Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: oLpTQhDTDBsP5AD2e5/GNRv+1F8wbz2XZwxdAr6KYok=
Subject key identifier: F0:D4:3A:79:EE:73:19:55:57:2F:63:83:E1:6D:DF:FD:C7:1F:5D:64
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 01A01F424093273B1889B9A3293C3E8ADA02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 105F
Signing time: Thu 20 Aug 2026 13:00:30 +0000
Manifest this update: Thu 20 Aug 2026 13:00:30 +0000
Manifest next update: Fri 21 Aug 2026 13:00:30 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: c5FOj0TC2i0d09Vb40p5G3MKxWoPG9AeStoeZbornWQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1f:42:40:93:27:3b:18:89:b9:a3:29:3c:3e:8a:da:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Aug 20 13:00:30 2026 GMT
Not After : Aug 21 13:00:30 2026 GMT
Subject: CN=f0d43a79ee731955572f6383e16ddffdc71f5d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ea:3a:be:d2:ee:0a:05:d6:0f:e3:0c:aa:19:
7f:fa:b5:9d:c7:0b:e7:ae:5e:12:b0:b0:a1:eb:3c:
95:95:d0:25:88:cd:87:a7:99:7d:6a:1f:7b:c3:ba:
f3:bb:6c:2c:d8:55:4d:6a:f8:02:a1:c3:8b:6a:51:
99:84:d0:1f:fc:52:bd:fd:7a:e5:1e:81:70:46:25:
9d:37:99:17:36:3d:09:14:54:a9:4d:3b:cb:34:5e:
d9:40:6d:4a:ea:00:4b:07:6c:7d:b8:75:2a:96:13:
d0:a6:55:4b:a2:45:50:22:45:52:34:db:65:b9:47:
46:63:11:e8:0b:1f:86:80:2a:dd:40:6b:3e:ea:b7:
c1:48:5d:f6:ab:7e:74:23:ba:c3:5f:b8:b1:93:96:
f3:75:82:64:7b:df:a7:7b:6a:80:95:a5:22:7a:01:
2c:d2:3d:c9:67:60:09:1b:59:9f:f9:bd:b5:0f:30:
d9:76:e1:9a:98:3b:37:89:11:2e:6e:f0:96:a0:78:
d8:09:49:ed:ea:cf:75:80:1f:6b:b5:12:21:dd:1f:
03:2d:ad:df:b0:44:b2:6f:27:03:96:22:72:9b:12:
2d:36:9c:72:03:88:1b:65:98:7c:cc:c8:60:54:b6:
09:45:af:db:2c:a2:49:21:b5:4c:fc:b4:d6:5c:7d:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:D4:3A:79:EE:73:19:55:57:2F:63:83:E1:6D:DF:FD:C7:1F:5D:64
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:07:f0:5e:e7:a6:c6:e1:df:b0:d0:10:60:73:2e:de:2d:54:
e3:74:3a:02:8a:e4:7e:8f:36:41:d5:54:67:70:ab:ae:41:05:
c1:b1:71:d0:0f:bc:a7:54:6d:71:ed:e9:08:e7:74:37:6b:1e:
6e:1f:41:ec:f0:99:77:67:f7:f1:ec:b5:93:0c:c7:41:5d:f7:
99:28:5e:db:b9:19:f2:b8:9d:de:18:b6:b2:26:97:5e:3f:0b:
1c:d0:0d:c1:5c:01:d7:bf:88:07:9e:8f:58:28:e7:22:78:33:
b5:f3:1f:fa:7a:ff:5b:41:59:09:46:7e:13:e9:29:b8:13:26:
22:92:97:da:8b:87:a8:06:42:d9:7b:ae:2f:8a:c4:ea:7d:23:
00:af:b2:1a:f6:98:35:1b:83:90:5c:f4:6c:94:f5:59:93:e5:
e5:aa:9a:06:d4:17:04:e4:b4:d1:21:1e:39:d3:71:27:57:e7:
37:2e:00:24:86:9d:e1:c3:6b:79:d6:4e:a0:f4:1a:b0:bf:92:
58:ca:a0:a3:de:4a:05:da:4e:2e:8f:ed:2f:c8:79:37:6c:d4:
cb:12:07:86:b5:94:15:20:65:a4:e5:49:65:1a:79:be:0e:2f:
ec:80:d8:5e:42:55:3f:3a:a5:98:2b:e8:6c:1e:33:b6:66:f5:
dd:c3:92:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:54:22 2026 by rpki-client