Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: vnXNWGHo8zy/dy09gHIabIRJIju7vqN6njUJh2gE/vA=
Subject key identifier: FD:EC:93:7C:8D:C1:B3:7E:06:6C:C9:3C:1B:1F:A4:D8:61:2B:CB:E3
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019CE635E5C72BC7FB0E836377FCA226DF5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 118A
Signing time: Fri 13 Mar 2026 08:00:17 +0000
Manifest this update: Fri 13 Mar 2026 08:00:17 +0000
Manifest next update: Sat 14 Mar 2026 08:00:17 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: v/3XEDb1ndzxtc3kAd9KIbu942TbiDqR7Fras6mPTQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 08:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e6:35:e5:c7:2b:c7:fb:0e:83:63:77:fc:a2:26:df:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Mar 13 08:00:17 2026 GMT
Not After : Mar 14 08:00:17 2026 GMT
Subject: CN=fdec937c8dc1b37e066cc93c1b1fa4d8612bcbe3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ca:8b:b2:33:8a:23:17:5a:e6:cf:dd:23:b1:
a8:9f:a1:67:2c:d4:90:f3:09:83:7c:bd:9a:4e:2b:
a2:97:f2:63:07:94:42:0e:07:9d:75:d5:3b:34:40:
09:69:db:76:27:bf:f2:ee:18:7a:e4:5c:01:3a:0e:
d0:37:e6:94:39:f1:76:10:5d:34:8c:9e:2d:84:95:
ef:0c:e8:3f:22:ff:65:05:10:48:22:4d:e8:d3:b8:
cd:fe:97:92:64:2f:78:93:1a:95:b2:86:26:25:ed:
a0:0a:61:9a:09:58:79:c0:fe:37:c8:f7:e7:c9:a5:
dd:75:1c:ad:87:67:b9:7c:2e:3b:cf:65:e5:4b:86:
f6:10:34:4b:34:4a:a6:94:6b:66:c4:c4:6b:8d:f6:
ce:5a:5f:48:ea:3a:6f:cf:81:39:6b:e2:56:42:d6:
c2:a9:8b:f5:6c:09:a6:f3:04:a4:b8:be:cc:34:3f:
33:bd:36:d1:2d:ba:5f:f4:63:e5:1e:aa:cc:3b:78:
b5:d1:ab:fd:d5:55:02:1c:fd:ed:31:7d:b8:4b:e9:
ef:51:f0:d2:2a:c3:4d:5d:e2:5a:27:73:d3:87:ed:
18:79:e1:ab:6c:ed:90:08:da:36:11:a7:e1:74:71:
6c:a5:b7:23:43:55:4b:a0:23:3e:75:2a:c2:01:cf:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EC:93:7C:8D:C1:B3:7E:06:6C:C9:3C:1B:1F:A4:D8:61:2B:CB:E3
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:ab:7e:f1:58:53:2a:08:d7:db:92:e4:d5:70:14:6d:14:59:
95:35:8d:bd:bd:8f:5a:1e:9d:a7:4d:22:fe:97:b5:31:d5:36:
a2:49:29:7b:59:b3:a3:3a:17:d9:67:d0:ca:eb:1f:7e:74:52:
60:eb:ee:32:a9:cb:ce:c2:ba:f2:e9:92:a3:db:1a:dc:3e:fe:
35:90:ea:7b:25:8e:4b:e0:66:7c:1c:71:43:f5:b0:d0:82:39:
45:87:3e:a4:d1:90:68:3f:6a:ed:d8:18:c4:32:ed:5c:9a:b6:
db:a9:23:34:fa:38:39:eb:5a:2a:2f:ed:ce:46:56:b3:37:cd:
cc:2c:fd:82:55:f2:db:62:5f:83:00:ca:ad:68:fc:f7:a9:54:
c1:b0:c9:93:14:ce:fb:52:95:45:cc:e4:f2:a8:91:ea:43:58:
41:68:08:8e:2d:66:7e:bf:5b:36:12:4a:5a:df:82:bb:b4:0f:
4f:1b:eb:e4:34:bf:6f:04:11:d6:16:3c:7c:c6:46:26:d9:6a:
8b:75:b1:82:b7:62:de:b6:0e:eb:17:9e:96:40:ed:12:05:b9:
47:92:5a:26:68:81:05:9d:8b:aa:14:bd:85:5e:f1:f5:5a:e6:
78:50:7a:59:e0:38:fc:24:6b:17:07:d5:7a:bf:e1:09:94:22:
09:50:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 15:15:27 2026 by rpki-client