Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
File: Ua-8FGJFXphp1IslexjiO-d6psM.mft (raw, json)
Hash identifier: 6EeyIvVbtXZyj+FCXq3fckGqsiYElhMa5olwdWyYB/U=
Subject key identifier: 17:BA:5A:3C:C8:84:BD:AC:E0:E0:6E:DB:FB:FD:58:F9:B2:61:21:B2
Authority key identifier: 51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
Certificate issuer: /CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Certificate serial: 019CABD98BD10796B2ACF9EE38E1F47E2648
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
Manifest number: 10CA
Signing time: Mon 02 Mar 2026 00:01:26 +0000
Manifest this update: Mon 02 Mar 2026 00:01:26 +0000
Manifest next update: Tue 03 Mar 2026 00:01:26 +0000
Files and hashes: 1: GYTArtIgvINKT637yicE0RzC_gA.roa (hash: Lep0lB2c1nnq/plQOSLHCa5SiVLmUmJL/Hit/FXoSs8=)
2: Ua-8FGJFXphp1IslexjiO-d6psM.crl (hash: 3TzvOt1nZLR0q/R1F1aI8JutaBGKsTYMxmlI4NxdLV8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:8b:d1:07:96:b2:ac:f9:ee:38:e1:f4:7e:26:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51afbc1462455e9869d48b257b18e23be77aa6c3
Validity
Not Before: Mar 2 00:01:26 2026 GMT
Not After : Mar 3 00:01:26 2026 GMT
Subject: CN=17ba5a3cc884bdace0e06edbfbfd58f9b26121b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:03:35:3b:16:78:18:61:3b:21:c3:ca:16:55:
67:26:65:01:1f:03:be:fb:43:54:ec:bb:51:ee:01:
b9:43:5b:1b:b6:72:f6:3e:77:27:b2:8f:b3:53:5e:
4a:35:0a:2a:af:cc:49:1e:2a:f5:53:3d:de:26:8a:
1f:ab:d4:90:32:49:90:61:85:74:5d:1a:55:aa:6a:
13:2e:cd:6e:4e:87:52:6a:55:25:05:97:3e:5b:db:
b5:d6:d1:04:65:14:aa:27:43:54:fb:f3:fd:3e:21:
c5:8f:78:97:f1:d1:e8:b3:ba:be:07:9f:b0:f5:71:
0c:21:fe:61:b7:bd:1a:6f:ef:25:6b:3a:30:ec:cf:
a2:99:04:c5:68:d0:89:e6:84:95:5f:a1:a4:b0:2b:
b7:5b:cd:30:0b:dd:bb:ef:f5:18:2d:f9:de:b9:ab:
2d:9a:9f:ce:9a:53:de:2b:dc:7d:ec:c9:71:b1:a5:
b2:12:22:b0:5b:8f:08:8c:45:53:83:8f:52:c7:52:
d6:7f:26:35:f1:c0:29:c2:da:5a:55:da:90:da:d8:
85:5e:0d:04:fd:d5:c5:50:9d:e8:1a:29:54:dd:6c:
08:51:5d:64:d9:fd:b0:b4:dc:93:98:d4:7b:d3:cc:
2e:f0:d1:f8:ef:ad:70:d9:e8:cf:22:ed:7d:f0:5c:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:BA:5A:3C:C8:84:BD:AC:E0:E0:6E:DB:FB:FD:58:F9:B2:61:21:B2
X509v3 Authority Key Identifier:
keyid:51:AF:BC:14:62:45:5E:98:69:D4:8B:25:7B:18:E2:3B:E7:7A:A6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ua-8FGJFXphp1IslexjiO-d6psM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/70599d-c474-4123-a743-a201dfabdab1/1/Ua-8FGJFXphp1IslexjiO-d6psM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:df:f5:66:36:08:b5:17:32:e1:06:0b:ca:2b:d0:06:41:3e:
45:c4:b3:b9:a8:ff:82:01:8c:38:05:e2:34:66:80:d9:16:e9:
f2:16:91:14:f3:89:6c:ac:62:39:f9:8b:cb:2c:c9:6b:64:18:
e3:8d:06:2a:e1:9f:d5:4f:f1:8f:fd:16:b3:18:10:ff:44:39:
b1:c3:8f:30:a7:81:35:a2:64:82:ee:d6:62:27:f8:58:a2:ff:
7a:56:3d:9b:3d:2b:e3:e9:b5:87:0d:78:c7:8f:c8:51:97:aa:
49:42:78:6b:73:b2:dc:50:55:bf:4d:17:3f:d3:14:a2:5b:41:
c2:a1:01:f5:8b:15:0b:cb:ff:8d:29:ae:2a:04:fc:40:cd:d0:
7f:db:55:0a:e5:1a:5b:9e:bd:9c:d4:7a:a4:85:65:ab:e5:d0:
59:3a:bb:a1:d7:32:5e:41:78:9c:ed:cc:9a:cc:a6:92:38:90:
6a:f4:a3:f2:e9:f0:fa:81:bb:41:69:97:21:19:d5:ad:ab:b8:
f5:77:11:b7:ca:2f:1b:29:0d:83:6f:a3:0c:0b:9b:2d:9e:5f:
fd:0a:06:e3:e6:36:13:bf:5d:c1:2f:3a:a5:9a:0b:ac:da:28:
8a:15:70:32:f2:b0:a6:db:c2:9a:7e:d3:f3:41:08:0a:38:da:
9d:4a:22:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2YvRB5ayrPnuOOH0fiZIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWZiYzE0NjI0NTVlOTg2OWQ0OGIyNTdiMThlMjNiZTc3
YWE2YzMwHhcNMjYwMzAyMDAwMTI2WhcNMjYwMzAzMDAwMTI2WjAzMTEwLwYDVQQD
EygxN2JhNWEzY2M4ODRiZGFjZTBlMDZlZGJmYmZkNThmOWIyNjEyMWIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAywM1OxZ4GGE7IcPKFlVnJmUBHwO+
+0NU7LtR7gG5Q1sbtnL2Pncnso+zU15KNQoqr8xJHir1Uz3eJoofq9SQMkmQYYV0
XRpVqmoTLs1uTodSalUlBZc+W9u11tEEZRSqJ0NU+/P9PiHFj3iX8dHos7q+B5+w
9XEMIf5ht70ab+8lazow7M+imQTFaNCJ5oSVX6GksCu3W80wC9277/UYLfneuast
mp/OmlPeK9x97MlxsaWyEiKwW48IjEVTg49Sx1LWfyY18cApwtpaVdqQ2tiFXg0E
/dXFUJ3oGilU3WwIUV1k2f2wtNyTmNR708wu8NH4761w2ejPIu198FyvXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe6WjzIhL2s4OBu2/v9WPmyYSGyMB8GA1UdIwQY
MBaAFFGvvBRiRV6YadSLJXsY4jvneqbDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMt
YTIwMWRmYWJkYWIxLzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny83MDU5OWQtYzQ3NC00MTIzLWE3NDMtYTIwMWRmYWJkYWIx
LzEvVWEtOEZHSkZYcGhwMUlzbGV4amlPLWQ2cHNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAw9/1ZjYI
tRcy4QYLyivQBkE+RcSzuaj/ggGMOAXiNGaA2Rbp8haRFPOJbKxiOfmLyyzJa2QY
440GKuGf1U/xj/0WsxgQ/0Q5scOPMKeBNaJkgu7WYif4WKL/elY9mz0r4+m1hw14
x4/IUZeqSUJ4a3Oy3FBVv00XP9MUoltBwqEB9YsVC8v/jSmuKgT8QM3Qf9tVCuUa
W569nNR6pIVlq+XQWTq7odcyXkF4nO3MmsymkjiQavSj8unw+oG7QWmXIRnVrau4
9XcRt8ovGykNg2+jDAubLZ5f/QoG4+Y2E79dwS86pZoLrNooihVwMvKwptvCmn7T
80EICjjanUoiMQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:31 2026 by rpki-client