Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: ovw4Oxdx8kX6AzEsS1NX0ksAHWskZONgyvI1jUc1/P4=
Subject key identifier: 73:99:FC:C6:25:F9:86:37:38:77:5E:F3:83:C6:5C:FB:F7:03:23:0F
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 01A1860835783ABEB8844CE0F68FAC731139
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 0A9B
Signing time: Thu 29 Oct 2026 05:00:47 +0000
Manifest this update: Thu 29 Oct 2026 05:00:47 +0000
Manifest next update: Fri 30 Oct 2026 05:00:47 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: YPv157e/zRQ29j5YyHkY8xiPqel9vU4Oe5d+7OhNJeI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 05:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:08:35:78:3a:be:b8:84:4c:e0:f6:8f:ac:73:11:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Oct 29 05:00:47 2026 GMT
Not After : Oct 30 05:00:47 2026 GMT
Subject: CN=7399fcc625f9863738775ef383c65cfbf703230f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:eb:8c:31:5c:66:89:2c:eb:fd:c6:59:67:
61:f3:24:6d:15:34:97:77:61:82:e2:be:98:d1:d2:
bd:ec:04:90:75:7e:b2:93:61:35:8c:6d:7d:9b:e4:
0f:9e:f6:5b:b1:30:e0:06:8d:c4:5e:48:9e:89:ae:
67:d2:e0:a2:60:69:a8:73:32:ba:bc:43:97:25:3f:
e2:56:33:b9:31:1d:9b:7b:af:cb:b3:13:c5:0f:1e:
93:a4:26:01:88:14:51:72:3a:e5:56:98:31:84:96:
5a:50:c8:ae:57:90:f3:09:8c:73:ca:81:8d:1e:4e:
78:08:34:ec:cf:d7:92:ab:14:f3:c1:7d:ce:3c:17:
ee:4b:dc:46:e1:9a:fe:9c:c8:91:8f:b4:57:a1:6a:
8d:3a:fd:3d:bd:48:17:31:b1:bc:40:1d:e2:1f:3f:
90:e7:21:df:54:77:e5:3e:cf:3a:d0:0c:4b:6d:36:
8e:09:36:01:a5:48:2a:0c:c3:1c:b3:cd:5e:b4:a7:
93:0d:93:6e:eb:bb:36:01:58:59:20:43:ca:32:4d:
72:f8:38:ee:67:1b:dd:7f:7a:7e:d1:a1:74:21:be:
87:e6:ff:1c:c3:e7:35:0d:c4:c0:6a:f9:20:92:7c:
1c:9c:dc:55:68:29:4c:ec:f4:9e:ed:ea:18:81:37:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:99:FC:C6:25:F9:86:37:38:77:5E:F3:83:C6:5C:FB:F7:03:23:0F
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:12:fe:df:57:04:6a:04:99:98:ff:eb:e6:27:c1:a9:c1:8f:
1d:cb:68:1e:7f:73:9c:76:b8:10:2c:cf:5d:41:d3:69:f8:7d:
12:95:a2:0c:bf:eb:33:5f:5c:47:8f:60:d5:75:b1:3b:b3:dc:
73:0a:a2:ae:34:87:c9:75:71:54:74:15:f8:d8:c6:e7:c9:86:
93:40:10:b3:1e:0e:77:47:24:76:b8:fa:3a:14:d5:65:85:80:
34:b1:05:9e:46:11:4a:26:59:69:6a:bd:bf:41:0d:b6:16:e2:
bd:2e:05:ae:be:23:21:7d:5f:42:4c:9b:b9:03:1f:ff:84:ff:
f4:c6:e3:26:c2:b6:35:71:97:b9:94:f2:b8:b8:a5:2a:53:12:
00:7b:08:35:6a:50:82:17:59:c0:04:d0:71:76:b3:18:cb:4d:
ce:76:8b:c2:24:5e:5c:b7:b3:ae:4d:bb:10:82:a7:63:c0:57:
18:ba:76:3a:4f:c9:66:38:54:a1:c6:30:b4:8d:5f:06:22:9a:
9a:15:53:f0:70:97:14:e2:4d:cc:75:b6:a8:2d:72:09:1d:6d:
73:92:e0:65:19:93:c5:40:a4:0a:92:9b:b0:45:b0:20:06:c0:
c0:e4:4f:dc:47:1b:93:2a:1c:40:69:d4:62:ea:16:49:71:ec:
9f:44:45:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:01 2026 by rpki-client