Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: M0+6dliZZj5IuyJm9OaIqQZgJSnP96Ab+DrWjXAcqRY=
Subject key identifier: E4:6A:7E:4A:5E:F7:73:43:62:38:53:8E:9A:AF:01:E8:A6:A1:E1:47
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 01A002142230AFCFCD4C6507BA1647087EF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 1A0C
Signing time: Fri 14 Aug 2026 21:01:08 +0000
Manifest this update: Fri 14 Aug 2026 21:01:08 +0000
Manifest next update: Sat 15 Aug 2026 21:01:08 +0000
Files and hashes: 1: HCkTO8KxnQW5z_1GFAOAHjIGab8.roa (hash: XoAXikNwV8c/+4uyw3oTAAVmB0UR0KOtZ+V3aJEPK8c=)
2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: mvJ0wVIwIA1Rj2LiSuagLRlQWHzvpQSHRrOAVbMRb2g=)
3: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 21:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:14:22:30:af:cf:cd:4c:65:07:ba:16:47:08:7e:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Aug 14 21:01:08 2026 GMT
Not After : Aug 15 21:01:08 2026 GMT
Subject: CN=e46a7e4a5ef773436238538e9aaf01e8a6a1e147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2a:3c:32:99:9f:23:b6:8a:7f:57:95:51:93:
d3:6b:ef:d4:7e:b5:b7:11:ab:92:c5:26:a6:d0:8c:
8a:2e:1f:f3:ef:43:10:cd:9b:c4:be:52:37:0c:03:
4c:93:8d:58:2f:73:aa:58:92:5f:ae:c0:02:df:7a:
39:23:56:99:99:fa:0b:b8:c6:cf:ff:dd:64:d7:58:
7e:da:11:52:e9:3b:32:1b:5b:a2:85:ad:6e:3f:8a:
97:a1:2a:0a:14:cf:7d:d9:2b:93:90:58:ba:62:ce:
75:67:b5:df:16:e8:be:51:14:e4:34:ad:8a:ec:b9:
27:36:2e:61:d0:5a:88:62:4f:f4:eb:a7:08:7d:37:
da:56:0c:3a:01:47:2f:48:43:58:34:50:bf:bd:e8:
bf:47:3d:2e:6c:e6:da:8d:a0:e6:62:d3:8a:e7:21:
67:91:23:ae:ce:5d:e7:0e:fe:8a:10:c7:86:47:58:
57:ef:42:58:73:84:59:e6:ce:9e:16:7c:12:8e:e0:
b1:3e:31:48:8c:e7:82:ab:52:53:2a:a3:bb:ed:a8:
06:c0:b7:be:cf:c7:cb:3a:af:b9:eb:d7:77:82:70:
90:a8:63:de:cd:95:a9:a5:a2:57:d0:86:cc:53:c1:
b9:33:de:88:d0:70:6c:eb:58:49:47:2f:ec:ee:c3:
8e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:6A:7E:4A:5E:F7:73:43:62:38:53:8E:9A:AF:01:E8:A6:A1:E1:47
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:a3:9b:b2:99:5a:d7:fb:c6:75:fd:e0:73:e6:e6:93:c1:85:
f1:84:41:17:e3:5e:65:36:43:2b:3f:fe:1a:bd:80:eb:84:4f:
d9:ea:22:a6:33:f6:41:ec:3c:bf:a2:4e:5d:93:cb:64:ed:ef:
e5:bd:aa:df:b7:1b:83:dc:0f:5b:25:4b:ec:b2:79:7a:98:7e:
4f:f1:0a:95:93:9e:64:71:15:bf:b0:b1:50:b8:a3:84:84:3f:
60:e2:23:e5:0a:4a:d6:5e:fb:a2:d2:27:e8:b3:c2:ff:be:16:
18:e9:b2:2c:c2:d9:1f:d3:98:86:90:69:24:8d:c6:01:3e:c6:
eb:e2:40:82:6e:3e:68:e7:40:aa:ad:3c:00:4f:9f:65:b1:78:
8d:fc:99:1d:82:68:21:3b:a0:b0:97:f4:e9:c4:8a:b4:ed:66:
a9:63:32:8e:2f:ef:80:a6:76:23:ae:72:14:c8:51:18:b1:4e:
c7:3c:e2:1b:69:95:d2:df:fd:28:8a:a7:35:3a:13:43:d6:7a:
84:59:18:55:48:04:e5:ba:45:ec:a0:80:d1:a8:e8:81:22:d5:
ba:f1:0c:ca:5c:51:6f:44:ad:ab:aa:20:52:d2:52:9d:31:f9:
19:e4:dd:0e:58:b1:c0:13:43:39:59:29:0f:c7:25:a0:e8:d9:
62:94:59:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:32:03 2026 by rpki-client