Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: 2YoYq2wRljBPjx9hmARHPAqg/GuzHHcuBj4m5IQcjhY=
Subject key identifier: A2:5E:BE:93:EE:E4:80:28:24:F8:99:63:0D:BB:F6:F8:D1:B7:CC:B4
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 01A0BF8C2BF6F39785EBFCC06C98F420A56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 10B2
Signing time: Sun 20 Sep 2026 16:00:29 +0000
Manifest this update: Sun 20 Sep 2026 16:00:29 +0000
Manifest next update: Mon 21 Sep 2026 16:00:29 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: us9jqfJrFAfFaSknHd6ESES1UM0arBakhA7UzzpqGHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:2b:f6:f3:97:85:eb:fc:c0:6c:98:f4:20:a5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Sep 20 16:00:29 2026 GMT
Not After : Sep 21 16:00:29 2026 GMT
Subject: CN=a25ebe93eee4802824f899630dbbf6f8d1b7ccb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e8:6e:c9:7e:00:19:9c:3f:08:51:7b:0b:79:
46:c7:0d:98:55:a1:f4:eb:81:a5:b5:ed:85:6a:d5:
9d:0c:ba:17:bd:17:01:f2:ab:ad:53:d7:08:16:7e:
0e:1e:2c:8c:63:fe:f5:ac:c9:d0:40:c2:ac:7a:a3:
56:8b:7b:9d:25:a1:6c:0a:27:9f:5f:64:ce:30:16:
d5:dc:5e:80:38:54:84:5e:c0:d3:e0:d1:d7:cd:d0:
77:e3:be:30:6f:7a:39:29:ee:33:5b:6c:a0:98:f1:
2f:18:2d:e4:f9:6b:72:db:4e:81:d6:9d:94:9f:c4:
c1:56:08:33:75:0b:aa:49:0b:a7:37:46:3b:9f:94:
b0:5b:cd:c4:f0:a3:cb:88:f6:45:88:7e:10:59:ae:
a4:1b:70:c0:15:fe:f8:a1:d4:76:03:39:1a:d8:38:
ef:fa:a9:a7:28:63:b9:36:b6:95:96:43:71:a9:d3:
05:85:f7:4b:8a:73:e0:3d:b3:8f:fd:3b:a2:c2:04:
0e:55:64:45:a0:ca:96:ea:f3:78:b4:1d:8d:fc:fb:
b2:62:85:29:53:d6:06:f8:aa:53:e1:92:6f:f7:de:
a4:9e:fe:81:62:7f:4b:ca:d7:51:0a:53:cf:b8:05:
cc:3b:c0:b6:00:53:f8:7f:e5:a5:e1:0f:c0:69:8f:
cb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:5E:BE:93:EE:E4:80:28:24:F8:99:63:0D:BB:F6:F8:D1:B7:CC:B4
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:58:47:99:40:ad:92:31:ab:37:2a:8e:ae:32:07:a4:3e:aa:
fa:63:bf:a4:18:e7:03:25:98:fe:f4:68:b8:16:74:ad:98:2c:
cb:3d:ad:a0:84:42:f5:bb:0d:3e:97:63:fa:33:e8:a3:f9:a9:
76:75:bc:da:a7:a2:dc:d3:ef:26:cc:39:4b:59:9f:c6:c8:8e:
7e:47:f0:bf:ef:d5:d0:9e:7c:15:75:71:75:d6:b9:7d:dc:f2:
09:16:18:be:c4:b6:80:09:f8:2b:b6:7f:8b:94:c4:26:77:03:
1d:fc:aa:ae:82:07:a0:24:50:41:45:d5:79:85:99:6a:33:70:
77:0d:bb:06:a9:4e:d7:25:45:fd:44:02:05:cb:31:27:f4:51:
bb:cf:c8:61:8b:e8:c1:b1:35:e7:20:df:11:ad:45:78:26:4f:
20:ab:4a:db:c7:77:7b:de:01:f0:78:66:94:3f:58:b0:10:ec:
7e:11:3b:19:f5:cc:55:9d:90:4a:5b:26:b4:ae:5e:ae:08:b1:
ac:c5:02:0a:f3:dd:20:db:18:04:bd:68:bd:6a:1e:02:60:e7:
4d:9e:2a:03:47:2a:a2:36:9a:55:b6:69:27:d5:15:d1:da:79:
39:5f:02:ea:3b:54:df:ef:8d:ce:28:c0:60:25:fe:81:9f:99:
e2:b4:75:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:24:50 2026 by rpki-client