Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: kBU/Ck1ZJ3WchbhKG+ETeJBwgoqJAVux3mqFkiaWK9Q=
Subject key identifier: EB:C7:6D:AC:94:85:FE:21:38:E4:23:4D:B2:59:1B:4E:C9:82:D2:87
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 01A1DEDE540FBFB18ADA9DEF99116407BF16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 141D
Signing time: Sun 15 Nov 2026 11:01:14 +0000
Manifest this update: Sun 15 Nov 2026 11:01:14 +0000
Manifest next update: Mon 16 Nov 2026 11:01:14 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: 01TFCTUxKgj0YC92uXkE5oDglc4DoDuFogLyV7WiUZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:de:de:54:0f:bf:b1:8a:da:9d:ef:99:11:64:07:bf:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Nov 15 11:01:14 2026 GMT
Not After : Nov 16 11:01:14 2026 GMT
Subject: CN=ebc76dac9485fe2138e4234db2591b4ec982d287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cf:c5:61:df:98:e0:4e:31:0d:27:53:af:8c:
22:77:70:6b:72:8b:2f:e4:46:a9:0f:50:97:93:0c:
a9:d0:e3:5f:7b:6e:be:ed:38:47:84:3a:10:c6:49:
bb:a1:2a:77:42:35:68:5c:9b:60:1b:e4:9d:d4:9e:
7a:eb:35:82:9f:b1:56:29:c1:0e:ec:6f:0e:64:c6:
5f:b5:66:2e:1f:c8:11:f2:08:e8:9e:68:2a:48:6c:
0a:4f:36:ce:cb:f2:8d:ca:6e:a2:5f:e2:53:84:75:
f1:6c:0d:e8:01:30:42:ae:9f:2d:f2:92:2e:e0:1e:
1a:e3:1c:d3:03:35:99:8a:e7:a3:8b:6f:c0:92:24:
c0:ee:58:99:6b:42:2e:68:9d:7c:87:03:1f:14:ab:
d3:26:b8:cd:1e:0e:80:33:94:ef:60:62:c6:39:8a:
1a:7c:47:ba:db:92:32:16:d1:ba:53:c9:55:32:ad:
ac:c9:c2:6a:27:f8:ab:7d:25:88:95:ab:ff:8f:a4:
7e:51:74:82:b1:fa:8e:a0:98:32:94:e1:d9:ad:82:
7a:a3:9d:86:00:9b:da:d0:6c:2e:7f:96:df:75:0c:
45:dd:35:af:d6:7c:d1:e6:d2:cf:ca:4c:2c:87:13:
fb:50:e8:50:02:e3:c0:a8:7a:3b:05:c2:8c:e5:5b:
04:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C7:6D:AC:94:85:FE:21:38:E4:23:4D:B2:59:1B:4E:C9:82:D2:87
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:30:a8:67:a5:5e:6c:7e:cd:1c:c1:e9:91:a8:18:08:4a:60:
29:01:5c:b3:b8:b5:cf:a3:9a:4c:e6:28:1a:42:bb:30:fd:41:
e7:cd:7a:15:41:8d:d6:14:dc:66:ed:68:59:0b:ee:37:99:ee:
94:86:29:13:45:82:5f:5b:4d:b8:d5:3a:12:01:ed:58:62:25:
22:f8:2b:4c:9d:af:dc:45:10:d5:64:67:6d:41:e7:af:cc:8b:
cb:5f:86:77:51:d8:42:2b:48:fb:20:7f:a7:e9:99:0d:dd:69:
91:5f:45:49:ff:3c:3f:b4:9b:a8:c1:88:3f:4b:19:ba:82:a3:
50:b9:ea:43:8a:99:28:08:28:0f:90:f8:12:40:b8:14:f3:3a:
58:20:0f:f2:0a:0c:e1:ef:63:d8:20:2b:9a:07:af:39:2c:b7:
f6:5c:97:5b:18:2b:a4:4e:6f:61:54:1c:40:3c:e0:4d:6f:49:
9e:cf:e8:70:59:6c:b3:7f:2b:5a:a5:37:11:db:c5:f6:1f:0b:
ea:c1:72:9d:4e:51:46:01:ed:8e:34:c6:8c:53:ae:68:ec:81:
5d:04:a6:54:54:f6:9d:ef:2b:7d:c6:90:81:f7:e0:1f:e1:ce:
a0:83:05:a4:72:bb:e0:2b:6a:9f:d2:48:10:b9:0c:ec:06:f5:
6a:09:c8:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 17:17:53 2026 by rpki-client