Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: AFlEnk3J9dRtr6EvnObLBXMZkgIX1RHJH+IRmkem9oo=
Subject key identifier: 52:82:42:A1:11:8A:BD:52:BC:E1:56:9B:A3:95:33:9A:55:E8:42:D1
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 01A0035DDD91B19129CEE41D46F80B6F5BB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 1285
Signing time: Sat 15 Aug 2026 03:01:18 +0000
Manifest this update: Sat 15 Aug 2026 03:01:18 +0000
Manifest next update: Sun 16 Aug 2026 03:01:18 +0000
Files and hashes: 1: GYTArtIgvINKT637yicE0RzC_gA.roa (hash: Lep0lB2c1nnq/plQOSLHCa5SiVLmUmJL/Hit/FXoSs8=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: uE4F2SDtoghu8snAnibUOa4tbURYZHUgi41gDC1v1T4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:5d:dd:91:b1:91:29:ce:e4:1d:46:f8:0b:6f:5b:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Aug 15 03:01:18 2026 GMT
Not After : Aug 16 03:01:18 2026 GMT
Subject: CN=528242a1118abd52bce1569ba395339a55e842d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f0:f6:84:d0:d1:15:44:f2:71:2f:e3:f3:11:
94:ed:48:fe:ee:22:54:d5:f4:a3:88:b5:9f:60:2a:
52:44:90:20:c0:6d:80:da:4f:2a:06:b3:90:42:bc:
70:c1:97:f4:96:6a:f1:95:a4:41:fc:05:72:99:5c:
42:ae:7e:3c:8b:df:6a:97:f5:01:ae:a4:a5:23:80:
71:d1:51:6c:21:5f:82:cd:7b:4e:33:04:f5:bd:d3:
a5:37:59:fd:b7:66:26:3c:1e:28:e7:e4:78:3c:f6:
89:2f:9a:8f:b1:19:c6:ee:2e:c3:9f:33:7e:9a:bf:
09:62:f3:39:c7:a6:06:37:ca:bb:c2:d9:21:07:fb:
63:a7:ea:9a:d5:92:24:85:14:0d:a5:89:df:2c:87:
f0:04:78:3d:6c:b1:99:85:59:74:01:cb:8c:5c:e8:
e2:d4:01:89:49:22:52:ea:b5:ba:d9:a6:21:a4:4e:
0b:0d:6a:f8:fd:b5:db:90:fd:31:43:35:4a:6b:8e:
e3:9c:b4:02:a2:b0:b2:77:41:68:e2:88:2f:9d:33:
24:0a:3c:9c:01:a5:ca:b3:6c:ab:e8:e1:70:a3:bc:
bb:34:39:1e:49:0d:5f:f2:34:e0:ee:d0:2e:da:7c:
b0:96:a7:bd:2c:1b:1d:7c:b6:6b:31:38:78:61:f9:
51:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:82:42:A1:11:8A:BD:52:BC:E1:56:9B:A3:95:33:9A:55:E8:42:D1
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:59:1e:35:98:3c:0e:ee:3d:fa:a0:0e:f0:72:fb:14:b3:f6:
77:62:88:aa:cb:d5:a6:8d:ea:46:b9:4e:a6:1b:b6:3c:b6:7a:
08:ad:ae:58:85:8f:35:86:c7:51:7e:3c:38:4b:6b:80:c4:a5:
6e:56:c1:a6:72:50:9c:e3:0d:14:6e:2a:1d:3e:de:b1:b4:d1:
f3:ef:27:bf:96:3d:5e:d6:dc:aa:f0:81:02:51:e1:8d:f8:c9:
e9:71:3f:73:9e:e6:75:29:ec:1d:14:7f:00:39:26:76:29:e1:
21:79:5d:63:49:3c:fd:10:28:67:2a:05:f0:2f:28:ed:70:cd:
ca:ae:2d:d1:23:57:87:16:44:8a:62:39:4d:a7:7e:d6:42:6d:
d3:39:46:4a:83:55:57:40:fa:bf:54:59:65:e8:57:0a:5c:59:
6f:3c:dc:4f:e3:a8:44:81:aa:e4:54:e4:78:b7:83:7b:fe:41:
69:10:74:d8:72:bb:0b:d3:1a:54:3d:c3:72:37:ec:34:70:bb:
2d:1c:ee:85:31:18:94:ea:64:89:c9:99:43:d1:7e:6e:f6:22:
49:79:fe:de:24:c6:b4:bd:f7:9e:9f:a2:96:c7:26:e7:cb:5f:
96:75:a9:f8:c7:ed:45:97:ba:09:48:64:52:45:1b:1c:0b:42:
9d:b1:91:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXd2RsZEpzuQdRvgLb1uxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3
YWE2YzMwHhcNMjYwODE1MDMwMTE4WhcNMjYwODE2MDMwMTE4WjAzMTEwLwYDVQQD
Eyg1MjgyNDJhMTExOGFiZDUyYmNlMTU2OWJhMzk1MzM5YTU1ZTg0MmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvD2hNDRFUTycS/j8xGU7Uj+7iJU
1fSjiLWfYCpSRJAgwG2A2k8qBrOQQrxwwZf0lmrxlaRB/AVymVxCrn48i99ql/UB
rqSlI4Bx0VFsIV+CzXtOMwT1vdOlN1n9t2YmPB4o5+R4PPaJL5qPsRnG7i7DnzN+
mr8JYvM5x6YGN8q7wtkhB/tjp+qa1ZIkhRQNpYnfLIfwBHg9bLGZhVl0AcuMXOji
1AGJSSJS6rW62aYhpE4LDWr4/bXbkP0xQzVKa47jnLQCorCyd0Fo4ogvnTMkCjyc
AaXKs2yr6OFwo7y7NDkeSQ1f8jTg7tAu2nywlqe9LBsdfLZrMTh4YflRewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKCQqERir1SvOFWm6OVM5pV6ELRMB8GA1UdIwQY
MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt
YTIwMWRmYWJkYWIxLzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx
LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAslkeNZg8
Du49+qAO8HL7FLP2d2KIqsvVpo3qRrlOphu2PLZ6CK2uWIWPNYbHUX48OEtrgMSl
blbBpnJQnOMNFG4qHT7esbTR8+8nv5Y9XtbcqvCBAlHhjfjJ6XE/c57mdSnsHRR/
ADkmdinhIXldY0k8/RAoZyoF8C8o7XDNyq4t0SNXhxZEimI5Tad+1kJt0zlGSoNV
V0D6v1RZZehXClxZbzzcT+OoRIGq5FTkeLeDe/5BaRB02HK7C9MaVD3DcjfsNHC7
LRzuhTEYlOpkicmZQ9F+bvYiSXn+3iTGtL33np+ilscm58tflnWp+MftRZe6CUhk
UkUbHAtCnbGR5w==
-----END CERTIFICATE-----
Generated at Sat Aug 15 07:48:37 2026 by rpki-client