Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: aMCyrNxFa6pbfp6qgFQWi02M7yGdUwoJ0Dg0pDKs9SI=
Subject key identifier: A6:3D:A1:7A:D2:FA:6A:34:AF:76:90:74:0C:4A:0A:27:15:D7:B7:4A
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 019D99622481DEF84C5D17C955018E38F10E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 1145
Signing time: Fri 17 Apr 2026 03:00:39 +0000
Manifest this update: Fri 17 Apr 2026 03:00:39 +0000
Manifest next update: Sat 18 Apr 2026 03:00:39 +0000
Files and hashes: 1: GYTArtIgvINKT637yicE0RzC_gA.roa (hash: Lep0lB2c1nnq/plQOSLHCa5SiVLmUmJL/Hit/FXoSs8=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: K/XAX+9dshs+Vol25KjuOnu3p7Op0jAsykaCeXC7cao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:24:81:de:f8:4c:5d:17:c9:55:01:8e:38:f1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Apr 17 03:00:39 2026 GMT
Not After : Apr 18 03:00:39 2026 GMT
Subject: CN=a63da17ad2fa6a34af7690740c4a0a2715d7b74a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:42:66:3c:a8:56:6f:cd:d5:6d:41:1f:6c:
79:97:29:72:4b:67:74:db:9e:16:92:a7:d0:75:04:
6a:65:7c:52:ff:96:41:c2:16:56:ab:46:13:7a:8f:
ed:6d:4c:14:1e:88:5b:79:05:73:a4:fe:aa:aa:27:
b8:b7:8b:b1:2c:f4:37:10:37:ee:a3:ab:47:ae:58:
20:9d:01:15:18:27:92:77:b3:0e:f1:7c:5b:ae:91:
70:83:84:24:77:ff:b9:53:cc:79:e7:3e:d7:07:b0:
0b:4e:fb:c8:41:65:ba:11:a6:df:52:67:69:5c:5e:
09:b4:3d:b7:bc:49:3d:ad:69:ec:4a:fb:1a:a6:27:
93:75:7d:1d:82:41:f9:8a:28:32:2c:43:d5:94:9d:
5c:68:94:33:e2:a0:77:6d:6c:60:1c:7d:f4:dc:75:
cb:67:40:3d:01:42:85:c3:2f:14:7d:55:43:3e:39:
0e:88:5e:b4:9c:ea:21:fd:9e:3f:4a:57:c8:54:57:
6d:e9:43:7b:5c:b4:7c:ab:dd:1b:64:8d:8c:5d:ad:
2a:c6:a1:79:5e:8a:a7:3f:c8:d3:f5:94:a6:e1:82:
c6:1e:be:b7:9e:dd:e9:46:8e:3f:fc:fc:e4:d4:7f:
86:43:52:fa:92:8e:6a:ea:25:4f:d3:1c:90:0c:d6:
e8:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:3D:A1:7A:D2:FA:6A:34:AF:76:90:74:0C:4A:0A:27:15:D7:B7:4A
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:00:92:ca:2c:d3:81:88:7b:9c:86:3a:f7:9e:8b:8d:09:
a7:3f:cf:a2:61:37:fe:6d:78:3e:a3:14:1e:11:27:81:15:3e:
8d:be:2c:01:14:7d:c0:a4:1c:e4:fd:70:a1:18:7e:92:6a:cc:
b0:58:c8:68:11:0c:60:c3:69:35:39:11:a1:31:af:00:17:09:
2e:94:3e:ad:28:10:37:da:ce:21:d7:33:ae:27:6b:13:39:ad:
1e:f8:70:43:0e:06:82:85:1d:f7:67:51:35:8d:86:9f:36:c3:
a8:62:00:2c:f8:ca:eb:a4:a9:c8:62:f6:b3:b6:0e:ae:13:0e:
9b:42:d8:76:b4:28:01:5c:6a:d7:91:d7:3b:45:85:96:32:f9:
b7:dc:61:56:d5:14:17:48:b4:16:c0:62:ad:ca:43:84:7d:2a:
06:6b:f0:bb:31:47:25:d5:06:13:58:d9:86:ec:a4:36:ac:5d:
24:6a:33:df:05:09:d1:78:f6:d7:8e:a7:62:30:f7:1e:36:fd:
43:cb:ac:45:d4:90:7a:33:62:f9:d8:d8:45:80:da:9f:fc:85:
f6:69:87:f5:d3:2d:2d:78:ae:d1:ba:c4:52:59:ea:53:d8:be:
97:a6:ac:9f:1b:44:a4:18:5e:49:f8:5d:72:14:12:50:2f:ff:
cb:e6:b0:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:28:19 2026 by rpki-client