Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: ZNAxK2OXaGeaLj6Pbl3D7+yFOUB8GV/rfUyrDl0oH38=
Subject key identifier: 73:4E:E4:80:85:9D:6E:19:A5:00:C3:97:A3:0A:50:EF:FB:C4:0E:3B
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019E20922EB1499BD3EBF166586AB11279FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0CDF
Signing time: Wed 13 May 2026 09:01:51 +0000
Manifest this update: Wed 13 May 2026 09:01:51 +0000
Manifest next update: Thu 14 May 2026 09:01:51 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: UusZkG8x5pRALp3Z5sMcWhiCt8BhuSfiIiDUgHUgIY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:92:2e:b1:49:9b:d3:eb:f1:66:58:6a:b1:12:79:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: May 13 09:01:51 2026 GMT
Not After : May 14 09:01:51 2026 GMT
Subject: CN=734ee480859d6e19a500c397a30a50effbc40e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2d:a1:59:8c:76:8a:c7:24:9b:ae:43:33:c3:
8e:71:2b:6a:11:cc:b2:5b:57:ba:0d:e4:24:07:c7:
a0:2d:ad:1d:b5:cc:cb:2a:44:84:26:6e:d5:4a:a2:
f9:31:c3:db:af:98:fe:50:e3:15:cc:9c:d3:74:3a:
39:dc:f0:7a:05:27:ee:2f:8c:95:53:84:44:3f:22:
1c:45:5c:79:74:61:4c:d5:26:2d:6c:7e:8b:84:5d:
00:50:2d:76:f8:00:e4:f4:78:26:6f:dd:8d:f6:9a:
6f:21:15:4f:dd:2d:08:33:ca:24:62:e4:37:57:54:
cd:dc:74:0d:e4:24:02:ae:69:cb:b8:13:e5:aa:78:
b7:bb:76:4c:39:12:92:40:ad:13:28:7a:77:66:7d:
7d:6e:72:e6:c1:c1:57:e3:4a:58:e7:8c:24:cd:4c:
82:41:87:52:55:7f:dd:00:ea:67:6d:01:ce:3b:81:
3a:15:da:df:7a:92:ad:15:c6:9f:52:66:3e:44:c0:
a0:65:f8:36:0b:17:b2:bd:5d:21:99:2e:2a:73:65:
20:86:d5:12:15:90:b0:3f:80:a2:3d:ff:02:36:4b:
34:13:9a:01:d3:3d:b4:6f:40:5a:6d:c7:1f:47:95:
83:6d:18:71:c7:8b:03:f1:1c:81:0a:25:15:a4:2b:
1b:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:4E:E4:80:85:9D:6E:19:A5:00:C3:97:A3:0A:50:EF:FB:C4:0E:3B
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:f0:62:a1:5c:0d:ff:3e:76:18:33:5a:85:b0:55:10:cb:29:
69:ca:cd:ba:69:f9:02:52:f9:1d:c6:ff:e4:6e:23:e3:10:33:
ba:98:f1:e4:a8:45:bc:20:d2:ba:1a:a4:67:66:58:9b:30:7b:
7d:eb:ce:60:00:7c:9f:ea:f3:1e:50:79:03:3c:15:a5:c0:99:
c1:b8:76:8e:2f:e9:41:18:c0:59:d8:df:3a:64:58:0f:df:90:
22:8c:f6:02:62:11:17:5d:f1:1c:be:fd:b1:45:e9:74:25:ba:
34:0f:f0:79:8b:be:b7:7d:39:76:08:27:50:c8:9e:ff:d1:7d:
f8:67:e8:35:3b:33:29:c5:fd:a9:7d:ca:64:7d:10:49:71:c3:
df:8e:90:45:42:f5:f1:67:26:22:56:18:4a:19:48:b0:74:00:
2a:d8:72:87:98:38:66:30:cb:17:5b:0a:10:c8:6b:13:20:8a:
2e:2a:70:fe:c6:b2:62:c0:86:d4:c0:2a:8e:72:9a:c0:ce:ee:
74:25:51:3c:4d:4d:df:c3:a0:b6:89:f3:80:d6:a1:99:f2:ed:
90:a1:4f:2b:d9:b0:39:aa:f4:0c:8c:fe:84:27:ee:ef:47:a5:
57:4a:f6:40:cb:e3:21:d7:16:2e:50:b7:42:bf:3c:12:19:e5:
cc:66:af:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:51:55 2026 by rpki-client