Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: g/w653ctJDn92P0WNCvapn2ISwfMO9gkK9jKG2IyIyY=
Subject key identifier: 2D:A9:A6:A2:50:FB:68:B5:E8:06:82:0D:8C:27:9F:D7:57:F8:DC:D0
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 01A08CE91D3A35CA32F4D4B26050DC11731D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 136E
Signing time: Thu 10 Sep 2026 20:01:22 +0000
Manifest this update: Thu 10 Sep 2026 20:01:22 +0000
Manifest next update: Fri 11 Sep 2026 20:01:22 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: 4cha7E/I9dnydG8xKlbks3mqKQ7s0R3EV7mvcZ+4Kv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 20:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:e9:1d:3a:35:ca:32:f4:d4:b2:60:50:dc:11:73:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Sep 10 20:01:22 2026 GMT
Not After : Sep 11 20:01:22 2026 GMT
Subject: CN=2da9a6a250fb68b5e806820d8c279fd757f8dcd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:24:3d:85:79:8b:f1:b4:0a:a6:b5:36:39:c5:
4a:c0:a7:ba:c1:40:6c:9b:4c:24:72:23:3f:4b:bb:
06:a3:e6:8d:1a:79:8b:93:9a:5a:a2:38:5f:95:68:
5f:66:eb:c2:5b:98:bc:28:a2:a8:d3:df:55:d5:8b:
36:13:ee:7e:25:b8:d8:f2:d5:c3:dd:7b:a1:8c:8e:
b4:61:57:42:6f:38:24:a7:cd:bf:8f:e6:90:b0:fd:
f9:fe:f7:2b:01:a6:6e:d2:66:33:cc:27:77:3e:9f:
17:57:a5:01:81:28:29:2a:20:00:4a:54:ec:d4:b7:
d0:69:f7:1c:98:5d:7b:ad:c1:6b:1a:20:0d:8b:27:
7a:70:59:82:76:8f:18:d7:e3:d4:ab:ac:b2:2f:4f:
ee:58:8d:3e:65:5d:dd:87:8d:fa:37:14:a4:c4:b6:
f1:7f:e7:ef:fb:70:a1:3e:37:9a:87:95:a2:67:51:
7d:25:c5:97:af:19:92:e8:95:6f:77:6f:bc:fb:8c:
1d:4d:32:60:cd:3c:3e:0a:2c:cf:c8:fa:36:32:70:
16:0f:1d:f2:18:45:dc:5b:3f:ed:c0:71:09:fb:d0:
92:d7:7d:d0:08:e4:f7:01:c5:3d:b2:21:f2:90:ef:
a8:d1:a1:8c:8f:cf:4a:37:33:de:bc:34:a9:b7:f0:
9c:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:A9:A6:A2:50:FB:68:B5:E8:06:82:0D:8C:27:9F:D7:57:F8:DC:D0
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:cd:43:0d:28:a8:fc:d5:e0:07:ee:62:1b:da:d7:b4:dd:c9:
ca:88:f3:57:d9:bd:6a:53:bd:8e:b6:fe:ba:ce:44:84:f5:c1:
6b:ad:2b:ee:f4:f9:37:3a:45:be:ff:04:1b:07:5e:79:d4:1c:
c5:af:db:ed:7b:37:ec:82:02:5c:df:08:c4:42:2b:99:fc:71:
8c:28:fb:c3:c9:4a:fd:53:64:d6:83:e6:92:15:3e:39:ee:d1:
eb:c1:c1:d4:49:ba:1e:af:3f:36:bc:e9:1e:45:e2:f5:d6:b4:
72:43:e9:f5:fa:3e:07:81:35:a2:90:ae:9a:82:4b:40:3b:30:
20:ec:5a:3f:fb:8a:47:fa:01:3e:3c:c5:89:f8:bb:ea:b1:1a:
b4:94:3b:40:80:26:5d:77:e9:92:50:92:c4:f2:1a:e2:90:53:
66:a3:85:d3:a4:0f:c0:89:76:87:99:4c:1d:a0:1b:3f:2c:3c:
a9:31:2b:f6:68:7e:3b:ca:ae:29:af:9c:cf:6c:46:bb:45:69:
8a:ec:49:9a:7e:f8:35:b3:01:be:82:4b:d0:93:d5:06:2a:bb:
4f:70:2e:e9:78:8e:8d:a3:f0:fc:39:81:f4:85:14:e0:83:01:
8c:32:9a:f7:1a:b1:e1:b2:27:ca:ac:69:33:a5:3f:77:19:ad:
5a:49:c8:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:47:05 2026 by rpki-client