Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: 8hKFFeECOKpgAHqyid0CH7hRkEc0ETw7q1dpNy9Fog0=
Subject key identifier: E6:23:0A:55:AC:E2:AD:E5:88:11:DE:E7:51:BE:B9:C4:CB:86:CC:60
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 01A08C7B95A519ADB2264BB0756FF3CD536D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0E20
Signing time: Thu 10 Sep 2026 18:01:44 +0000
Manifest this update: Thu 10 Sep 2026 18:01:44 +0000
Manifest next update: Fri 11 Sep 2026 18:01:44 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: 2cnkugBBWcJ3H4t+bg/vo/Xti9soj7lt6S6xAOXwpZg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:95:a5:19:ad:b2:26:4b:b0:75:6f:f3:cd:53:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Sep 10 18:01:44 2026 GMT
Not After : Sep 11 18:01:44 2026 GMT
Subject: CN=e6230a55ace2ade58811dee751beb9c4cb86cc60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b4:f3:45:68:e6:a6:2c:b3:51:d8:18:e0:58:
bb:02:72:e4:0a:78:cd:ed:37:03:66:b4:27:8d:9f:
d9:d9:d6:49:9a:9e:c3:ff:1e:b9:51:97:22:14:97:
47:2b:c3:3e:84:d3:51:20:bc:b1:1f:e9:ce:73:f2:
27:08:b8:0e:30:9c:b5:75:92:7f:8e:af:9c:f6:77:
65:78:87:9a:8f:1d:2a:1f:21:8e:14:5b:5b:63:45:
7e:ca:7e:c0:bb:74:0a:fb:e1:17:89:db:08:c9:10:
76:f5:8e:0c:29:f7:00:20:09:a9:d2:f2:e6:49:f5:
a9:89:68:cc:cd:39:4e:7e:83:36:3f:c0:96:c7:b1:
4a:68:59:55:9e:7f:84:ba:c8:3f:9b:3e:a5:67:43:
14:8c:34:a1:b6:79:85:0f:b9:b4:65:96:28:b3:97:
7d:75:f4:bd:9b:3c:f7:87:bd:4f:6f:78:ce:34:6c:
8f:9f:cb:ff:11:5b:9c:dd:fd:68:10:ef:01:6f:e6:
e4:03:09:a1:08:49:c1:02:c7:4a:5b:f1:77:4c:f1:
2d:66:b9:b8:c7:b6:27:56:ec:79:14:ad:56:66:50:
6a:8a:2d:e2:eb:f8:53:a9:21:2c:50:da:00:ef:77:
23:5e:f7:cb:74:f0:d5:6b:ae:e0:98:51:b2:80:f4:
37:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:23:0A:55:AC:E2:AD:E5:88:11:DE:E7:51:BE:B9:C4:CB:86:CC:60
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:3b:69:d0:bd:c8:43:c6:39:50:51:d4:27:5e:88:1f:ca:7f:
d6:62:03:56:05:5e:d3:3e:48:ad:6a:6d:6c:de:23:6d:ea:b1:
70:8a:25:ab:b5:b5:5b:35:00:56:6f:7a:c0:1c:26:bc:67:99:
91:36:ce:ab:dc:ed:0f:35:cd:bd:52:15:8f:53:c1:89:0e:d8:
dc:04:62:2c:03:1f:11:64:8b:94:75:77:bb:87:b4:3b:a1:13:
5a:60:a5:e4:54:ad:26:61:81:93:a5:a3:09:d2:3b:48:cb:3b:
9e:2e:c3:f3:58:44:42:16:2c:b7:61:55:53:f8:1b:07:23:13:
44:fe:75:79:18:9f:9f:d4:c9:b7:2a:fb:5b:62:10:7d:32:83:
f7:21:13:16:0c:97:93:ff:fc:79:62:e9:83:47:50:98:f5:0b:
41:92:b8:28:41:39:ca:2a:39:20:32:00:21:c5:35:51:06:91:
14:25:c6:da:69:f7:d5:06:93:46:0d:04:1a:e9:39:00:08:f3:
b3:8f:95:1a:d2:4f:a3:c2:cd:5b:34:9c:fb:f7:53:01:89:33:
12:7f:57:35:30:9e:ca:0b:4b:f1:81:3b:bb:7f:89:a6:0f:60:
aa:4c:24:c8:af:b6:4a:57:9b:4b:8d:f7:b9:5f:38:8b:99:26:
8d:db:f7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCMe5WlGa2yJkuwdW/zzVNtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWYxOWY0YTYwZGFmMTVlZmI3ZWM0MWZjNTlmNWRhNjU1
OTcyZTYwHhcNMjYwOTEwMTgwMTQ0WhcNMjYwOTExMTgwMTQ0WjAzMTEwLwYDVQQD
EyhlNjIzMGE1NWFjZTJhZGU1ODgxMWRlZTc1MWJlYjljNGNiODZjYzYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbTzRWjmpiyzUdgY4Fi7AnLkCnjN
7TcDZrQnjZ/Z2dZJmp7D/x65UZciFJdHK8M+hNNRILyxH+nOc/InCLgOMJy1dZJ/
jq+c9ndleIeajx0qHyGOFFtbY0V+yn7Au3QK++EXidsIyRB29Y4MKfcAIAmp0vLm
SfWpiWjMzTlOfoM2P8CWx7FKaFlVnn+Eusg/mz6lZ0MUjDShtnmFD7m0ZZYos5d9
dfS9mzz3h71Pb3jONGyPn8v/EVuc3f1oEO8Bb+bkAwmhCEnBAsdKW/F3TPEtZrm4
x7YnVux5FK1WZlBqii3i6/hTqSEsUNoA73cjXvfLdPDVa67gmFGygPQ3BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYjClWs4q3liBHe51G+ucTLhsxgMB8GA1UdIwQY
MBaAFLmvGfSmDa8V77fsQfxZ9dplWXLmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEt
NzQyNWIxM2Q1Y2Y4LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy8xNGY0NmMtMGEzNi00Y2MzLWIwOTEtNzQyNWIxM2Q1Y2Y4
LzEvdWE4WjlLWU5yeFh2dC14Ql9GbjEybVZaY3VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTtp0L3I
Q8Y5UFHUJ16IH8p/1mIDVgVe0z5IrWptbN4jbeqxcIolq7W1WzUAVm96wBwmvGeZ
kTbOq9ztDzXNvVIVj1PBiQ7Y3ARiLAMfEWSLlHV3u4e0O6ETWmCl5FStJmGBk6Wj
CdI7SMs7ni7D81hEQhYst2FVU/gbByMTRP51eRifn9TJtyr7W2IQfTKD9yETFgyX
k//8eWLpg0dQmPULQZK4KEE5yio5IDIAIcU1UQaRFCXG2mn31QaTRg0EGuk5AAjz
s4+VGtJPo8LNWzSc+/dTAYkzEn9XNTCeygtL8YE7u3+Jpg9gqkwkyK+2SlebS433
uV84i5kmjdv3NA==
-----END CERTIFICATE-----
Generated at Fri Sep 11 05:09:02 2026 by rpki-client