Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
File: uakKhVIqpjnVeIL_2X2xpN2BELg.mft (raw, json)
Hash identifier: ox5RAMMvpZCHHgsE81lETavZ6MUJIxuxw7wgcbkWiTg=
Subject key identifier: 06:A5:90:45:DD:51:D8:7B:A2:2D:3B:3F:06:37:E7:8C:C5:14:57:85
Authority key identifier: B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
Certificate issuer: /CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Certificate serial: 019E1EDA79D52A604C448356212DA6A3870C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
Manifest number: 01D7
Signing time: Wed 13 May 2026 01:01:34 +0000
Manifest this update: Wed 13 May 2026 01:01:34 +0000
Manifest next update: Thu 14 May 2026 01:01:34 +0000
Files and hashes: 1: CsUMxPPZn7BWvRnMzKtwzumQlaI.roa (hash: s5cU5GsIZAY3fgBBTrdExxW/NI8apbM5B4zmDqtjvSE=)
2: q-jGore8m3Vj_5C7Ap3AXDg-4xE.asa (hash: ZNqsv7+pLU9fdFw+/1KeKKfY+X5+aMAfnSdQ+ZxMr4c=)
3: uakKhVIqpjnVeIL_2X2xpN2BELg.crl (hash: nY/sdThsxdYMo1UZgj8e43YvlE/Ob4+uAGcs3G2LLOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:79:d5:2a:60:4c:44:83:56:21:2d:a6:a3:87:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Validity
Not Before: May 13 01:01:34 2026 GMT
Not After : May 14 01:01:34 2026 GMT
Subject: CN=06a59045dd51d87ba22d3b3f0637e78cc5145785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e0:23:e3:fe:0e:61:74:f7:f0:f1:6c:3e:fb:
5a:12:35:54:39:92:79:31:36:29:31:61:90:e6:7e:
61:83:0d:35:77:40:95:1f:e2:47:bf:3a:9d:88:e0:
70:56:b3:a6:e0:2d:8b:76:78:77:93:71:8a:7c:88:
cb:49:53:ee:bb:51:ab:25:b7:6b:5a:a7:77:26:b5:
53:3d:cc:65:77:b9:91:85:6f:92:7a:b6:7c:be:e5:
d9:0e:db:ab:6c:70:a6:fc:1f:40:bc:c0:31:49:d4:
09:a1:5c:5c:c9:dc:9c:94:b7:ca:ab:60:47:9e:70:
68:dc:22:73:d7:07:46:35:34:f3:42:91:22:3c:f6:
32:71:72:02:f1:99:3f:93:4a:e7:be:33:c0:0e:2d:
99:fb:9b:f0:56:03:26:d3:11:71:5b:7b:db:34:91:
a3:04:79:73:77:87:e8:de:4f:fd:c2:0d:bd:1b:2e:
63:5b:df:9b:ac:f8:20:af:27:f8:89:4b:71:fe:b4:
44:f5:6d:b9:e7:e7:10:23:af:a5:d4:90:46:14:b3:
99:89:fb:94:7b:f5:5f:dc:1c:04:a0:c4:40:24:67:
8c:dd:01:c1:ca:2c:37:c9:c5:e7:af:ce:bd:cb:89:
ef:48:a8:66:71:b8:a9:c3:fd:b2:37:98:0c:ec:ea:
a5:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:90:45:DD:51:D8:7B:A2:2D:3B:3F:06:37:E7:8C:C5:14:57:85
X509v3 Authority Key Identifier:
keyid:B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:67:75:92:69:24:76:9a:be:4f:f9:59:b8:8b:60:66:03:b1:
d5:d0:00:10:a8:26:d5:02:19:e6:40:ac:29:52:95:3a:a7:dc:
a1:c0:b0:74:fc:f3:bd:4b:be:05:52:c0:ea:b7:2f:6d:40:b4:
a6:cb:f6:37:0b:e4:de:dc:53:9a:85:99:19:5c:16:a2:0e:86:
50:cf:47:0a:9d:93:ec:3f:95:94:29:95:63:64:de:c6:35:60:
c2:ab:cc:2b:0a:70:f2:98:da:6f:1c:43:4b:91:a1:c7:24:68:
48:05:08:ab:71:ac:d7:6c:3f:c0:1c:a9:0d:69:b4:99:5d:c4:
1f:9a:c0:23:d9:52:cd:c9:4f:d7:a9:68:fa:28:80:e5:7e:b8:
90:a5:ae:f9:70:31:e8:09:8e:26:8d:1d:65:a2:4c:ec:08:c6:
2b:88:37:f7:61:09:6a:5c:de:5d:ac:56:23:3c:f0:bb:d4:2a:
1f:8a:d8:00:61:ce:72:7c:31:f9:b0:de:b2:a9:76:ea:de:25:
01:88:c7:b6:45:5b:e9:05:2e:95:0c:76:e6:61:7d:4b:7d:70:
e8:a4:ef:d2:02:49:d6:cf:95:11:06:b1:b2:e1:2a:29:e9:34:
33:59:bd:b6:2b:d9:de:69:51:27:2b:93:cf:a5:72:2f:58:04:
39:d7:8f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:27:58 2026 by rpki-client