Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: FVoefbGTPg6XaPl4MXYSkKpbXlaP2ytbkRGGjbmtxO0=
Subject key identifier: 24:BF:2E:47:AB:B0:3C:F1:DD:7C:94:0D:27:88:50:39:6E:DA:C5:D5
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019ED499EB14FE97192F330F8368E1A041DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 128A
Signing time: Wed 17 Jun 2026 08:01:57 +0000
Manifest this update: Wed 17 Jun 2026 08:01:57 +0000
Manifest next update: Thu 18 Jun 2026 08:01:57 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: 1yCoovgXi6rEEYP+5eLxucBFJXw5aXycHFrPGY2nzHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d4:99:eb:14:fe:97:19:2f:33:0f:83:68:e1:a0:41:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Jun 17 08:01:57 2026 GMT
Not After : Jun 18 08:01:57 2026 GMT
Subject: CN=24bf2e47abb03cf1dd7c940d278850396edac5d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:dd:ce:87:75:68:b4:80:3d:2e:1f:c1:43:de:
2b:22:5d:76:ce:de:27:18:af:82:36:d7:08:17:1c:
dd:40:92:ab:17:aa:67:26:51:61:b4:9b:24:e6:c9:
d9:10:44:c1:9e:2d:2a:fb:d1:9c:3a:cf:54:2f:1d:
e5:2e:ed:5a:0c:8a:14:6d:6e:12:17:e1:6e:11:74:
b0:6a:0d:e2:55:e6:f9:2d:c8:91:1c:b4:a8:46:92:
e8:6b:83:e3:ad:76:c7:fc:56:0c:e3:2c:62:bb:15:
52:f3:6e:a5:c6:1b:6e:0b:37:de:38:11:99:c5:07:
29:eb:7e:59:19:b5:7d:90:07:b4:8c:d4:af:1e:47:
8d:08:d1:70:57:85:03:3a:76:7b:de:e6:ae:44:f0:
37:a9:4c:df:e5:53:9e:b0:0f:4d:2c:d3:00:59:68:
b6:7c:2d:91:45:8d:40:a9:e5:dc:8b:1a:d1:24:e7:
6c:c0:10:78:b2:5b:3c:bc:e9:c2:38:e5:2f:7b:bb:
d8:eb:80:e0:9e:28:c3:70:a1:a1:f9:16:75:bd:37:
5b:1d:d4:a5:cc:80:9b:d4:79:e0:d1:b2:ea:73:81:
b9:41:a6:a2:75:6a:f2:cf:97:f3:c9:f5:18:40:ec:
d6:50:dc:4d:62:9e:76:e3:1c:b5:e5:43:38:c7:f5:
89:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:BF:2E:47:AB:B0:3C:F1:DD:7C:94:0D:27:88:50:39:6E:DA:C5:D5
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:68:e6:71:1d:39:d0:5a:76:29:3f:75:29:f5:c9:0d:af:37:
be:ff:5e:c4:66:3a:af:68:b2:b4:10:45:ca:ed:1c:95:f7:8c:
8f:92:da:e3:34:5e:a0:31:43:40:e4:71:51:0f:35:0d:2a:17:
6e:ae:b1:f2:8e:f4:07:06:22:0a:89:8e:d9:19:4d:a1:0f:ea:
fc:cc:fc:38:e9:2e:a4:3b:74:65:86:b4:79:52:c2:a0:ab:f5:
74:d1:b1:0d:c5:ad:3f:37:2f:8f:75:93:c6:7f:95:e7:0a:dd:
1e:13:da:67:32:37:a7:9c:a2:87:3a:8c:b6:ca:2d:2e:e0:ac:
ed:f7:ad:98:49:e1:c0:db:19:18:3e:9f:c2:48:12:62:f0:8d:
1e:32:f8:c3:be:03:10:0a:9a:c6:84:a7:cf:df:bd:85:d3:13:
d6:61:9e:40:e7:df:f5:37:6e:ca:32:19:9a:7c:f0:5b:e8:a4:
67:37:cb:ec:5b:25:3e:c4:3f:5a:0d:aa:4d:16:82:08:00:35:
ec:d0:c5:46:e5:02:6e:b4:54:74:f3:4f:ae:b9:fd:e8:78:ed:
28:8e:db:6b:b7:60:89:19:32:d2:47:58:20:18:93:61:21:3f:
f3:59:58:de:db:43:5d:b2:32:62:d5:db:f2:58:93:54:71:22:
dd:3e:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:47:19 2026 by rpki-client