Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: SY4TYpno4MZ0aUD5z3RwXo0nrjMGliScQ2VrSiLxCqI=
Subject key identifier: 7F:D6:93:11:D2:44:3C:6A:2C:59:73:E6:9E:89:99:73:2D:43:F5:00
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019D3940F16C35B17484B47EA0E989475BED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 0861
Signing time: Sun 29 Mar 2026 11:00:50 +0000
Manifest this update: Sun 29 Mar 2026 11:00:50 +0000
Manifest next update: Mon 30 Mar 2026 11:00:50 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: /KpozmKBp9dxFHAAAZXeIfYKy7MReVt7h2NOI3iL7mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f1:6c:35:b1:74:84:b4:7e:a0:e9:89:47:5b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Mar 29 11:00:50 2026 GMT
Not After : Mar 30 11:00:50 2026 GMT
Subject: CN=7fd69311d2443c6a2c5973e69e8999732d43f500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:71:1f:20:41:73:ed:cc:a4:91:b7:74:33:e0:
ea:e1:a3:e4:d3:8c:71:ec:ed:65:9a:e4:b8:57:3b:
30:73:4c:b0:1e:8d:34:b7:dd:6d:27:4b:ca:97:fc:
a4:cc:c5:b0:0e:d4:b6:42:03:bb:96:b7:47:36:f9:
e7:a4:13:9c:0c:1c:d8:41:7f:05:e3:d6:07:7c:3d:
0d:32:d7:3d:a1:79:56:7e:5a:5d:69:2a:73:89:64:
17:0f:a1:a6:8b:23:d7:3b:be:b2:66:a9:bb:6c:0b:
73:97:39:a9:c6:f0:f0:57:d8:9f:66:8b:d5:f9:99:
b7:65:7c:2b:45:50:4c:23:ba:89:92:f3:87:3c:ab:
ea:82:69:9c:a6:79:33:b8:2b:f4:3e:48:31:78:0d:
03:e8:d6:40:f7:29:56:9c:34:4d:57:ae:0f:ec:c3:
f7:96:ac:38:1e:21:4b:f6:5b:e4:9a:34:44:6f:be:
26:19:b4:99:92:09:c9:22:68:47:b2:83:36:bb:06:
df:ca:99:00:1c:db:38:de:ee:32:d2:22:3e:37:d0:
56:15:0f:a9:58:1f:c3:55:7a:de:c2:ee:22:73:22:
52:ed:60:44:52:5a:ba:bf:cc:9e:c1:c1:15:f9:c5:
f3:fc:6b:89:31:8f:1e:31:f2:4d:51:a6:10:d2:5d:
90:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:D6:93:11:D2:44:3C:6A:2C:59:73:E6:9E:89:99:73:2D:43:F5:00
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:67:1d:15:83:82:dc:c0:67:97:de:a6:34:f8:dd:53:b2:65:
29:06:03:fa:59:e4:07:7f:bb:d3:2b:b8:3e:44:55:9f:93:71:
75:58:99:a0:47:28:b0:3f:da:1d:88:cb:0f:79:36:19:2b:86:
a7:17:94:26:bb:49:9c:ad:64:74:62:af:22:26:c1:7c:1b:69:
42:0d:dc:61:2c:49:9e:66:fc:49:a5:8b:41:84:78:d5:ff:bc:
b3:18:ba:dd:8f:7c:02:af:29:96:5f:1c:99:57:91:31:44:9c:
f7:7c:58:de:ed:4e:e6:0b:4e:74:52:84:88:5b:58:39:a7:8b:
7f:d6:78:bd:b6:7b:9b:a0:d4:e1:8c:59:f1:92:4a:c9:35:60:
05:b1:a6:6e:6b:1f:a1:a9:1a:4c:d2:7f:b1:38:7b:dd:a8:b4:
e0:74:c5:f5:7d:39:bf:a4:07:bc:72:71:53:c5:2a:c4:6a:2b:
56:6b:4c:5f:0b:fe:39:79:c8:50:cf:b3:ca:0e:0f:72:f4:1f:
0a:89:44:b1:52:cf:98:62:77:8e:61:2e:5f:a8:b2:98:e1:69:
6d:69:7d:d5:74:80:c2:fb:e5:57:38:cb:ff:ad:e5:1d:24:55:
22:e4:40:0e:9f:e6:f9:34:32:f4:0a:67:b3:63:11:49:89:7b:
08:ca:e3:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:12:01 2026 by rpki-client