Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: BgYH2bjTQDGGZOoHy8jVDjxgpRpCD76BQOb8/tuGupg=
Subject key identifier: 17:B3:15:CD:7F:22:0D:35:8C:C9:DD:27:DC:57:15:45:30:FF:3D:DC
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019EB98FCE1071865F22C7C262507A4697E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 127C
Signing time: Fri 12 Jun 2026 02:01:09 +0000
Manifest this update: Fri 12 Jun 2026 02:01:09 +0000
Manifest next update: Sat 13 Jun 2026 02:01:09 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: ntuggaw0HgnEh71NG/EMH3nxxppCVWfLZRx5vyAW6+4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:8f:ce:10:71:86:5f:22:c7:c2:62:50:7a:46:97:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jun 12 02:01:09 2026 GMT
Not After : Jun 13 02:01:09 2026 GMT
Subject: CN=17b315cd7f220d358cc9dd27dc57154530ff3ddc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:16:b3:0c:91:b7:bd:48:3a:41:b8:e2:14:99:
db:58:92:d7:61:dc:72:f3:66:d1:26:1d:b0:7f:86:
0c:8e:60:43:21:a5:fa:8b:a2:01:14:a6:be:1c:48:
fa:6c:38:95:f4:16:7a:04:f8:c2:c4:5f:53:d9:90:
83:9a:fa:8a:89:05:d9:87:77:ab:25:7e:51:26:e2:
d4:5b:3c:37:7c:84:e6:67:f2:9b:5c:6c:b8:e2:63:
c8:00:13:3d:27:56:f4:50:df:ff:3b:34:a6:2b:09:
30:38:81:4e:12:9f:8f:73:6e:9b:b0:13:16:e4:22:
f1:b5:6e:e4:3a:39:07:b4:5e:28:18:75:22:81:f7:
de:fa:ac:1f:71:36:2f:ca:4c:87:71:c7:82:de:ae:
d4:77:43:dc:b7:72:79:e9:37:13:3e:af:94:a2:2a:
39:c8:3c:95:a6:cc:a7:3a:36:36:6b:37:ea:d3:3f:
6c:f0:d2:78:40:e1:14:6c:06:de:ee:25:e1:10:b9:
ee:06:fd:65:ac:c0:e2:d3:f8:99:ca:3a:8c:17:d2:
06:45:97:f5:28:e6:15:68:c1:88:ac:2e:80:21:eb:
07:fa:a4:c3:b7:94:ab:ff:ea:e2:71:14:7a:0d:fb:
fd:34:09:8f:52:a4:60:05:c8:e7:b9:28:ef:7b:44:
6a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B3:15:CD:7F:22:0D:35:8C:C9:DD:27:DC:57:15:45:30:FF:3D:DC
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:ab:1b:75:1f:8d:20:18:ff:96:bf:e2:7c:66:92:d4:19:e5:
03:22:93:8c:06:19:ef:a2:74:7d:f3:88:28:4f:80:4d:33:f8:
62:8d:2c:dc:85:9e:7b:78:0d:48:3f:2e:6d:8a:09:52:d5:46:
ff:49:ba:ed:eb:e6:53:5c:30:31:05:bd:49:9e:e6:90:b2:0e:
fa:6f:fa:46:c3:b4:75:2a:2b:11:2b:4d:6a:06:fc:45:b6:1d:
a8:c8:d4:f3:81:ed:69:1c:a1:67:9e:e1:26:54:52:4f:e5:1b:
d7:5a:a4:3b:61:80:ec:3d:94:5f:f2:5a:97:24:4f:39:c4:df:
72:de:b5:bd:9a:39:91:33:b0:c8:cc:c7:df:b1:a3:90:33:4e:
2f:cf:e9:59:24:42:cd:a2:ea:71:2c:ba:52:29:61:03:dc:a8:
ea:59:ad:cd:77:5f:9d:27:71:34:45:84:72:92:e0:3b:ba:91:
53:84:46:0c:88:de:29:3a:aa:a6:7c:22:41:7e:ab:da:7f:d5:
58:b6:05:51:64:d6:cc:7e:dd:6d:b5:98:e1:40:5b:a1:02:b1:
73:af:6d:20:93:cd:34:2f:bb:53:e5:d4:ce:3f:87:51:30:e9:
ec:f7:2b:f6:c3:7e:45:75:4c:9d:77:8c:20:cc:fc:c0:21:29:
c7:f2:94:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:26:53 2026 by rpki-client