Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: C1R9fPd40XtJxeQVdJoh66FlqY6Yh9lVr9815edkB5g=
Subject key identifier: D4:A0:E1:E1:74:D5:0D:69:69:8E:CD:32:8A:AC:9B:58:BF:94:61:10
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 01A08CE91ADA3D6B80C12DD6104C50EB0E42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 0A1A
Signing time: Thu 10 Sep 2026 20:01:22 +0000
Manifest this update: Thu 10 Sep 2026 20:01:22 +0000
Manifest next update: Fri 11 Sep 2026 20:01:22 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: g5jInsW0Q1amvwzPKwZI+f95V4SKciDyuq5+VefhdhM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:1a:da:3d:6b:80:c1:2d:d6:10:4c:50:eb:0e:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Sep 10 20:01:22 2026 GMT
Not After : Sep 11 20:01:22 2026 GMT
Subject: CN=d4a0e1e174d50d69698ecd328aac9b58bf946110
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:fd:42:de:7c:6f:8e:23:95:4b:c9:60:3c:6b:
06:5f:d2:40:69:5b:c2:ff:83:ff:76:b3:ef:48:01:
cc:a1:4b:2c:85:24:c1:81:6c:3e:3d:0f:12:e4:e7:
01:30:57:5d:87:4f:96:0d:db:b3:e7:24:e1:44:89:
0c:98:18:14:14:d2:da:7e:53:45:e0:d1:14:62:15:
ee:5c:71:43:8a:18:8c:05:54:d8:99:ba:db:4a:70:
b8:86:ec:8b:b8:dd:2e:c6:86:fe:d0:90:a0:ae:36:
65:52:05:2a:fb:2a:b1:66:15:63:75:9d:da:11:8e:
87:a1:95:82:2d:98:c1:1e:5d:d8:05:24:49:66:bf:
5c:9f:63:28:eb:59:8f:27:27:1f:ba:20:75:24:b6:
79:7f:b1:34:d4:55:5e:f9:f5:ff:94:0a:b9:ed:6c:
42:da:17:1f:fd:b3:d1:83:bd:3d:a3:3e:77:68:c1:
d4:5c:d6:c2:94:a6:7f:d1:b7:16:95:5c:8d:e7:59:
ce:1d:ce:59:26:62:c3:fe:0f:c0:1f:af:3f:5a:3b:
f7:59:a4:88:bf:14:e2:e0:6d:04:43:5d:b8:b5:20:
cc:f3:76:ba:5f:59:b6:f7:ef:db:4f:9a:c6:f4:3f:
3a:04:2b:f3:f6:19:c4:e9:f6:fe:7a:87:a0:95:d5:
88:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A0:E1:E1:74:D5:0D:69:69:8E:CD:32:8A:AC:9B:58:BF:94:61:10
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:df:81:fc:d8:95:55:fd:b6:e4:d2:ec:a0:06:b1:30:e3:69:
68:1c:14:87:40:ef:f6:e0:b5:8b:eb:78:f1:dd:87:12:1b:86:
fc:e4:dc:3d:5b:94:0d:6a:02:7a:ac:60:1f:a4:f7:9f:2e:44:
a9:f8:30:85:cc:35:1e:fc:be:ea:63:c0:6d:b6:b0:be:9e:04:
65:5c:f2:bc:b3:b9:03:e6:4b:d2:1d:e2:0e:50:31:89:b3:8b:
78:64:7c:50:71:21:ef:ce:3d:d1:de:fc:b6:c8:13:df:29:8f:
30:72:8d:05:64:a0:ff:3a:40:ae:4d:cb:a9:81:2f:37:89:60:
96:73:91:49:34:3e:07:5b:52:2c:58:75:dd:e1:3c:16:85:32:
00:b1:17:3b:e1:4f:38:5f:52:eb:aa:28:40:f2:72:bc:07:00:
4c:b0:ae:5f:06:17:4a:bc:48:aa:11:31:b8:45:4c:1d:45:e5:
6a:c7:c5:a9:49:0d:46:99:b3:8a:4f:95:97:a9:91:6a:c6:45:
2a:c1:53:1a:51:fa:5e:e0:6c:e9:c3:da:6d:11:bb:a5:6c:ca:
8f:dc:49:ef:ea:5a:80:01:a8:4d:2f:f8:83:ad:27:3a:90:d8:
2b:3b:ab:6b:d7:4f:e0:97:9a:36:d4:65:f9:33:4c:fc:be:86:
9e:7d:fe:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:42:39 2026 by rpki-client