Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
File: ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft (raw, json)
Hash identifier: S9bkKgxLt05rkyv5sxuMTsLaISP3lW4svhdGipV80vo=
Subject key identifier: DC:8D:47:D0:B5:74:EE:2C:EB:8D:12:A5:DA:AC:55:45:90:AC:9F:4A
Authority key identifier: B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
Certificate issuer: /CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Certificate serial: 01A0691359A5C705EFDB2DA8455FBECAE706
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
Manifest number: C5
Signing time: Thu 03 Sep 2026 21:01:10 +0000
Manifest this update: Thu 03 Sep 2026 21:01:10 +0000
Manifest next update: Fri 04 Sep 2026 21:01:10 +0000
Files and hashes: 1: ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl (hash: 4NL+r51lwcb6ocI9QbEpDKTAUQUO8OJDfKIyIWuBYa0=)
2: zBMcLd77LbRwu-15HrKqi2yyi1Q.roa (hash: iHUOLbWgSZf1fiwd7lTBMIB/vmb/88ZnKoALd8JP6QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 21:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:69:13:59:a5:c7:05:ef:db:2d:a8:45:5f:be:ca:e7:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Validity
Not Before: Sep 3 21:01:10 2026 GMT
Not After : Sep 4 21:01:10 2026 GMT
Subject: CN=dc8d47d0b574ee2ceb8d12a5daac554590ac9f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ae:30:32:5a:51:38:b1:67:a0:d0:c2:1b:1d:
5d:67:f8:cd:f6:b3:12:0b:08:a6:c3:9b:f9:16:75:
0e:68:21:b7:ed:58:91:e6:08:8d:10:6e:c9:2e:a5:
c7:0c:b1:d0:cc:9b:3c:7c:1a:a5:f4:16:ea:42:1d:
01:20:9a:80:03:99:10:8d:4e:10:4a:cc:e7:53:57:
99:eb:29:09:05:4a:87:79:71:30:af:db:3b:bf:f2:
4f:8c:79:46:4d:59:bf:c0:44:aa:23:43:10:71:4a:
b4:74:db:89:08:18:bf:e7:05:c2:05:11:4c:bf:b5:
05:db:ef:c4:27:7e:90:70:f2:3b:af:32:5a:9a:dd:
3d:e4:1e:90:c5:86:14:c2:b4:46:29:f5:ea:cd:25:
69:6e:b7:6d:60:35:8f:25:06:2c:ac:37:b9:e0:cf:
7c:4d:76:90:a4:49:25:5d:83:f4:47:38:f4:88:ef:
bb:2c:39:c3:ad:1a:32:94:45:44:36:fc:c1:09:54:
1f:0b:b3:32:86:28:a6:90:ac:0b:4d:52:5d:b7:41:
0a:07:8e:05:e8:34:af:70:90:95:8d:23:bd:fe:3f:
3f:2a:e6:ad:59:37:f4:05:d7:09:5a:b7:a6:1e:39:
d6:86:cf:fc:34:79:29:90:11:0c:c4:14:70:83:fb:
95:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:8D:47:D0:B5:74:EE:2C:EB:8D:12:A5:DA:AC:55:45:90:AC:9F:4A
X509v3 Authority Key Identifier:
keyid:B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:57:cf:94:fe:df:33:c3:b4:5e:62:5a:07:9b:30:18:a3:e5:
ad:ed:e7:6f:35:fc:e2:e5:57:1b:2d:08:39:00:c4:c5:ca:fb:
26:12:c1:70:29:1f:34:69:09:f3:d4:96:55:06:a9:35:6f:0e:
a0:be:97:3d:7e:43:8d:49:91:e3:d1:14:4a:4a:84:ad:7c:50:
0c:64:f3:6d:a3:fa:74:a3:bc:28:21:a2:9e:2d:67:b1:af:c3:
57:d9:f7:75:21:df:60:a3:ab:9a:73:13:c5:67:31:0d:b2:4f:
2c:85:8f:30:47:1c:b5:5f:f1:76:b1:06:8a:83:40:a9:11:7e:
da:5c:a7:fa:fa:eb:72:3d:e1:25:ed:71:d0:c4:b8:70:22:f3:
b2:78:61:78:4c:48:25:70:17:db:3d:63:b5:c4:dc:ee:4a:6b:
ea:32:de:1e:9a:36:47:0f:b2:8e:c1:a1:76:34:95:e3:9e:08:
8e:ae:e7:3b:46:a4:07:50:0b:b8:10:6e:cf:94:5b:4d:68:7e:
bc:b9:af:5d:71:36:b3:1c:86:31:cf:f0:aa:ed:e7:f9:a8:56:
37:d9:79:dc:e5:ab:22:90:eb:63:50:f7:18:06:ef:2a:db:45:
e7:75:3e:6c:20:c3:70:40:67:af:4a:02:7c:8b:22:aa:6c:e5:
3c:f0:f1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 03:41:54 2026 by rpki-client