Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
File: ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft (raw, json)
Hash identifier: kUmFXZBv1GetH0xAsgp4hsBW8Y0bvtTeWYUoWhqqxMk=
Subject key identifier: 24:69:1B:25:E3:A8:45:73:F5:57:0F:99:52:12:38:87:E5:2C:C8:2C
Authority key identifier: B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
Certificate issuer: /CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Certificate serial: 01A161C4CAAF9DC6520D5A2485D182B1BCA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
Manifest number: 0149
Signing time: Thu 22 Oct 2026 04:00:49 +0000
Manifest this update: Thu 22 Oct 2026 04:00:49 +0000
Manifest next update: Fri 23 Oct 2026 04:00:49 +0000
Files and hashes: 1: Mi4FWu8IQL8LPIbJ4cZ51i4JsBg.asa (hash: 3s8qtOc3m27sIXzhaH51xhmyXBewTJuy9sQ/zV74ORM=)
2: ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl (hash: MaIm0lABQW7EySK5S8JQOuAq9VSTd5QI7YsQerNcEsg=)
3: zBMcLd77LbRwu-15HrKqi2yyi1Q.roa (hash: iHUOLbWgSZf1fiwd7lTBMIB/vmb/88ZnKoALd8JP6QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:61:c4:ca:af:9d:c6:52:0d:5a:24:85:d1:82:b1:bc:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Validity
Not Before: Oct 22 04:00:49 2026 GMT
Not After : Oct 23 04:00:49 2026 GMT
Subject: CN=24691b25e3a84573f5570f9952123887e52cc82c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:9e:91:60:fa:22:13:9d:4b:c3:f1:d1:45:
76:05:28:08:df:88:f5:13:8d:4e:94:41:a3:6f:3f:
1e:f9:73:b5:ea:77:53:a2:4d:3e:75:33:e5:22:ff:
1b:7d:9b:d5:8a:0e:1b:83:f9:2c:63:61:d1:ba:00:
d7:41:ea:4d:bf:1d:dd:6e:70:79:6b:60:93:47:73:
92:10:79:a4:5d:6c:37:1e:c3:54:90:31:44:04:9f:
1b:ea:5c:14:ae:15:42:9e:33:16:13:b2:b6:9f:fc:
76:cd:21:9f:56:d2:90:1c:f4:a3:89:01:1f:6d:f1:
20:de:74:e7:9f:70:5f:4b:a2:fa:21:ba:17:5d:82:
df:d8:c0:2e:b6:7d:76:0d:63:1d:57:da:f1:b5:56:
07:a5:aa:44:df:66:9d:7b:d7:0e:a7:88:cd:77:ba:
8f:e2:97:d5:a2:0e:a9:3d:92:c8:29:4a:cd:3c:f5:
71:dc:2b:1f:f3:ba:74:fd:f6:33:c9:26:53:bc:b8:
f7:be:fe:19:9b:b1:26:2c:61:34:15:95:47:07:d2:
64:89:b6:4c:34:7e:5d:81:cf:2f:16:93:18:23:b7:
be:6e:41:2e:b2:0d:04:38:73:99:d9:ff:7a:47:d8:
7c:87:46:8e:57:e2:7e:fd:30:2a:5a:28:85:3e:e4:
92:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:69:1B:25:E3:A8:45:73:F5:57:0F:99:52:12:38:87:E5:2C:C8:2C
X509v3 Authority Key Identifier:
keyid:B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:32:c2:39:fa:2e:50:24:ed:3c:71:e3:ea:dc:88:53:05:50:
29:3a:58:c8:9d:d5:3e:ac:6f:97:18:92:5b:fc:d8:9d:2a:6b:
9a:1f:5f:8a:be:40:00:88:db:0e:60:9a:14:84:83:f0:4b:99:
92:fa:b6:ea:0b:cc:8a:38:7a:ea:60:e7:60:3f:12:6b:63:7d:
85:31:8c:70:e6:96:d5:7a:21:ed:55:b8:95:cd:6e:3b:0c:a5:
51:18:81:e5:dd:82:96:5a:7f:07:c5:44:fc:9a:ee:42:e9:e3:
d5:94:48:be:d0:a9:8c:95:94:63:27:09:a4:43:b6:fa:5e:58:
73:a8:91:8c:ef:9e:94:06:25:fa:49:17:3b:1e:11:e0:aa:2d:
7f:e7:40:f0:35:6c:11:12:7f:03:a2:45:71:6c:a7:87:30:db:
72:6a:56:54:0b:6f:2b:36:21:01:e8:8f:42:c7:7d:74:21:54:
19:05:14:7f:bd:bf:cc:c4:3a:4f:e5:c8:89:90:d4:5a:55:c6:
34:ba:32:e7:41:5c:d3:5c:2a:b4:6a:31:ed:43:cb:55:73:57:
66:9c:7c:cd:af:e3:8b:e4:34:3f:ac:95:36:02:9c:ba:20:5a:
51:a2:01:c7:59:47:9e:0c:0b:29:fa:7e:1f:01:36:de:72:54:
c5:2a:df:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 09:55:33 2026 by rpki-client