Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: k4ML6SBpcpBNx9p7KX3MVWf/35Ld0o2LCHFaD6LOpLs=
Subject key identifier: 9C:7B:25:0C:E4:EC:76:58:D0:DE:5C:B3:7D:F2:BC:E8:49:6D:37:16
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 01A0EB8A13DAE275934D581170DCFC50A1C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 139F
Signing time: Tue 29 Sep 2026 05:01:29 +0000
Manifest this update: Tue 29 Sep 2026 05:01:29 +0000
Manifest next update: Wed 30 Sep 2026 05:01:29 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: spGVbV3wCSzrd7MFyBCCoTfvAukEd9YES218Uua3A9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:eb:8a:13:da:e2:75:93:4d:58:11:70:dc:fc:50:a1:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Sep 29 05:01:29 2026 GMT
Not After : Sep 30 05:01:29 2026 GMT
Subject: CN=9c7b250ce4ec7658d0de5cb37df2bce8496d3716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:de:0c:38:18:52:8a:62:54:95:f5:cb:9b:5b:
83:47:95:dd:a4:a8:10:90:a5:5b:ff:2c:e4:a1:1e:
87:f9:d3:f3:02:89:95:f0:43:1e:35:d7:20:39:c8:
5c:b8:a4:44:2e:fc:c3:72:96:42:44:e3:80:6b:02:
f3:76:b5:70:43:a1:92:f7:ce:fa:89:f0:e0:eb:3c:
83:61:70:e3:cd:f1:81:3e:a2:03:e1:93:40:fa:37:
d8:79:af:5a:83:e1:c5:b9:d9:c8:5d:9a:67:78:28:
7c:b2:39:f5:2b:0b:c7:96:69:c4:0b:57:f1:92:f3:
cd:6f:82:b2:53:1a:45:d1:85:e3:4f:9a:7a:93:34:
f6:9f:49:9d:9e:0d:6e:57:3b:6c:80:ee:4d:b7:42:
f8:a7:ae:27:3a:f3:aa:02:c3:0f:c1:e6:91:7b:32:
f2:d9:92:21:a4:a6:8c:90:6f:b1:01:45:a5:39:50:
70:31:6e:bc:ea:0f:b7:87:9e:de:ef:4b:e7:92:97:
1d:4d:37:7d:a1:35:2b:76:db:8a:11:20:3e:4e:07:
97:4a:d3:b7:2d:2d:ba:e9:5c:e6:d5:0b:2f:be:ab:
b4:97:f3:0e:02:dc:30:64:88:74:c7:17:39:e1:0b:
00:1d:a4:a9:ed:c8:e4:a0:78:76:19:1e:85:d4:6a:
38:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:7B:25:0C:E4:EC:76:58:D0:DE:5C:B3:7D:F2:BC:E8:49:6D:37:16
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:cb:fe:41:1e:f1:80:f0:0f:07:12:15:3b:67:15:b4:88:e1:
8e:3a:10:57:6f:0c:9e:53:8e:1a:dc:54:47:1e:9a:b2:60:a7:
0b:56:93:4d:fe:31:af:08:53:dd:88:d9:b8:ba:9a:b4:3f:d6:
db:78:a2:97:6e:01:39:b9:b2:2d:12:75:6f:b6:0b:e2:f2:f0:
f8:79:56:45:28:77:1b:c1:d3:61:85:25:8c:6f:8d:61:18:23:
c0:c4:63:8f:99:59:de:db:53:e5:28:5d:b3:5e:1b:14:fc:c9:
43:a5:54:95:65:5b:b7:3c:e6:ef:36:1f:02:b3:fc:45:92:51:
c9:53:d4:f4:14:00:b3:ee:76:d9:c3:47:e7:b1:04:72:be:54:
8a:45:a4:36:d3:0c:6d:24:fd:b6:c0:11:5c:d6:1a:84:8a:0e:
71:ad:c8:8f:9a:e5:e2:b6:b7:55:0d:f3:96:e6:e1:1e:69:88:
93:87:b4:7b:c2:b2:0e:45:57:54:b8:a7:43:09:c1:52:8a:a7:
0d:f0:54:95:ba:5b:22:98:30:d3:f7:cd:be:7d:d1:d2:3c:c9:
65:dc:d3:b9:f6:49:62:e7:b2:b6:03:65:29:07:f4:8d:48:ad:
4f:04:18:0a:1f:f1:0a:5b:06:7b:17:6a:71:2f:91:e2:b5:4e:
88:dd:06:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 11:09:53 2026 by rpki-client