Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: XF7iSWpxn3WyvQRySWf4vH4dFkb/7hCvpxar3rhbjiM=
Subject key identifier: 15:DA:14:7C:1D:B9:72:CE:63:61:CC:30:E4:6A:0E:6A:EA:C3:FE:AD
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 01A18D53C92FBE170CC7056FF41007C67F41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0EA5
Signing time: Fri 30 Oct 2026 15:00:40 +0000
Manifest this update: Fri 30 Oct 2026 15:00:40 +0000
Manifest next update: Sat 31 Oct 2026 15:00:40 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: OnIYOx1IYsANu7wFuj3VVl3+iwhcwp4vTL13FEtNbnQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 15:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:53:c9:2f:be:17:0c:c7:05:6f:f4:10:07:c6:7f:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Oct 30 15:00:40 2026 GMT
Not After : Oct 31 15:00:40 2026 GMT
Subject: CN=15da147c1db972ce6361cc30e46a0e6aeac3fead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0b:50:52:8a:7a:81:6d:3f:10:2e:04:e1:7c:
80:b0:e1:38:05:8c:9b:8f:c8:ab:07:1a:8c:29:7a:
d3:a5:d2:ee:a4:35:91:20:ed:1c:3c:f2:aa:8a:ad:
01:70:2d:d3:d7:6b:40:8f:cf:9f:dd:5a:ec:44:5f:
da:ee:bd:03:83:df:1c:0d:ad:0c:71:17:35:22:00:
6e:dd:37:96:76:c5:d4:5d:d0:e0:3c:42:fa:b7:bb:
db:ab:29:09:bd:90:a5:7d:2b:70:17:5c:88:e4:23:
07:bd:a7:7a:d8:bb:c7:4b:00:3b:2c:ff:f9:3c:af:
fa:06:b0:2b:4d:6d:28:03:76:f4:96:37:fa:69:ad:
dc:80:a0:44:e9:bb:cf:d9:54:a1:a9:f2:3f:a1:6d:
e0:72:4a:09:e6:86:09:72:95:bd:28:17:3c:f2:bd:
ae:62:36:c3:69:7d:df:32:3e:c8:cd:89:7f:49:1c:
a1:de:8c:03:4a:36:4f:62:48:39:99:85:17:d5:23:
3e:19:c6:b1:46:51:59:3d:8f:7c:cb:e3:01:37:c4:
d8:8d:d8:81:f7:da:c8:70:54:e1:56:97:f7:c3:e5:
0b:89:8d:62:7f:cf:d1:2f:ee:b9:b9:69:ef:49:3d:
d4:92:70:0a:a0:eb:a9:aa:31:5a:eb:12:43:ff:d2:
cc:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DA:14:7C:1D:B9:72:CE:63:61:CC:30:E4:6A:0E:6A:EA:C3:FE:AD
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:02:8f:9d:d8:ac:35:ed:fd:d7:58:e3:bc:83:79:ba:17:
06:75:ae:53:93:21:e2:46:99:b4:9b:36:b5:e9:45:70:da:e4:
63:b0:f1:5e:b5:b3:17:ce:8c:40:eb:a1:e6:3f:84:b4:9c:ae:
64:f9:61:af:19:cb:75:da:bf:59:84:ff:a1:fe:f6:1a:3e:d4:
e6:ec:6b:3a:e1:c4:40:93:44:da:7c:92:64:45:65:d9:08:f6:
d4:5f:7e:31:cc:8a:eb:e0:c7:df:95:07:9a:ee:9b:4c:9a:48:
7a:22:4a:73:cd:e6:47:e3:fd:8a:e9:18:87:64:68:d2:60:8c:
4e:45:3b:dd:40:e5:39:70:bd:6f:f1:ef:b5:79:c7:a0:03:c8:
32:dc:63:d3:96:1b:c0:e1:11:10:3f:04:fd:c4:77:c9:52:88:
b0:c2:4b:e1:cf:02:8c:df:b7:c0:5f:55:3c:fd:d5:99:82:6f:
46:82:d2:60:84:0b:de:01:1a:ee:05:52:5d:69:50:55:69:8d:
ee:7e:60:d4:c4:60:f0:6f:8a:64:a8:78:b3:32:d6:04:ef:c4:
6c:4b:d5:b3:b1:6f:ac:41:6b:ce:eb:0e:81:e1:4a:8c:6a:4c:
3e:d3:8e:bd:5d:60:f6:3a:12:e8:37:d1:03:84:65:b7:4c:6d:
56:b0:be:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 22:27:56 2026 by rpki-client