Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: 3sLFbQtEUFa//LSIMpxVErqSV9H5cBhn5DZBfU26BX8=
Subject key identifier: E1:75:33:52:68:0D:06:FF:3D:36:D3:ED:61:4E:04:DF:06:2C:8C:DC
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 01A153656C9963BE7C1227D18C5B28AE41B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 1333
Signing time: Mon 19 Oct 2026 09:01:58 +0000
Manifest this update: Mon 19 Oct 2026 09:01:58 +0000
Manifest next update: Tue 20 Oct 2026 09:01:58 +0000
Files and hashes: 1: GYTArtIgvINKT637yicE0RzC_gA.roa (hash: Lep0lB2c1nnq/plQOSLHCa5SiVLmUmJL/Hit/FXoSs8=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: yVtam3ChmiMr5MP6Bc03hM1nuCRN0E7ExPx8GOX7HKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 09:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:65:6c:99:63:be:7c:12:27:d1:8c:5b:28:ae:41:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Oct 19 09:01:58 2026 GMT
Not After : Oct 20 09:01:58 2026 GMT
Subject: CN=e1753352680d06ff3d36d3ed614e04df062c8cdc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:37:40:27:01:09:71:e6:fe:e1:ea:15:92:71:
f2:c8:00:50:ed:b3:ba:41:c2:07:90:82:27:6e:0f:
3d:b3:31:e6:f5:ca:ac:af:96:48:86:99:56:0e:54:
1f:53:d7:9a:cd:cd:b4:99:47:03:f9:b3:e1:0e:8d:
99:39:14:2a:74:51:b8:e5:76:55:2f:23:a3:dd:39:
9b:9f:b1:34:9b:d3:ea:b2:6e:c3:89:b5:da:18:ae:
ef:d2:61:19:e8:d0:84:c1:0e:30:db:5f:ea:be:88:
92:1c:cc:f1:42:47:67:02:bb:c4:cb:5c:1f:3d:4e:
d1:e0:31:07:e5:4e:0f:3b:3c:8c:c7:03:76:ce:19:
f8:c1:c6:7b:58:03:da:88:7c:06:2a:60:96:ab:bc:
72:2d:32:f8:9a:f3:11:e5:e3:25:98:a1:44:33:b9:
de:a8:a0:a3:33:c8:a3:7e:b0:81:21:66:33:3b:a8:
20:9f:b0:0d:8f:67:38:4c:19:12:69:2c:77:13:e3:
da:df:90:e6:da:b7:1e:cf:10:19:95:55:45:fe:90:
16:22:dc:89:64:a8:ac:0f:f5:98:bf:5b:77:89:ab:
b7:ea:d1:94:06:a1:ae:82:3b:6e:2c:4a:ab:be:1d:
0b:a0:1b:65:aa:f5:b9:3f:3d:e7:b3:d1:9e:02:85:
61:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:75:33:52:68:0D:06:FF:3D:36:D3:ED:61:4E:04:DF:06:2C:8C:DC
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:aa:19:41:41:cb:a0:55:17:22:4b:08:3a:8f:5c:70:90:94:
3c:76:15:86:7d:90:9f:93:0a:22:5c:64:e3:f0:7e:75:0b:6a:
e6:02:11:79:05:d9:d7:ef:5c:7e:8a:86:fb:ae:ee:bb:9d:22:
39:d2:0e:f9:3b:db:55:a5:f3:e6:68:f3:be:f9:00:c3:a9:ba:
9e:48:6b:e1:d4:fb:55:f8:ba:5f:f9:ee:5b:2d:ff:5c:0f:82:
10:65:1d:b1:59:a0:8f:83:82:23:ea:4b:e0:bd:94:0c:fe:ee:
e2:d7:76:2b:af:43:97:ac:7c:be:fe:db:fc:8b:1d:16:ed:d4:
04:61:44:a0:69:95:3c:54:86:6b:01:f8:e5:27:96:29:e3:36:
53:14:7e:8d:a6:50:22:cf:cf:41:98:65:91:50:19:be:43:a9:
5e:03:f2:20:01:5c:d6:42:7b:87:54:4f:58:a1:65:f7:e5:74:
53:60:bc:ef:44:2e:40:6a:8f:58:a2:01:7d:13:cc:d2:67:2c:
73:97:ca:97:d3:7e:05:ce:ab:63:fe:50:9a:6e:30:c0:96:a7:
22:f6:72:0b:ef:8d:ee:5e:9a:43:0f:4b:ba:85:29:3c:f4:1e:
cf:8a:3b:4b:21:70:3c:2a:a3:60:74:03:6f:aa:4d:96:85:08:
e2:f9:49:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFTZWyZY758EifRjFsorkG5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3
YWE2YzMwHhcNMjYxMDE5MDkwMTU4WhcNMjYxMDIwMDkwMTU4WjAzMTEwLwYDVQQD
EyhlMTc1MzM1MjY4MGQwNmZmM2QzNmQzZWQ2MTRlMDRkZjA2MmM4Y2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTdAJwEJceb+4eoVknHyyABQ7bO6
QcIHkIInbg89szHm9cqsr5ZIhplWDlQfU9eazc20mUcD+bPhDo2ZORQqdFG45XZV
LyOj3Tmbn7E0m9Pqsm7DibXaGK7v0mEZ6NCEwQ4w21/qvoiSHMzxQkdnArvEy1wf
PU7R4DEH5U4POzyMxwN2zhn4wcZ7WAPaiHwGKmCWq7xyLTL4mvMR5eMlmKFEM7ne
qKCjM8ijfrCBIWYzO6ggn7ANj2c4TBkSaSx3E+Pa35Dm2rcezxAZlVVF/pAWItyJ
ZKisD/WYv1t3iau36tGUBqGugjtuLEqrvh0LoBtlqvW5Pz3ns9GeAoVhgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOF1M1JoDQb/PTbT7WFOBN8GLIzcMB8GA1UdIwQY
MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt
YTIwMWRmYWJkYWIxLzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx
LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi6oZQUHL
oFUXIksIOo9ccJCUPHYVhn2Qn5MKIlxk4/B+dQtq5gIReQXZ1+9cfoqG+67uu50i
OdIO+TvbVaXz5mjzvvkAw6m6nkhr4dT7Vfi6X/nuWy3/XA+CEGUdsVmgj4OCI+pL
4L2UDP7u4td2K69Dl6x8vv7b/IsdFu3UBGFEoGmVPFSGawH45SeWKeM2UxR+jaZQ
Is/PQZhlkVAZvkOpXgPyIAFc1kJ7h1RPWKFl9+V0U2C870QuQGqPWKIBfRPM0mcs
c5fKl9N+Bc6rY/5Qmm4wwJanIvZyC++N7l6aQw9LuoUpPPQez4o7SyFwPCqjYHQD
b6pNloUI4vlJ/Q==
-----END CERTIFICATE-----
Generated at Mon Oct 19 20:48:36 2026 by rpki-client