52:70:97:17:8b:88:91:49:c5:6b:e2:e4:31:50:
91:41:14:00:cd:03:1a:2f:06:b5:34:31:c6:b6:3e:
2f:b4:10:39:4f:e6:b4:8e:96:30:9e:18:2d:d5:cd:
e3:13:a4:55:1f:0a:ff:19:91:7a:16:aa:2c:75:b0:
5f:05:bd:1e:c2:e9:b1:52:44:d3:b3:39:3f:48:b2:
da:00:13:02:f0:86:41:26:22:b8:ae:f6:ea:82:4d:
ef:c9:95:ef:5f:eb:c1:b7:50:d3:65:1a:57:03:31:
d6:a3:db:34:9a:80:a1:3e:24:37:5c:8b:18:1a:04:
ef:2e:50:28:67:79:54:de:a7:2a:84:d7:82:c7:ae:
9b:e2:d1:f5:37:b4:5e:5f:75:a9:91:05:cd:5c:69:
71:9f:77:09:9c:ed:af:ce:36:33:a5:f3:a6:eb:37:
9a:bd:a1:3e:49:be:6a:34:b6:db:ff:ca:96:bf:ac:
ad:15:7c:bf:0a:20:d6:bf:5d:13:ca:5b:d3:93:bd:
5d:49:56:92:76:e8:87:c5:33:12:94:cb:ae:b2:5e:
a6:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:65:5A:B5:03:BF:E6:9B:D9:C7:7E:E0:CC:62:0C:DF:5C:C2:82:EE
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:80:dd:0b:6e:87:a3:47:93:d7:12:dc:cf:b8:8c:3a:d3:3d:
69:cb:35:29:7e:13:a8:9f:fd:38:7b:bf:45:66:e2:85:ab:b2:
52:60:66:c2:27:d6:55:bc:65:1a:b1:0e:8c:b6:49:6b:07:63:
d3:7d:85:eb:e8:05:0e:ca:c3:ab:65:91:2f:0c:28:56:ef:dc:
be:84:10:6f:44:54:18:21:07:c9:21:0f:0f:b5:91:06:2f:a3:
d9:1c:68:15:d3:68:76:e0:82:b8:1c:a2:42:73:e8:55:e1:96:
1a:b7:d9:60:90:7c:84:36:cf:55:fd:73:98:ef:7b:d3:99:9d:
06:df:25:d1:9e:65:0f:d3:08:f1:8f:26:2e:26:33:7d:86:ae:
ec:56:25:ab:15:4e:0c:b1:d7:e1:20:b8:fa:89:fb:f2:a3:49:
ca:fb:68:61:ba:29:56:e0:c4:81:7e:d8:ef:66:a0:47:1d:88:
d6:4c:fa:6d:3c:05:6d:88:7b:ff:10:4b:84:db:32:bc:0d:d1:
9c:39:21:f2:eb:78:e7:a5:e3:51:db:d9:11:79:56:7f:f1:ce:
09:fb:d5:82:f8:a2:18:a8:47:26:03:0d:06:d6:c1:f7:81:f4:
42:b4:94:9f:87:4a:d1:8a:71:53:60:0e:c5:77:cb:59:8c:27:
45:45:9c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:22:07 2026 by rpki-client