Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
File: Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft (raw, json)
Hash identifier: NshxaOd3ATFlqRr4T/n5HBoxHUlNgKTxlVA6pHb6aTk=
Subject key identifier: C5:49:20:CC:65:41:A1:D7:53:80:5E:1D:3A:28:A6:3B:FC:F1:77:29
Authority key identifier: 51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
Certificate issuer: /CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Certificate serial: 019D97E2379BDAF23E4F16BF7F9DE7A423BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
Manifest number: 0892
Signing time: Thu 16 Apr 2026 20:01:17 +0000
Manifest this update: Thu 16 Apr 2026 20:01:17 +0000
Manifest next update: Fri 17 Apr 2026 20:01:17 +0000
Files and hashes: 1: 7qf495NfOxhQQHgNxqK4d9dwdxc.roa (hash: rcSTVTiDx+E3Vd2xpCDG1+PZtM3slYfPxhlhopNclnA=)
2: SmUJB6MxkTLU2QHo_NcP-yqCSU4.roa (hash: 7KXQ4N+oMQBnbJdJsy42rcxl86QitfR/kZCJkJRuiMs=)
3: Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl (hash: SgYt06MhTwxmVm2yfJgNU/XwiT002v5M4GrS8L2pWvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:37:9b:da:f2:3e:4f:16:bf:7f:9d:e7:a4:23:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ad6791b8dbe9c352bd64a9322172b41c4b2171
Validity
Not Before: Apr 16 20:01:17 2026 GMT
Not After : Apr 17 20:01:17 2026 GMT
Subject: CN=c54920cc6541a1d753805e1d3a28a63bfcf17729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:24:80:9f:a3:94:d1:76:bf:cd:d1:1e:47:00:
40:17:78:ee:7b:8f:f6:18:03:eb:fd:ba:9c:b4:ae:
06:21:42:ff:bc:03:e8:2f:d9:96:d8:ce:30:81:a1:
26:b2:59:7c:36:e9:fd:54:5e:5a:ce:73:a5:33:8a:
10:1e:38:b1:4e:f0:4b:2b:72:0e:50:ea:69:f6:c1:
79:b7:b8:8b:75:dd:95:c0:d3:97:57:c1:fd:86:43:
76:42:a2:a5:75:12:c1:79:c8:60:7a:9e:5b:c1:dc:
da:0f:7e:a8:dc:21:1f:7d:59:49:b2:61:b0:5c:d7:
11:d0:01:08:af:6a:79:df:f4:03:d7:80:72:1f:5c:
a1:c2:89:3a:38:15:a1:73:c7:96:4f:5b:2d:54:e3:
76:ad:ec:a6:31:20:af:bc:ef:63:32:89:28:0c:ca:
72:01:2f:f4:34:74:0a:13:59:a1:41:3c:d6:37:0c:
02:55:82:4d:89:94:b7:7e:b4:8a:b1:e3:23:e9:1f:
d2:f8:4f:0d:00:71:52:ef:a1:4a:7c:a3:1a:cb:9b:
01:7e:e1:a1:46:6c:c2:26:be:f3:bf:fd:23:f5:14:
a7:d0:96:57:7d:fe:5a:30:bb:bd:f5:1a:2b:0b:b2:
8c:93:fa:f3:26:ea:46:13:41:81:e9:23:3a:85:8b:
3e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:49:20:CC:65:41:A1:D7:53:80:5E:1D:3A:28:A6:3B:FC:F1:77:29
X509v3 Authority Key Identifier:
keyid:51:AD:67:91:B8:DB:E9:C3:52:BD:64:A9:32:21:72:B4:1C:4B:21:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua1nkbjb6cNSvWSpMiFytBxLIXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3f6178-5fd3-403f-8fec-1a89ff11965e/1/Ua1nkbjb6cNSvWSpMiFytBxLIXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bd:d1:1a:db:ea:b6:d7:59:c0:12:2e:ad:aa:49:33:13:aa:2f:
84:e8:c0:d5:86:01:65:26:42:cf:c6:eb:b5:84:0f:d4:53:cb:
bc:c5:8a:ea:51:3f:e4:a3:a5:21:19:9e:7c:e7:1e:76:9b:80:
7c:1c:df:6e:d6:60:f7:b5:a9:d8:61:3c:73:f6:b4:21:c9:44:
c7:2c:c6:18:05:e0:3c:a0:bc:d5:b2:a0:3a:79:34:54:e7:95:
ab:a4:20:9f:ef:c4:37:8f:fd:65:3c:0f:81:42:1b:e8:8d:e7:
5b:3d:e7:f9:3a:9e:a9:2c:9e:7f:de:57:a1:18:1f:e7:b3:e0:
e4:ea:6e:ff:2e:cb:35:e3:38:23:ff:a2:d2:0f:3f:53:1b:78:
2f:df:b6:70:ea:7b:dc:a9:7d:7e:c3:18:c2:21:d8:fe:fe:20:
02:41:a8:f7:ce:75:82:39:b4:1a:52:73:27:98:67:f7:78:71:
e1:25:06:91:ae:31:cb:89:34:36:bd:32:0c:e5:90:65:e8:7e:
1a:db:32:f6:ca:f8:20:ca:4c:91:a1:41:cf:58:e1:86:e2:23:
55:e4:49:9a:4f:a4:ce:cb:78:f9:7b:8c:8e:b3:b5:4c:a5:e2:
9c:c5:8c:e4:87:bb:a4:0f:f7:fc:f2:45:e2:69:8d:e5:7f:2d:
c6:16:d5:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:22:25 2026 by rpki-client