Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File: Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier: rsfynDH44LJVhzx9Sq03BlZQVUzFfqZhPYQJ9+TlJts=
Subject key identifier: A9:29:1A:0F:24:45:B9:CF:30:78:78:C6:19:53:E3:66:8B:3E:D3:1E
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer: /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial: 01A070CD131C83AFD210A50C95CADEA0849C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number: 1365
Signing time: Sat 05 Sep 2026 09:01:22 +0000
Manifest this update: Sat 05 Sep 2026 09:01:22 +0000
Manifest next update: Sun 06 Sep 2026 09:01:22 +0000
Files and hashes: 1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: SBnAGmcqTUR6jnPxPay+fzdNM2+s0W3vX2iPuLNMSkI=)
2: bN1bEc4HqYXvavKXD6ssUfBHAew.roa (hash: YH+C7Jl70iieB5lOKkDQudIPzyOFnd5wp6oB5jVYQHo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:70:cd:13:1c:83:af:d2:10:a5:0c:95:ca:de:a0:84:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Validity
Not Before: Sep 5 09:01:22 2026 GMT
Not After : Sep 6 09:01:22 2026 GMT
Subject: CN=a9291a0f2445b9cf307878c61953e3668b3ed31e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:37:93:60:fa:d7:c6:93:f4:4e:62:ea:27:3d:
d6:61:f1:80:fb:7b:ea:b0:81:f7:e8:a9:be:4b:8c:
4f:e8:15:05:dc:78:4b:f0:5d:90:30:9d:d3:8e:84:
2b:7b:24:fc:d1:80:51:c1:dc:c0:40:75:76:c9:68:
d0:07:5a:51:0d:db:2b:96:4e:f3:32:4b:2f:0b:16:
99:b6:c0:b7:20:14:59:79:f1:47:41:06:c0:5c:22:
3a:b4:56:7f:d9:fe:54:f0:2f:c1:28:11:75:9e:0a:
90:5b:64:0f:c7:93:2a:41:5a:ce:3f:09:f9:1d:75:
68:8f:5d:5c:72:08:49:30:53:c2:3a:b5:08:88:a7:
ff:b1:43:4e:31:a2:2c:5e:34:d0:12:79:13:e9:8b:
3c:1d:07:ab:83:3a:d2:bf:0f:ca:71:f1:10:5d:52:
1a:dc:91:1d:29:be:07:fd:7e:24:c1:69:a3:47:c4:
a2:0e:03:9c:36:c5:55:b4:8e:15:b4:a3:25:ff:8c:
da:ec:68:6e:85:79:aa:40:09:75:ab:47:b6:62:31:
32:f9:59:6f:de:75:07:a0:e6:6c:ea:1f:8d:e7:f4:
e9:84:0f:3b:89:00:aa:a9:6e:af:b7:be:1f:b0:88:
40:09:7b:b8:a1:c6:dd:0e:10:ff:7a:3b:da:b5:68:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:29:1A:0F:24:45:B9:CF:30:78:78:C6:19:53:E3:66:8B:3E:D3:1E
X509v3 Authority Key Identifier:
keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:d5:00:57:1c:f1:5d:c8:4a:6e:39:e9:53:a3:24:f0:b8:a5:
d1:6c:fc:29:bb:b9:8c:39:02:2d:ac:80:90:22:22:40:94:17:
84:9d:29:08:17:da:ac:c7:9b:24:9c:b0:64:37:3f:31:0b:0e:
32:19:d2:3c:5b:be:76:32:0b:26:47:74:be:6d:34:0b:44:fe:
10:cb:d2:4c:6a:92:66:a9:72:a2:53:e0:67:d0:5e:87:ad:b6:
f2:e7:85:71:ab:88:cd:3a:31:c4:11:ee:b3:fe:dd:68:d6:32:
ee:a2:ff:12:a5:0b:e8:d8:3e:78:0a:8d:30:3d:df:31:20:b9:
93:60:23:68:66:52:98:f0:ec:16:36:5a:ff:94:44:bc:8f:95:
d3:2c:3d:c9:ab:f6:36:ce:bd:d4:59:67:2e:be:79:06:5b:5c:
8a:54:2d:ba:b5:4e:9f:b7:9e:0a:7e:d8:0c:fc:0d:70:1c:6a:
73:83:f3:b2:4e:a9:e3:b3:04:a8:72:2e:fc:7e:4b:02:ef:c5:
eb:83:6d:70:f0:d1:c8:9c:ca:55:4a:fb:88:79:7d:6d:9a:0f:
34:1c:fa:4c:9f:de:ad:43:4d:56:98:e3:d0:96:f5:e9:a3:b0:
c8:ca:fb:e5:94:f3:1b:28:67:ff:0a:a3:e4:71:4d:0f:92:85:
00:1c:0a:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:53:50 2026 by rpki-client