Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
File: uhfrfV8E0nFV8gF4bzkPtAimquQ.mft (raw, json)
Hash identifier: kfb+yDRbv0zU9DPq2DE+lF+bNSAU6RJdb98mjbTtY7A=
Subject key identifier: 23:20:AF:26:96:48:EB:B8:FB:A8:83:19:A8:DA:C1:37:2F:7D:BE:0B
Authority key identifier: BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
Certificate issuer: /CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Certificate serial: 019E1FB58B4DEDA7C6DF21010BCC8E21ACFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
Manifest number: 0140
Signing time: Wed 13 May 2026 05:00:51 +0000
Manifest this update: Wed 13 May 2026 05:00:51 +0000
Manifest next update: Thu 14 May 2026 05:00:51 +0000
Files and hashes: 1: 0yT0OXiNw9csRLbDIHPuRhRNJuA.roa (hash: V99TnpgsuLfThbZigceHdcceXYaalafIhYll4v0qF0s=)
2: uhfrfV8E0nFV8gF4bzkPtAimquQ.crl (hash: 3beBLa8BFFPSZEBMfsnpiy8VRExGk1FMqUHqrp8+0x8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 05:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:b5:8b:4d:ed:a7:c6:df:21:01:0b:cc:8e:21:ac:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba17eb7d5f04d27155f201786f390fb408a6aae4
Validity
Not Before: May 13 05:00:51 2026 GMT
Not After : May 14 05:00:51 2026 GMT
Subject: CN=2320af269648ebb8fba88319a8dac1372f7dbe0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:15:bf:d3:e6:4e:5a:7b:39:f5:69:a0:66:b7:
39:b5:a6:a7:ed:6c:4b:a5:ea:97:35:f0:87:1f:c3:
98:cc:04:50:23:89:ee:9d:9b:e6:7e:8c:66:4e:38:
bf:94:ed:42:09:65:c0:a7:4d:36:1e:0d:a5:80:98:
ad:2f:c8:49:d4:e2:73:3f:80:5e:c7:b7:0a:c1:64:
32:bd:8e:e9:67:68:db:74:86:4a:e4:4b:b2:0a:e0:
cf:10:2a:94:2a:e8:e5:8e:5f:73:94:31:8a:0e:6b:
dc:fa:c3:10:4c:79:b7:71:60:37:2d:51:f8:4b:0f:
c1:c5:91:eb:03:05:5e:db:24:d1:18:1b:9f:aa:5d:
a0:ba:aa:b9:db:e8:4e:9a:a3:df:d8:ca:8a:1e:c6:
06:65:67:e2:61:c5:21:da:4e:22:6d:ed:f7:80:96:
df:24:4f:6c:62:34:c6:e4:82:e0:49:f2:44:64:7f:
80:23:36:40:7f:db:ce:00:57:12:5a:7f:10:d3:a6:
c6:fa:45:60:08:af:b3:c4:92:82:90:9f:46:64:70:
6b:b3:17:1c:46:90:d0:10:c5:1d:79:ab:18:d1:bc:
66:ad:55:db:54:3b:92:23:c0:8a:1a:09:3a:69:1f:
fd:f2:0d:e5:ae:06:d8:e2:e2:27:3a:77:fe:d8:ac:
5a:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:20:AF:26:96:48:EB:B8:FB:A8:83:19:A8:DA:C1:37:2F:7D:BE:0B
X509v3 Authority Key Identifier:
keyid:BA:17:EB:7D:5F:04:D2:71:55:F2:01:78:6F:39:0F:B4:08:A6:AA:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uhfrfV8E0nFV8gF4bzkPtAimquQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/13d175-f675-4b2e-a4b0-30ae126464f7/1/uhfrfV8E0nFV8gF4bzkPtAimquQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:b8:2b:37:cc:eb:bc:fa:1f:1c:30:e6:88:0e:27:00:72:e3:
e4:31:86:83:37:02:42:aa:31:f0:fa:d0:39:52:7b:be:b6:ff:
e8:e5:2d:f0:36:e0:e9:ae:54:4b:d3:ee:18:fd:d7:8b:f8:49:
7a:22:8e:92:d8:2a:04:5b:b3:cc:ba:ba:50:9d:e6:2b:43:b0:
fc:3a:8c:c4:02:f1:ab:98:c0:ab:d7:be:39:74:e9:7f:17:d0:
35:e7:a1:fb:a6:1b:51:5b:9c:56:a8:97:39:7d:92:d9:26:6c:
90:64:85:24:81:6a:2a:05:3c:23:57:43:39:b5:7f:0c:95:ec:
33:9c:bf:0c:b3:23:56:b9:d5:5c:69:8f:e3:38:7c:4d:65:ca:
70:c6:35:ae:14:1a:ba:3e:d5:c1:c9:68:74:44:87:1b:e2:2e:
91:1b:0f:a6:25:47:09:df:e5:55:6f:c4:9a:67:8c:57:cd:d4:
e4:41:ae:d7:73:9f:bc:2d:52:fe:2a:30:1e:41:19:c4:13:0d:
af:1f:8f:fd:c3:f5:f0:49:5f:bd:96:85:1c:32:05:65:25:b6:
b0:5c:ad:02:5c:0a:c4:15:72:3f:da:f7:c6:be:bb:0b:3a:92:
cd:df:b2:78:e3:26:54:32:8a:f9:f4:cd:e7:75:a3:4b:9c:3c:
a4:2b:54:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:32:43 2026 by rpki-client