Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: MZLPCHdl8vtE214ABVNH4zaD+hn5By/U45WimiS+N9M=
Subject key identifier: 38:4D:48:B5:C9:68:23:4A:21:0A:22:77:41:39:95:DB:D1:14:70:6B
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019F9EF2767A1FC56FC91ED27CA401036D63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0DA5
Signing time: Sun 26 Jul 2026 15:01:57 +0000
Manifest this update: Sun 26 Jul 2026 15:01:57 +0000
Manifest next update: Mon 27 Jul 2026 15:01:57 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: PfoVuJGLwK/rDmjWaLYH79znY8fjlPZioysWcXXQTFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f2:76:7a:1f:c5:6f:c9:1e:d2:7c:a4:01:03:6d:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jul 26 15:01:57 2026 GMT
Not After : Jul 27 15:01:57 2026 GMT
Subject: CN=384d48b5c968234a210a2277413995dbd114706b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e1:00:7d:23:6a:fe:1b:26:f8:3a:03:b3:30:
a3:15:14:d9:98:d3:60:5f:07:b5:bc:ed:1d:5a:98:
17:37:8c:18:23:bc:48:df:8d:bf:a4:24:13:b4:4a:
ec:b8:0c:d3:44:c9:ec:94:e9:b5:02:69:a7:0c:5c:
71:6f:e7:be:29:fd:d6:85:e8:83:48:bd:c6:0e:dc:
59:f0:61:e5:11:58:d7:17:12:cc:d2:fa:56:bb:9e:
4c:d2:bd:78:29:fa:06:b8:59:7f:d2:62:63:16:ca:
12:8b:92:18:06:c9:c9:89:4b:01:ab:6f:0a:60:2c:
f3:df:2f:f3:38:d3:b2:b1:1f:47:ba:95:b6:8a:2c:
d5:3a:65:cf:bd:be:7b:d2:cd:2e:88:af:f6:b4:27:
8f:c4:a7:31:a7:ad:c6:51:7b:82:ab:82:d7:39:93:
cd:16:79:5d:cf:79:fd:9c:47:59:09:c7:3e:53:97:
72:f8:f6:df:87:90:4a:3d:9c:e1:1d:b4:c7:f1:da:
e9:cb:a6:f7:96:b9:a4:65:6c:1b:34:b7:eb:be:a9:
58:ea:4d:6b:03:66:17:02:0e:25:ed:60:9b:a5:c8:
ef:eb:3f:de:77:5a:35:85:30:6d:a8:40:f6:43:da:
42:9d:70:70:bd:f7:f1:7f:0e:f7:5c:ef:62:9d:af:
64:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:4D:48:B5:C9:68:23:4A:21:0A:22:77:41:39:95:DB:D1:14:70:6B
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:5f:fa:47:2d:30:16:0b:93:b8:f5:e7:b7:98:a5:92:3e:fd:
14:b7:c9:15:63:e6:26:6b:16:e2:49:bb:df:a1:77:17:c2:f1:
12:bb:92:a4:8d:73:4d:f4:3f:98:ec:f8:27:31:2b:c2:39:99:
ae:da:42:8d:aa:01:67:13:41:c8:3c:a0:4d:75:6b:3f:6a:e3:
92:dd:62:b0:bf:63:d3:7a:29:75:a1:97:26:2e:5e:af:14:75:
11:7e:98:6f:4f:ac:c7:b2:f9:1d:bf:a2:dd:a9:67:30:da:52:
2d:e4:b0:42:47:54:f4:bb:7a:d0:cc:4f:a0:97:57:fe:90:2a:
4e:41:5d:4c:9c:9b:05:0a:40:e2:7c:7e:5d:1e:db:4b:eb:41:
f2:e4:30:61:98:b0:eb:8c:0e:1e:dd:c6:2e:1c:80:1b:82:2b:
12:bc:93:3d:95:af:8c:bb:01:02:0c:96:b6:d8:7e:4c:c4:ce:
71:85:a1:27:f9:4b:8d:0f:61:a7:06:e7:e8:9e:e0:42:ad:87:
87:5a:9e:82:74:aa:3a:3b:47:3b:68:8f:9d:60:ce:2f:9c:1a:
cb:e7:b0:34:81:b6:a0:8a:bc:cb:38:08:60:82:67:84:a2:cf:
98:b7:21:61:db:91:7d:f6:ab:25:4c:fa:9e:69:91:43:4a:ac:
81:ad:cb:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 23:57:04 2026 by rpki-client