Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: nCLidBiCFvSljOZ39ptorGN8cJrwXT4rqYSmKmSdsps=
Subject key identifier: 47:F6:65:8B:14:38:E3:70:14:04:79:4E:80:6D:B8:6A:BF:FB:21:C4
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019FA14D338E2716201F7FE07EC9447C177E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 09A0
Signing time: Mon 27 Jul 2026 02:00:18 +0000
Manifest this update: Mon 27 Jul 2026 02:00:18 +0000
Manifest next update: Tue 28 Jul 2026 02:00:18 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: 4qk1N5k8Pwk10PRh+GHDAq+VbuMJAv3V7qfrfNYKj2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4d:33:8e:27:16:20:1f:7f:e0:7e:c9:44:7c:17:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Jul 27 02:00:18 2026 GMT
Not After : Jul 28 02:00:18 2026 GMT
Subject: CN=47f6658b1438e3701404794e806db86abffb21c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:71:36:a0:3f:e0:35:4b:85:96:de:21:f5:e4:
80:55:3d:c1:29:f2:bb:10:fb:66:94:a7:0a:d3:7c:
b6:db:47:2a:72:13:b5:8c:c6:7d:9b:06:a6:72:51:
af:18:14:44:58:0f:94:61:4d:44:ff:02:01:2a:77:
3c:af:7c:aa:81:e4:6b:bc:6a:87:e8:3c:aa:ac:1b:
8e:89:a6:1a:77:e8:d0:39:b2:a7:31:27:36:51:56:
c2:59:3a:82:a5:cb:0c:0d:e0:46:72:40:0c:e4:f8:
29:f0:97:cc:0e:fd:7a:4c:2d:ff:14:b8:0e:c1:48:
9d:91:ea:50:61:5d:47:e9:21:40:e2:9a:df:72:cf:
32:fc:78:8d:e7:f5:d0:a1:89:80:57:5c:eb:d7:53:
6c:a5:0a:f9:c9:d2:d5:d0:39:57:fc:ca:7e:b9:08:
22:30:00:85:b7:94:1b:26:d0:80:8f:af:50:c7:4a:
6b:ae:d8:ac:4d:65:ee:0f:27:bc:15:28:4a:f9:97:
10:a9:11:b0:a6:9e:c5:59:35:a5:4f:c7:6b:df:b5:
bb:b7:70:28:fa:cf:58:a8:22:23:da:43:cb:e6:91:
5e:e6:5f:4c:4e:92:ba:2b:29:90:9f:3d:6c:46:52:
7f:7b:f7:29:de:39:5d:6d:71:0e:e3:ca:bb:f1:5d:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:F6:65:8B:14:38:E3:70:14:04:79:4E:80:6D:B8:6A:BF:FB:21:C4
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:ee:2a:6a:c5:70:0c:cb:4f:bf:47:8d:f9:80:06:e2:a6:1d:
0f:76:12:bc:a5:98:3e:3b:e4:7d:06:00:24:f3:aa:a5:fb:e2:
5b:4e:5d:e7:8a:56:0d:9d:48:14:22:0b:5e:70:4f:70:43:70:
cd:04:e3:36:16:55:57:07:db:d2:90:01:75:6a:38:e6:f8:99:
72:94:c3:55:1d:ed:05:a9:50:4a:41:48:03:30:44:4e:3f:c4:
e0:15:82:fd:00:df:19:0f:1b:bc:87:2d:16:f3:6c:f1:75:17:
13:c4:d0:10:29:dc:f2:1d:24:eb:ab:fa:d2:f1:e2:29:8c:e9:
49:0b:5c:eb:ed:8c:44:d4:aa:fb:cb:8c:d1:e4:f2:4a:66:9d:
0c:9b:72:bf:95:4e:1d:8b:e4:ad:41:73:ef:14:f1:68:09:13:
d6:33:ca:d6:17:8e:0d:58:34:fe:e3:df:fc:9d:42:e9:94:b8:
0e:37:83:91:92:73:89:6e:14:87:0c:d5:68:79:a6:2b:1d:62:
21:d8:4b:d2:5a:6f:08:5b:6b:0d:a5:5f:e7:59:e9:22:4f:97:
5a:af:41:dd:ce:5d:aa:ee:bc:2f:c5:ee:0b:d3:43:bf:ab:39:
64:d5:1e:85:16:76:5a:d6:27:c2:4f:08:e2:51:84:ee:77:eb:
85:05:37:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:33:32 2026 by rpki-client