Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: kx6qiwLL+qwnBEmAIY7abMLxzLG20vjsPxemF6mRKWg=
Subject key identifier: 3D:BA:50:AC:F6:22:C7:CB:1F:C6:3E:9D:FE:32:9B:7A:63:67:2A:E2
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019EB732BB519DBC711B9AB630A4AEA574A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0D2D
Signing time: Thu 11 Jun 2026 15:00:15 +0000
Manifest this update: Thu 11 Jun 2026 15:00:15 +0000
Manifest next update: Fri 12 Jun 2026 15:00:15 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: t29h3rjsAm/C9VmuKiLuLXGNI+39M0TwCz0gN9I74ok=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:32:bb:51:9d:bc:71:1b:9a:b6:30:a4:ae:a5:74:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jun 11 15:00:15 2026 GMT
Not After : Jun 12 15:00:15 2026 GMT
Subject: CN=3dba50acf622c7cb1fc63e9dfe329b7a63672ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:43:19:fc:c1:1a:a9:f9:07:2d:6e:7f:b4:9d:
42:94:f3:7f:34:58:8b:a3:f8:01:cf:90:7b:dd:eb:
64:8b:62:5f:df:6c:3b:e6:46:13:c9:ed:e8:27:ae:
60:ce:bc:57:c7:4d:bc:e6:3c:e8:37:e1:0d:df:af:
31:3a:e4:98:9b:a1:14:ca:d0:1f:28:57:ac:73:f8:
55:3d:0b:5f:fe:ee:b3:6e:3f:cc:42:38:dc:1c:84:
3b:f5:2f:41:bc:f2:91:24:e0:7a:a2:27:cf:44:14:
6a:d6:6d:5f:df:bd:57:23:74:84:65:12:72:8e:df:
b2:34:c9:af:45:b5:28:1a:6d:72:42:da:5a:9d:a7:
7f:4b:48:af:9f:da:3b:38:3c:a3:8b:9a:2a:31:49:
38:f1:61:4b:c4:09:48:e3:ad:26:d8:59:bd:97:b4:
b2:ec:4a:b3:17:65:89:67:df:2a:6b:b1:dc:86:cb:
41:0d:0c:46:0e:06:75:9d:2c:1a:d0:fd:46:39:31:
19:28:e0:42:23:c0:2d:e0:46:f1:90:8a:e1:fa:09:
cc:c1:d1:11:4a:33:a2:3c:7f:64:76:f6:14:e9:24:
fd:a0:d3:aa:51:c6:b7:2b:2b:ca:cc:83:15:18:1f:
c4:95:75:fe:4b:54:d7:2a:91:7e:77:f1:a5:bb:79:
4d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:BA:50:AC:F6:22:C7:CB:1F:C6:3E:9D:FE:32:9B:7A:63:67:2A:E2
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:31:dd:f2:6a:6b:d7:b1:88:86:24:28:aa:bb:af:e3:5a:27:
47:0a:8a:77:56:12:8e:57:94:48:34:b0:25:42:e5:0d:5a:79:
d8:d9:76:b4:5f:17:5a:e9:bc:dd:df:b0:78:7b:61:aa:eb:52:
ee:20:35:05:54:0d:8e:ee:41:b5:f9:d2:1b:ea:fb:62:f8:34:
d4:5e:36:de:d9:59:87:0d:9d:5d:52:ce:4f:b5:12:57:c4:45:
f6:d7:15:79:bd:57:2b:76:2c:9f:54:b9:6b:92:0e:c9:09:1c:
d0:eb:5e:da:54:a6:b8:b5:4a:e8:7e:04:65:f5:f9:c6:00:2c:
43:24:22:d2:0f:fb:cc:fb:ef:96:c9:0f:23:79:29:8b:16:fe:
09:ed:c4:31:e9:59:77:ad:93:5f:6b:17:87:3f:f5:59:e5:91:
0f:19:3a:5d:27:8b:ad:f1:14:16:c3:69:c1:63:74:09:73:26:
6b:c5:25:9c:6a:ea:ec:c0:36:59:c4:b4:51:4a:86:ad:b7:4f:
09:19:80:0b:bd:c5:fd:76:01:3b:42:db:c6:e6:bb:6c:6e:bd:
d7:d0:44:c6:53:ff:08:08:56:ee:4d:c8:cc:50:05:7e:33:4d:
c6:3d:d5:7e:47:2d:5b:e3:e8:30:ba:00:83:32:99:4b:63:c1:
d8:23:cb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 19:03:15 2026 by rpki-client