Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: ErWg0+lH7XSxaVoIoP5yf/OggIYTZYk1bSPQOHZ2z88=
Subject key identifier: 8A:E3:EA:C3:85:73:0B:6F:01:04:DE:0E:42:EA:61:44:CD:19:CE:5D
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 01A1822B65DA5C271A74CAD5332A78D1E90A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 13ED
Signing time: Wed 28 Oct 2026 11:00:44 +0000
Manifest this update: Wed 28 Oct 2026 11:00:44 +0000
Manifest next update: Thu 29 Oct 2026 11:00:44 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: qxq2OKkw1j6ZjbXd8rdwYMC/kNv9m6MVsf6BdYNSX2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 11:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:82:2b:65:da:5c:27:1a:74:ca:d5:33:2a:78:d1:e9:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Oct 28 11:00:44 2026 GMT
Not After : Oct 29 11:00:44 2026 GMT
Subject: CN=8ae3eac385730b6f0104de0e42ea6144cd19ce5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:c6:08:eb:98:91:ab:39:20:56:43:14:c1:04:
c2:c8:a6:51:59:45:a8:79:c2:b8:fd:a2:98:5f:ac:
5d:c0:35:5c:84:47:2d:92:3f:a9:cb:c2:9b:e5:5d:
62:12:0f:b0:ab:32:19:e6:b3:70:72:28:07:f0:fe:
0c:5e:73:52:4f:85:1e:e4:b2:2f:8f:21:15:40:1b:
ba:5a:5c:b4:08:bc:83:3b:31:a5:67:ad:ad:27:c4:
d4:fa:7d:01:f2:74:9d:44:b9:0c:a9:2b:3b:3e:83:
75:e1:01:d2:39:34:be:86:82:a0:75:1d:a8:cc:06:
34:d0:ca:38:6a:e3:d0:57:af:7f:d7:4a:1c:1f:f5:
18:62:ad:dc:f8:c9:f4:6f:4d:89:94:86:e5:b4:97:
4d:8c:97:1d:24:3d:24:18:24:7e:46:68:2b:af:cc:
51:f4:34:a9:dc:28:cf:06:69:89:c6:11:43:6b:29:
07:b8:80:e5:56:98:ad:82:3f:a9:9d:bb:65:f4:f0:
37:f4:63:54:66:41:80:c9:e6:5a:1b:5b:a2:f6:64:
a1:b7:74:fc:5c:6f:fe:55:e4:b6:17:4b:45:ea:62:
8f:8c:12:39:cb:6a:03:e2:a5:0f:f1:dc:29:39:9a:
0a:ed:b9:64:64:ad:39:a5:f7:4b:bf:4c:4a:28:44:
d7:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E3:EA:C3:85:73:0B:6F:01:04:DE:0E:42:EA:61:44:CD:19:CE:5D
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:91:41:09:f2:0e:2f:1e:56:0c:5a:7e:d5:87:d0:a1:9e:45:
65:a9:a5:e4:35:e7:75:1c:2a:33:b7:f3:a1:f9:7c:d2:41:97:
4b:7e:12:57:fb:90:d1:3a:b1:5d:54:dd:2f:34:16:1e:a8:a7:
a2:ad:23:7a:5b:77:5e:00:ce:64:9e:53:41:14:4e:7a:b2:1f:
75:66:cd:ca:b5:dd:63:85:72:36:51:57:fe:00:e2:af:c8:ea:
fe:46:ff:27:56:79:b0:d9:08:4f:5f:db:02:09:e8:b2:19:bb:
9d:9b:cb:0e:d1:be:c2:fc:43:1f:26:c2:aa:2f:17:2a:a8:b0:
2a:08:02:c0:53:a6:b1:9e:5e:d9:6a:09:3e:4d:af:39:27:15:
7c:65:f6:54:49:50:e0:fb:51:05:74:87:0a:b1:ad:94:0d:c8:
53:e8:03:21:af:1b:de:19:96:3b:40:31:8e:ab:0c:a5:8d:73:
e7:a7:49:28:dc:96:cd:9d:3c:d4:42:34:87:10:c5:56:83:52:
4e:7a:05:52:2b:b2:66:da:49:2e:c4:77:60:84:92:49:b0:48:
a1:b0:80:35:c1:6d:f2:d6:c0:f3:36:9c:cb:c4:bb:2c:a6:db:
01:e6:4e:d5:d2:41:82:5a:b3:2d:1d:df:5f:d3:21:c3:ea:0d:
f4:ee:a2:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:44:40 2026 by rpki-client