Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: hVduLENwhj+gMkabibUmrnqmOhaLFTxKu5yL+2ulGSQ=
Subject key identifier: 70:0A:C1:DB:A9:A3:EA:2B:F3:08:EF:BB:ED:33:EC:5B:16:97:27:64
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 01A12B4401F6302800F2FA814AC9A4189984
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 0A6C
Signing time: Sun 11 Oct 2026 14:00:39 +0000
Manifest this update: Sun 11 Oct 2026 14:00:39 +0000
Manifest next update: Mon 12 Oct 2026 14:00:39 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: rGvUicZePSWhsaOo9hj6mDBVUANfcmU0xVvZ3OSLH1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2b:44:01:f6:30:28:00:f2:fa:81:4a:c9:a4:18:99:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Oct 11 14:00:39 2026 GMT
Not After : Oct 12 14:00:39 2026 GMT
Subject: CN=700ac1dba9a3ea2bf308efbbed33ec5b16972764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1d:3a:59:01:20:90:52:97:7d:68:a4:b9:01:
cc:3e:03:a2:fe:7a:dd:29:0e:0d:b3:8e:65:7d:01:
43:af:cd:b7:b3:e5:9d:07:43:f8:75:71:bf:b4:d1:
52:d0:4f:48:2b:8e:0d:13:0c:69:84:7e:61:a6:04:
52:5e:db:e9:7c:05:f6:0e:e3:a7:61:65:ab:a6:1f:
ac:ed:43:f0:15:a4:f6:cf:a8:49:ef:c3:37:cb:f3:
45:69:9d:a0:36:16:40:14:53:f1:a7:4e:d0:5a:6c:
6d:40:fe:ac:5d:c4:84:85:ba:40:a9:66:eb:96:75:
98:df:c7:02:a1:78:f4:34:d2:7a:9d:db:6e:9e:60:
99:ed:86:fa:c1:ae:06:4f:f3:24:2c:66:9c:a3:f4:
77:cb:7e:b8:7d:78:a2:9e:d5:2c:5b:21:57:82:0b:
ab:42:13:f0:f3:7b:7d:1d:73:8d:8f:e9:59:15:c9:
b4:79:c6:55:80:cc:62:e9:c7:29:1e:1d:b8:46:d5:
93:f8:d2:cd:0b:ab:3a:6e:7e:a6:e8:2f:7b:cb:86:
6d:d3:57:d9:7c:3f:7f:a9:96:18:fa:e7:7f:89:f7:
47:5b:e2:54:3d:be:2c:78:b7:17:ee:07:3d:13:1c:
02:c9:24:5f:3e:26:16:64:3f:88:ba:fe:82:aa:29:
c7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:0A:C1:DB:A9:A3:EA:2B:F3:08:EF:BB:ED:33:EC:5B:16:97:27:64
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ff:da:cb:17:4c:11:14:63:06:43:83:dd:64:9a:a2:4f:d6:
fa:0e:bc:bf:ee:f2:5f:02:cb:db:33:5d:a2:cd:ab:50:23:d9:
d0:7f:cf:56:f3:eb:a4:47:a8:7a:b5:ac:c3:05:54:33:67:de:
0b:41:33:7f:dc:64:41:c3:26:f6:79:7b:ae:d6:fa:90:49:f2:
fd:ca:47:47:b1:bb:ba:97:1f:e1:42:c5:09:09:89:69:be:48:
dc:b9:38:1f:c4:88:22:ce:0e:a3:ee:04:11:a2:1f:90:81:d1:
47:7a:78:8a:4d:30:b3:da:a2:d3:e9:22:0e:f0:64:ea:4b:4b:
b1:ac:8f:9a:57:8d:2d:c6:f5:ca:a5:dd:1d:26:7f:ab:d8:9e:
a1:fa:b2:07:76:e0:d2:03:91:cf:dc:2c:58:d8:13:54:81:3f:
e1:47:4b:ec:c1:52:25:53:9d:1f:24:48:dc:43:ed:e7:d6:df:
c9:f4:46:6f:52:70:1f:e0:c0:04:6d:51:8b:5e:2d:e8:8f:0d:
2c:cb:d7:c1:47:9d:ad:23:6e:d9:3a:cc:e3:70:d6:91:26:98:
b6:f2:bb:64:e4:e6:55:e1:6c:61:7e:26:5b:09:c0:ba:9b:d3:
8e:a7:70:17:63:86:82:de:c8:b6:82:84:f2:c1:c0:98:fc:10:
1f:7e:27:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaErRAH2MCgA8vqBSsmkGJmEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWQ2NzkxYjhkYmU5YzM1MmJkNjRhOTMyMjE3MmI0MWM0
YjIxNzEwHhcNMjYxMDExMTQwMDM5WhcNMjYxMDEyMTQwMDM5WjAzMTEwLwYDVQQD
Eyg3MDBhYzFkYmE5YTNlYTJiZjMwOGVmYmJlZDMzZWM1YjE2OTcyNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqR06WQEgkFKXfWikuQHMPgOi/nrd
KQ4Ns45lfQFDr823s+WdB0P4dXG/tNFS0E9IK44NEwxphH5hpgRSXtvpfAX2DuOn
YWWrph+s7UPwFaT2z6hJ78M3y/NFaZ2gNhZAFFPxp07QWmxtQP6sXcSEhbpAqWbr
lnWY38cCoXj0NNJ6ndtunmCZ7Yb6wa4GT/MkLGaco/R3y364fXiintUsWyFXggur
QhPw83t9HXONj+lZFcm0ecZVgMxi6ccpHh24RtWT+NLNC6s6bn6m6C97y4Zt01fZ
fD9/qZYY+ud/ifdHW+JUPb4seLcX7gc9ExwCySRfPiYWZD+Iuv6CqinHDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHAKwdupo+or8wjvu+0z7FsWlydkMB8GA1UdIwQY
MBaAFFGtZ5G42+nDUr1kqTIhcrQcSyFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMt
MWE4OWZmMTE5NjVlLzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS8zZjYxNzgtNWZkMy00MDNmLThmZWMtMWE4OWZmMTE5NjVl
LzEvVWExbmtiamI2Y05TdldTcE1pRnl0QnhMSVhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFf/ayxdM
ERRjBkOD3WSaok/W+g68v+7yXwLL2zNdos2rUCPZ0H/PVvPrpEeoerWswwVUM2fe
C0Ezf9xkQcMm9nl7rtb6kEny/cpHR7G7upcf4ULFCQmJab5I3Lk4H8SIIs4Oo+4E
EaIfkIHRR3p4ik0ws9qi0+kiDvBk6ktLsayPmleNLcb1yqXdHSZ/q9ieofqyB3bg
0gORz9wsWNgTVIE/4UdL7MFSJVOdHyRI3EPt59bfyfRGb1JwH+DABG1Ri14t6I8N
LMvXwUedrSNu2TrM43DWkSaYtvK7ZOTmVeFsYX4mWwnAupvTjqdwF2OGgt7ItoKE
8sHAmPwQH34nnA==
-----END CERTIFICATE-----
Generated at Sun Oct 11 20:08:22 2026 by rpki-client