Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: IMZxErtlBMk9/xLIvre2TynZkoJYFlOkR1ov7WfMPeU=
Subject key identifier: 2A:73:82:B4:27:E4:4A:70:6B:C9:F5:DD:BC:30:D4:9B:9B:F1:3D:DA
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019EBFC80A71D3DFADA5BB220F95945E122D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0FA9
Signing time: Sat 13 Jun 2026 07:00:18 +0000
Manifest this update: Sat 13 Jun 2026 07:00:18 +0000
Manifest next update: Sun 14 Jun 2026 07:00:18 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: XgdGOFvBK16/3aNexuwg9heN7XZV8QVLAgXyvL1ByTo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bf:c8:0a:71:d3:df:ad:a5:bb:22:0f:95:94:5e:12:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Jun 13 07:00:18 2026 GMT
Not After : Jun 14 07:00:18 2026 GMT
Subject: CN=2a7382b427e44a706bc9f5ddbc30d49b9bf13dda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ae:d4:2d:e3:4b:6d:61:3b:e4:97:b1:f4:0c:
29:33:64:f1:4a:94:07:31:69:72:bf:41:4b:cb:de:
2f:d8:e6:48:61:03:2f:66:eb:f2:2a:27:ef:5e:70:
d2:ab:5a:95:0b:62:f4:6e:86:cf:9f:a7:46:c7:db:
76:21:94:09:7a:c2:2a:1f:65:3a:da:a5:3b:3d:53:
6f:d0:ba:7f:9f:cb:8f:cc:a8:67:16:96:d1:3d:73:
cd:58:6f:4e:79:40:43:e7:13:a5:a7:87:4c:9d:db:
fc:98:2f:04:a8:fc:c0:cd:c8:59:8c:f1:0d:49:23:
b5:be:bc:08:f8:73:48:1b:81:48:33:64:de:58:99:
28:c0:e8:d9:b2:63:10:ab:31:35:54:d4:3f:ab:1e:
3e:35:03:52:10:88:69:39:99:67:0e:0a:44:5a:47:
ff:e7:5a:8e:48:76:a0:9c:a6:25:3d:e0:77:68:7f:
e3:10:da:c8:27:a3:dc:75:1f:ca:73:5c:4f:c1:16:
90:86:35:0f:9b:2c:d5:aa:4b:e7:b5:c8:89:58:2b:
23:bd:22:01:50:96:b2:4a:a6:2c:ee:bc:f4:3f:27:
a3:46:8f:ee:b0:c1:f1:96:66:44:67:18:51:6a:42:
61:50:b6:47:21:1d:d5:87:3d:be:4b:fb:f2:18:d4:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:73:82:B4:27:E4:4A:70:6B:C9:F5:DD:BC:30:D4:9B:9B:F1:3D:DA
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:b7:bd:8a:61:cf:1c:ad:7f:a4:8e:4f:45:1b:5a:bb:83:9d:
29:8d:42:d6:d0:73:9e:0e:bc:eb:95:aa:67:a9:5c:b6:bb:20:
bc:8d:98:c3:df:6d:01:c4:f5:0c:43:a9:d7:18:c6:5b:2e:35:
4e:f3:ba:31:b4:c5:f8:26:08:ab:1d:79:cc:29:2b:3b:05:96:
f1:42:43:cd:ae:73:63:a5:bd:db:b6:2e:1e:76:7c:09:87:ea:
49:6e:9a:10:45:73:66:43:e6:e8:7f:e4:5e:9c:6c:d4:ea:a0:
23:01:40:17:a8:14:da:07:52:02:a1:d4:da:be:c7:20:a9:ff:
e5:d1:eb:e0:c0:13:fd:39:41:eb:2e:3e:ee:53:af:70:97:bf:
fd:a5:f2:75:45:59:97:08:25:b1:e1:33:71:b0:ca:ee:00:42:
d4:93:f2:d3:d8:93:43:5c:d3:68:84:3a:1c:9a:31:55:7d:9a:
f7:58:61:ad:f9:c7:f3:48:1d:20:6b:da:3c:ba:14:9c:a0:c0:
0c:e2:2b:d0:89:88:3b:c8:5e:d0:8e:c0:a6:12:5e:4f:64:57:
37:0e:ec:5f:58:70:86:c2:b1:47:66:dc:66:27:c1:42:42:ea:
c8:7d:e3:cb:9e:41:67:14:fa:e6:19:61:43:fc:d0:71:db:c7:
22:39:28:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:23:33 2026 by rpki-client