Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: R6aOIYglrMWPBzVUXttCNy7RPNZLNaJed9N6tThu3qo=
Subject key identifier: 31:67:4F:70:E3:76:3D:95:B3:23:27:7A:DD:55:BA:A0:2E:5B:DA:41
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019CAA58EF5805CBAADDF9B51806C9AD442A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 116B
Signing time: Sun 01 Mar 2026 17:01:21 +0000
Manifest this update: Sun 01 Mar 2026 17:01:21 +0000
Manifest next update: Mon 02 Mar 2026 17:01:21 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: +A82lzGLmpgpZ8BUGub3dDb2O2DXJKQgt/U13Qh0tSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:ef:58:05:cb:aa:dd:f9:b5:18:06:c9:ad:44:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Mar 1 17:01:21 2026 GMT
Not After : Mar 2 17:01:21 2026 GMT
Subject: CN=31674f70e3763d95b323277add55baa02e5bda41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:1f:a3:fc:e8:2a:c7:9d:50:c9:c7:93:4f:4e:
98:86:58:cf:cd:ab:c2:29:09:c3:80:a7:3f:e0:7d:
3f:1e:4a:51:1c:4d:f9:fc:93:9e:c6:07:85:69:16:
e8:8b:02:2b:9a:7d:a1:6c:70:de:71:02:d1:13:96:
63:b7:93:8e:d0:f2:42:99:72:20:23:4a:1e:f5:22:
7a:ce:c0:4b:2a:b0:1b:91:11:81:ff:ab:f5:68:43:
d0:a9:0c:ce:ec:53:70:b9:7e:dc:fc:53:04:4f:68:
64:7a:d9:2f:a7:7c:ab:08:3c:b1:2a:a1:b2:8f:8d:
fb:4f:84:53:43:33:bd:50:11:33:c8:b7:9b:c3:77:
67:bf:84:dc:b7:0a:42:da:f0:61:b4:cc:ff:19:26:
72:7b:eb:53:00:9a:5a:7a:07:ba:02:f0:a1:dc:f5:
e1:f8:95:1e:ae:64:54:d5:49:46:cf:85:08:57:9e:
c2:67:39:a4:71:15:3a:5d:1c:b6:0f:7a:49:17:1c:
fa:76:c8:93:51:5e:bd:b4:e7:4e:f6:ac:a7:eb:08:
44:1a:75:fd:ff:4d:bc:9e:7e:29:73:de:66:1c:b3:
f4:9d:a8:2e:ad:73:9d:36:45:f6:bf:c4:b4:58:ec:
b4:04:5e:6c:bb:04:3a:13:93:4d:46:06:80:fa:81:
5f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:67:4F:70:E3:76:3D:95:B3:23:27:7A:DD:55:BA:A0:2E:5B:DA:41
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:0f:23:10:6d:f9:2e:5a:92:b5:ee:c8:b4:86:20:54:c4:67:
51:23:86:67:b8:28:23:02:c2:e1:42:c2:a1:e0:da:e8:a3:5a:
41:18:c9:fa:72:56:52:2b:87:2d:44:41:ae:10:76:ac:ee:9b:
3e:70:9f:4d:52:fe:96:fb:92:9a:b8:a3:02:c7:8e:5d:d3:aa:
cc:64:e8:85:87:07:1b:bf:e9:aa:d7:3d:01:0d:b3:f2:a2:ad:
3a:e9:7a:f3:ba:4a:5b:5b:e3:0f:51:61:8f:b5:9d:23:3e:65:
f4:38:5e:61:c1:94:43:e2:3f:fd:22:85:fb:a6:94:b4:20:64:
cd:3f:e6:2e:ec:81:7f:1b:14:ed:4d:85:df:a0:41:81:f1:c8:
9d:1e:b9:de:e0:ee:07:38:74:38:18:18:5d:af:81:9f:ea:9d:
a6:89:fd:25:c0:86:d9:6a:62:d8:56:85:24:c2:2d:4a:31:2b:
c2:28:94:f4:be:d0:c2:b0:5c:de:f1:2c:c7:72:a7:75:aa:bc:
71:b8:8c:24:a1:25:56:49:00:bc:6d:fa:5b:52:0a:97:9e:f6:
31:51:c5:c2:de:96:8a:14:6d:58:0f:49:81:fe:a1:f3:95:02:
be:2f:9a:e3:24:6f:df:64:6e:52:18:19:c3:cd:ff:da:05:c5:
22:c1:ff:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:28:36 2026 by rpki-client