Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: yERmC17SxmdXD1hrrPK9UbQp6JV/WoNO2uHtVOnGhjs=
Subject key identifier: A5:CD:1B:49:A0:28:96:4B:62:22:61:B3:64:01:F4:AF:07:46:AC:BE
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019DCFE2FA202FF1688878EEB80A594D3CAE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 1203
Signing time: Mon 27 Apr 2026 17:00:51 +0000
Manifest this update: Mon 27 Apr 2026 17:00:51 +0000
Manifest next update: Tue 28 Apr 2026 17:00:51 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: Gp24PNEzQEDsRLevjz/t1V/BqJPBPN92YiRppSK2Bd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e2:fa:20:2f:f1:68:88:78:ee:b8:0a:59:4d:3c:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Apr 27 17:00:51 2026 GMT
Not After : Apr 28 17:00:51 2026 GMT
Subject: CN=a5cd1b49a028964b622261b36401f4af0746acbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:45:3f:34:48:d1:4b:38:40:4e:3c:d1:6e:43:
77:3f:cb:f8:77:d8:ec:6d:8b:26:5c:b6:d2:18:58:
e7:3d:cc:03:78:4d:07:61:2e:36:a9:8f:7d:8b:14:
b5:0a:02:08:1e:0c:31:fc:31:fc:a8:e0:8a:b9:38:
e3:d7:b0:ed:94:af:f9:47:6a:31:67:16:8f:b7:3e:
b7:88:ef:4e:d7:ed:71:7e:b0:30:e6:fe:92:5d:ec:
cb:a3:f9:b0:c2:bc:c9:d6:02:1e:d2:f0:21:fe:71:
5c:20:8a:e1:45:46:a4:f1:e1:e8:27:6f:5e:e2:81:
9f:00:29:49:d5:fa:9e:3d:74:f1:38:0a:b0:ee:3e:
76:01:18:5a:fe:8b:e0:09:00:7d:80:4e:0e:1c:40:
04:e1:c5:7a:6c:41:5b:1e:48:d4:35:c6:cf:e0:f2:
ee:7f:11:8a:95:c4:d0:dd:7b:00:01:0c:a9:3d:df:
41:3e:19:ec:53:e8:2e:60:b4:5e:4c:b9:7e:de:33:
03:52:4e:a0:b9:62:5a:22:f1:c1:e7:6b:1d:f3:a1:
9b:23:46:bc:fe:bd:c0:a7:47:43:1a:69:e8:23:55:
0b:12:19:12:6d:54:b2:a1:11:72:fd:26:8b:11:02:
a2:cd:09:53:27:68:cf:71:ef:5a:63:66:59:cd:a7:
fe:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:CD:1B:49:A0:28:96:4B:62:22:61:B3:64:01:F4:AF:07:46:AC:BE
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:de:46:ea:00:e2:cb:bc:83:db:da:a6:34:d1:6e:43:6b:7e:
2d:5e:e1:3a:89:73:61:60:f5:5c:f9:62:56:ce:1b:9d:f3:96:
d6:31:45:5c:a2:7e:69:e3:bc:f9:03:c3:ae:5b:6e:0c:2a:8b:
30:c8:45:8a:3d:ec:99:0f:8e:8d:45:76:a2:84:19:7b:45:b0:
fd:3d:66:c9:3a:47:7c:2d:48:6e:e1:16:1b:96:b9:f8:b4:52:
68:32:28:6c:56:e5:47:b8:c3:8b:c4:1d:58:29:c7:7b:24:ce:
43:fb:38:b3:74:8e:7a:d0:15:98:33:cb:62:ea:6a:ec:fa:9d:
c8:36:39:22:31:cb:2e:7d:61:ce:cd:a7:fb:5c:83:ea:22:8f:
15:6d:53:7d:ea:92:0d:14:75:fc:73:17:8f:b4:ee:06:4b:c2:
a4:63:b9:43:e9:3a:c3:60:22:94:98:f9:7a:fd:94:a0:29:8b:
40:3b:89:96:e4:e4:08:3b:3e:af:02:2c:89:26:99:bd:d7:1f:
cc:ed:fe:7e:68:f8:ba:10:d8:1b:73:f4:e3:8e:e8:2a:3c:cc:
f5:34:d9:cf:ea:9a:40:e4:c0:db:b8:96:67:3b:66:d4:01:db:
b1:f9:52:de:4f:5a:92:6f:40:ec:da:a3:5e:a8:4a:cd:10:4c:
72:17:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:04:18 2026 by rpki-client