Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
File: ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft (raw, json)
Hash identifier: doerORSDhrI/nouzyNM0i99wxw8i452GDKnZ4q+ICXA=
Subject key identifier: F1:69:2E:5E:AB:2C:F4:49:6B:D3:79:B5:9D:D4:30:30:3F:CA:B7:28
Authority key identifier: B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
Certificate issuer: /CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Certificate serial: 01A12F8EEEE05811A38AE49AA77653CE19B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
Manifest number: 012F
Signing time: Mon 12 Oct 2026 10:00:58 +0000
Manifest this update: Mon 12 Oct 2026 10:00:58 +0000
Manifest next update: Tue 13 Oct 2026 10:00:58 +0000
Files and hashes: 1: Mi4FWu8IQL8LPIbJ4cZ51i4JsBg.asa (hash: 3s8qtOc3m27sIXzhaH51xhmyXBewTJuy9sQ/zV74ORM=)
2: ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl (hash: Vn4HsDuHkaSGVOYonXwXj5bRc/KgrSPP15qEeFORPEE=)
3: zBMcLd77LbRwu-15HrKqi2yyi1Q.roa (hash: iHUOLbWgSZf1fiwd7lTBMIB/vmb/88ZnKoALd8JP6QA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8e:ee:e0:58:11:a3:8a:e4:9a:a7:76:53:ce:19:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ae44dce5ab11a15ba9457827ea6f88f9340cd4
Validity
Not Before: Oct 12 10:00:58 2026 GMT
Not After : Oct 13 10:00:58 2026 GMT
Subject: CN=f1692e5eab2cf4496bd379b59dd430303fcab728
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:d1:fd:8f:10:20:69:52:a0:3d:6f:da:95:
09:1a:63:8a:fd:77:bf:1c:35:da:00:20:ad:b8:b7:
2e:22:9a:22:55:cd:ea:e8:e6:16:16:04:c4:06:2d:
28:18:9a:e0:12:6e:86:94:bf:e9:de:03:a6:72:4f:
c0:2f:a4:c9:3c:11:f4:66:8e:c7:50:49:1e:41:1b:
74:d3:b5:65:fa:1b:0c:24:06:c4:cb:71:ff:8f:fa:
60:ee:1b:a3:94:41:a5:19:61:4c:33:0e:1b:ae:fa:
64:87:c6:de:a1:f8:e8:14:1f:43:c2:b3:2f:f8:17:
00:be:7f:8d:a6:5a:cf:f9:81:c6:2d:cf:9c:5b:49:
b4:6b:8a:77:0b:80:47:84:02:07:06:b1:f3:bc:b9:
17:64:86:52:07:52:59:e5:a3:80:d5:29:73:43:10:
03:d8:61:66:52:d6:d5:a1:1d:28:99:bb:a9:e0:35:
74:5a:ef:3c:00:db:d5:c7:f1:8a:be:b4:22:e5:9d:
80:83:2a:d6:68:50:ec:a6:be:cc:c9:30:ae:25:86:
a2:a7:65:ca:e4:5c:e1:51:54:60:f0:d1:da:15:34:
e0:4c:be:f9:22:db:67:a6:6c:dc:72:25:95:32:51:
35:58:64:37:2e:91:63:87:b5:15:58:bc:dc:66:df:
48:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:69:2E:5E:AB:2C:F4:49:6B:D3:79:B5:9D:D4:30:30:3F:CA:B7:28
X509v3 Authority Key Identifier:
keyid:B9:AE:44:DC:E5:AB:11:A1:5B:A9:45:78:27:EA:6F:88:F9:34:0C:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua5E3OWrEaFbqUV4J-pviPk0DNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/188900-a662-459c-a2c6-8c78d6da164a/1/ua5E3OWrEaFbqUV4J-pviPk0DNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:4a:c0:4a:77:ed:71:fb:b9:69:9a:37:42:09:57:71:cc:2e:
a2:cf:2f:d3:79:c6:e9:b6:c6:1d:1e:0a:5f:95:d6:8d:f9:29:
9c:b8:6f:3d:4c:86:11:3c:23:f2:89:52:91:6e:5b:f4:67:d5:
64:33:db:fd:45:7c:c3:6e:49:8f:d7:4a:be:69:be:32:74:9c:
25:61:f2:28:57:3a:47:a0:f3:c8:1b:01:c5:cd:4b:0b:1a:7e:
1b:f2:bf:5f:43:f6:cb:89:9a:62:4d:a9:97:7b:30:33:e3:c0:
d2:ac:61:56:7d:06:d4:8c:b7:ff:fc:7e:12:22:f2:59:9a:70:
84:e8:09:ea:6c:50:7e:f2:93:b3:1b:d3:57:b2:87:aa:24:66:
8c:f6:2e:dd:16:37:c5:60:cd:d4:11:a2:18:79:0d:fd:ad:d2:
d3:e8:15:2a:5e:89:22:b6:7d:fb:6b:3b:90:ad:12:19:c5:19:
aa:d7:ac:c8:30:3c:4f:2a:4d:64:39:c8:c9:a4:93:18:cc:02:
bf:e7:bf:a6:cb:2c:45:f8:55:b7:f1:4c:c7:7c:fa:75:cd:30:
c3:e3:bf:53:ab:67:6d:86:a3:4c:4a:26:96:09:91:30:71:7c:
f6:a2:45:b1:b6:3a:9b:38:e5:d8:5d:fb:98:bc:80:de:77:00:
0c:87:92:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 16:47:49 2026 by rpki-client