Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: DwI2cllv1X7qeTjUtvPqWDH7vNyCWOjpkfyEMh5OFVA=
Subject key identifier: 97:AB:73:DC:EA:EB:7E:42:10:69:AB:CB:82:48:F0:62:82:4B:58:15
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 019D38D3ACD5660A3C2A3C45B454BA804575
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 1113
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: GYTArtIgvINKT637yicE0RzC_gA.roa (hash: Lep0lB2c1nnq/plQOSLHCa5SiVLmUmJL/Hit/FXoSs8=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: tgns/ZJuxXVplGgJk46rx58c2SX/bF90v/qudHUGnRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ac:d5:66:0a:3c:2a:3c:45:b4:54:ba:80:45:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=97ab73dceaeb7e421069abcb8248f062824b5815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:20:2b:8d:f1:73:0e:b7:2d:81:eb:d2:79:e4:
ed:0c:33:40:d2:48:24:a4:54:d9:33:48:c3:4b:ed:
ae:33:cd:9e:1a:48:ce:6b:43:50:3c:a5:ea:78:dc:
54:ab:89:2a:77:f9:cd:9c:a3:7a:bf:03:a5:bb:b4:
e0:6c:5f:95:ce:e9:69:01:bc:88:0b:74:25:37:5f:
e1:61:c0:d8:ec:ba:96:e2:bc:67:2c:26:47:33:cb:
20:a2:db:3e:36:02:0c:84:ee:c1:77:19:02:ec:55:
b3:3a:c1:c9:29:ba:e8:63:3f:4b:ce:28:4d:c6:18:
48:43:43:fa:b8:41:e4:25:42:3c:33:b4:6c:7d:d6:
fb:fd:e7:bc:d2:5f:81:ec:d3:5e:de:dc:0f:1a:99:
c5:18:51:21:a8:00:7b:67:41:d7:f5:85:bf:39:b5:
33:db:9a:46:58:12:fc:2f:a1:17:9d:5a:89:de:72:
4e:a7:ad:65:36:8d:da:d7:b5:4b:bc:f0:1f:03:af:
03:f0:c8:a0:31:86:b4:51:e8:1d:b8:99:eb:48:d7:
1a:d1:8f:69:70:90:c8:a1:0c:d5:09:e0:82:91:97:
05:e0:1c:6d:0b:b2:3f:5f:0b:ae:76:1c:8a:0a:d5:
89:3b:2c:6a:c7:fa:5d:ec:79:0a:14:b8:13:99:99:
04:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:AB:73:DC:EA:EB:7E:42:10:69:AB:CB:82:48:F0:62:82:4B:58:15
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2d:8d:5b:3a:85:de:2c:1f:aa:c6:46:25:b3:17:3e:05:8e:
fd:49:6e:2f:7a:c5:72:b4:9d:88:1d:d4:b2:41:3d:25:0b:4e:
0d:c0:5b:f3:cf:27:98:e0:c6:8b:0f:f0:b0:6d:ee:bb:64:df:
5a:12:af:cd:b2:ca:d3:30:6a:42:6b:20:da:32:df:34:20:1e:
83:cf:d3:26:43:7c:2a:04:bf:cf:cc:03:1c:d4:77:61:fc:80:
9f:59:d9:44:40:82:b2:7e:66:48:ae:8a:c6:eb:7d:ba:8b:e1:
e8:09:c1:27:06:33:18:7d:bf:26:af:84:c5:cc:57:d0:1e:9d:
72:6c:c2:00:27:22:80:be:e4:b9:fa:ab:23:e0:1c:9b:6a:ab:
c0:bf:26:55:8d:35:55:db:9e:f8:f5:e7:45:07:58:26:28:04:
b0:41:07:06:6c:97:5f:10:44:83:52:af:49:9b:79:c1:d5:12:
18:ac:d5:3e:f9:7b:23:4d:14:dc:2c:c3:2c:eb:9c:8d:09:f8:
ae:35:13:47:a3:a6:96:92:e8:31:e2:f8:01:44:d7:da:44:4e:
58:a6:29:44:df:9b:be:11:82:21:88:4a:8c:95:07:3b:ac:2e:
da:c8:cc:d4:84:51:3b:18:6c:4c:ac:3d:66:46:3b:01:ee:75:
6c:80:ff:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:48:57 2026 by rpki-client