Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: BTOX3kfJqAYyOZQTUj3gFjczkAnsW3cMYuQYF5lMvok=
Subject key identifier: 25:27:69:72:0B:29:CD:61:61:30:EC:28:2C:AF:B0:2E:56:E5:3B:4D
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019FA14E567C2BD607DC804CB6EABC507B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 12F4
Signing time: Mon 27 Jul 2026 02:01:33 +0000
Manifest this update: Mon 27 Jul 2026 02:01:33 +0000
Manifest next update: Tue 28 Jul 2026 02:01:33 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: WhDd9c+BDMMZGAeycRN8Bg3NHblaja52336D68xWCRg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 02:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:4e:56:7c:2b:d6:07:dc:80:4c:b6:ea:bc:50:7b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jul 27 02:01:33 2026 GMT
Not After : Jul 28 02:01:33 2026 GMT
Subject: CN=252769720b29cd616130ec282cafb02e56e53b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:cd:94:fc:1c:4c:ed:19:d5:0f:b5:8f:9c:32:
88:3a:d2:64:ba:a6:ef:f3:bc:52:b2:3f:67:50:fe:
d2:75:bc:f5:cf:2d:8f:da:87:7c:7d:74:fc:37:b1:
65:59:cf:a5:01:66:37:25:24:1e:89:56:de:cb:28:
2c:d6:da:2b:38:ba:9c:0d:1f:cc:3f:0d:f8:19:c0:
09:46:c9:89:1d:91:1f:1c:de:2f:62:00:15:0c:a1:
cd:31:29:81:65:b4:92:2e:3d:c9:ac:d0:4b:8d:54:
d2:30:ad:8a:00:84:f2:42:fe:10:ba:6d:94:9d:a5:
fc:f8:f2:de:d9:50:78:f7:73:ed:59:d8:a8:0b:2e:
a6:ef:95:13:5c:5b:34:65:ae:59:45:a3:ed:83:c9:
79:cb:3e:ad:23:2e:f5:3b:18:c1:69:57:ed:ea:e1:
15:3a:1e:a2:6c:60:8a:22:ed:7f:4e:58:c1:44:26:
26:9a:fb:f8:02:76:80:40:e6:be:bd:6b:04:2d:a5:
f4:66:b8:fb:1e:61:87:b5:a0:41:68:18:f6:1a:01:
9d:80:eb:cc:d5:ab:55:f1:27:4c:f9:7d:74:a4:80:
16:ae:7b:ce:f5:9d:03:f9:db:ef:41:af:b1:f5:a4:
18:cb:2c:8b:ac:a7:88:81:23:6d:56:60:55:bf:ef:
c8:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:27:69:72:0B:29:CD:61:61:30:EC:28:2C:AF:B0:2E:56:E5:3B:4D
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:b6:e7:bd:ac:51:69:f9:8b:a2:5e:31:93:9f:2c:8c:a8:49:
0c:51:c5:61:07:da:49:9c:a3:53:72:1d:a3:69:da:ec:96:aa:
cc:da:5d:ef:b6:d3:be:6d:06:fe:e7:29:a2:c4:96:25:da:d1:
6a:60:12:53:b1:8a:f8:da:7c:5b:9b:bd:56:6c:58:64:9b:8a:
a1:d9:f1:d4:38:1e:1b:88:6d:54:b6:4d:bf:2d:40:52:81:f6:
13:0a:2f:2c:cf:4f:31:0e:80:0e:41:5b:63:32:e6:ea:b6:db:
d9:58:b8:4c:a5:3c:f0:0d:48:cb:7f:c3:aa:eb:35:32:b9:4f:
d9:68:c3:b8:90:a5:6e:c2:90:c9:89:ee:49:59:72:9f:31:57:
be:f2:4a:f7:b4:b2:50:aa:ce:29:89:40:92:5f:66:37:23:f5:
87:d6:6b:72:3c:25:04:54:16:04:2c:62:f0:87:05:48:b2:85:
c0:e5:03:bc:dc:88:ed:3f:50:22:17:29:b2:ac:fb:f4:d0:54:
dc:1b:0f:cd:66:e7:2d:2b:91:b6:a1:dd:18:db:b8:1d:12:8b:
f7:80:a7:d1:60:21:d1:24:ae:78:04:41:1e:bc:98:82:a2:92:
42:89:8c:43:48:f7:79:92:3b:c5:d6:95:f5:cc:ed:60:74:16:
6a:75:94:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 11:38:01 2026 by rpki-client