Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: EdA63SjpqcIT5aV0H1h1XWRBxrNtc76h/ys2dv6M4wI=
Subject key identifier: DE:F6:0B:53:67:A5:5E:3F:8F:6B:02:35:C4:D5:44:D4:17:9A:74:13
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019D25840EFA97673CEF33B2A8B8B301CDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0C5D
Signing time: Wed 25 Mar 2026 15:01:44 +0000
Manifest this update: Wed 25 Mar 2026 15:01:44 +0000
Manifest next update: Thu 26 Mar 2026 15:01:44 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: 36Fwpn2m8Adm4/XJW9ouMcWmlSM8+UVL0A8wsNqiWZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:0e:fa:97:67:3c:ef:33:b2:a8:b8:b3:01:cd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Mar 25 15:01:44 2026 GMT
Not After : Mar 26 15:01:44 2026 GMT
Subject: CN=def60b5367a55e3f8f6b0235c4d544d4179a7413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e3:84:8e:6d:4e:ae:13:65:96:be:a5:a9:20:
09:0f:05:c2:9d:7c:b2:ee:68:03:87:05:9b:7a:e4:
c3:0f:36:0c:b7:6f:34:0b:dc:ee:d1:2a:2b:ef:fe:
30:3c:14:be:2c:1e:f3:3a:ba:46:09:8c:ef:16:61:
0c:ca:95:bf:70:2d:c5:fa:7a:16:f2:41:52:ff:12:
d8:9a:96:48:bb:48:7c:a9:23:45:77:8c:3e:09:d5:
54:5e:cc:6f:99:5e:39:fb:24:ec:34:8c:de:9e:51:
b2:56:a8:49:fe:25:d4:dd:95:22:d2:f9:bb:83:8a:
d9:5d:7f:63:46:f1:63:8d:cb:6b:74:52:82:7a:5a:
4a:06:05:a2:2d:ea:b4:f3:7e:06:06:af:24:7f:49:
7b:4a:9f:76:81:1c:d1:04:b6:29:63:6b:ea:51:b7:
37:23:24:da:8d:e0:37:4b:99:ba:e8:de:5c:87:e7:
a9:65:c7:39:da:03:97:71:f9:91:49:15:1e:30:a9:
9b:47:38:6d:8c:73:94:61:22:15:4a:bd:a5:c1:df:
4b:52:92:b0:3e:98:30:70:ed:33:80:7d:13:c6:b9:
dd:1d:60:db:7c:45:bd:cc:e7:7b:74:67:d0:35:e1:
ca:89:ae:07:82:bb:eb:b0:c7:bc:65:c5:23:bd:4e:
18:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F6:0B:53:67:A5:5E:3F:8F:6B:02:35:C4:D5:44:D4:17:9A:74:13
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c0:63:79:fb:0f:40:69:76:4c:65:ee:15:d0:1c:eb:7c:cd:
db:39:b4:b6:48:20:bf:19:5d:81:4c:98:8e:b6:9b:f0:88:7f:
3d:68:85:9e:57:2d:27:a8:62:cc:0a:5e:cf:7a:f1:48:8a:4b:
95:00:a6:90:ff:4b:b8:b3:0a:0c:34:af:ec:85:c3:8c:e7:5b:
b9:a3:13:02:ed:5e:4e:c2:47:b3:4d:2d:27:ef:37:84:e3:fa:
e6:f0:bb:2d:96:e8:5f:38:d8:b0:51:de:41:b7:a1:b5:9b:c1:
61:3c:0e:a2:7b:80:0a:03:1b:49:b1:3a:71:4c:d6:bf:2f:81:
23:48:b2:54:de:30:64:73:f7:a6:d5:f4:49:92:ba:3c:0d:29:
cc:3d:b4:cd:f7:21:2c:dc:c0:d1:92:cd:5f:f5:18:6b:24:ce:
a2:4f:c2:36:37:54:82:f5:6d:32:72:48:87:5f:a0:0f:e9:2d:
e3:7f:9d:02:46:5e:67:d5:80:38:0f:85:09:d5:f4:2f:16:3d:
4d:45:c2:22:1d:5e:b7:23:fc:00:2b:02:6e:8c:7e:3e:70:5b:
09:e3:ce:40:dd:de:df:7e:29:e2:4e:67:eb:eb:ab:d1:6d:03:
b7:1d:59:af:3b:ce:d9:19:e1:a5:a6:b9:0a:a7:94:6f:4b:e9:
ed:8a:b7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:53 2026 by rpki-client