Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
File: UAFR5GSyl5E3bAxXvrQMWE71oc8.mft (raw, json)
Hash identifier: N1TxMAAHvmvrRBveu1l6M11SHs85E4zWpx6GkmwVhBM=
Subject key identifier: A0:84:0E:ED:F2:B6:2A:02:F1:5D:72:E8:E2:E7:47:F7:7F:72:A6:57
Authority key identifier: 50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
Certificate issuer: /CN=500151e464b29791376c0c57beb40c584ef5a1cf
Certificate serial: 019DA378CBA78DE2B6EAC8851AD76DF8DBF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
Manifest number: 11EC
Signing time: Sun 19 Apr 2026 02:01:35 +0000
Manifest this update: Sun 19 Apr 2026 02:01:35 +0000
Manifest next update: Mon 20 Apr 2026 02:01:35 +0000
Files and hashes: 1: DQXO04aHVF3WA-Uo1KSu2Uv_5Z8.roa (hash: Bz0GwY7uz2/9HGwt667qRq1fWspWzC65aQYWTQYVTX4=)
2: E38S2iuMO9vMOny68uYZj610htc.roa (hash: j5FESm0d3Q8JXR8RXWmvIsv0pwl9dgxNmPqCykFcXso=)
3: UAFR5GSyl5E3bAxXvrQMWE71oc8.crl (hash: McTDWgjZr7ZqiSlmH5wtesSytdgI/TaPhgeY6i0us7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:cb:a7:8d:e2:b6:ea:c8:85:1a:d7:6d:f8:db:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500151e464b29791376c0c57beb40c584ef5a1cf
Validity
Not Before: Apr 19 02:01:35 2026 GMT
Not After : Apr 20 02:01:35 2026 GMT
Subject: CN=a0840eedf2b62a02f15d72e8e2e747f77f72a657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:bd:2b:52:ba:88:46:dd:b3:2f:7e:39:19:09:
82:3d:ff:48:8b:27:61:a6:e2:be:1d:a2:f0:9d:d4:
ef:3c:48:26:54:db:45:fa:74:1f:13:5f:8d:3d:b1:
60:5a:5d:7b:71:c3:3b:dd:9e:c2:83:af:10:f5:ef:
91:e4:cd:09:0a:0e:48:5c:32:c3:29:d6:3b:5b:59:
7e:20:8b:d1:82:cc:a8:3b:1c:ab:3f:fc:b8:31:16:
08:99:88:8f:3c:67:64:4c:91:23:d3:e5:c7:f1:c1:
3a:e5:27:24:8f:9a:96:3d:79:6e:f0:a1:ce:08:4b:
c2:98:fd:f2:8c:a6:d4:77:18:8c:d1:1b:db:2f:dd:
69:e3:5e:d2:4e:34:cf:c2:0e:9e:d1:29:fa:a1:2b:
d6:1a:6a:8f:55:a5:dc:94:8d:c1:d7:f6:34:46:ac:
21:37:d2:ec:55:4a:12:ac:51:4d:1c:b5:da:60:12:
35:05:c1:44:2f:27:1a:ad:ae:c4:c7:6a:6c:00:25:
6e:5d:de:a3:59:ff:5b:85:be:21:1a:90:c4:b9:bf:
bd:ab:44:12:ab:a8:c7:51:9a:f5:79:ce:24:18:16:
e0:50:32:96:47:28:af:8c:e2:cd:0e:9a:ce:c4:2a:
34:83:42:3f:f4:d7:1f:84:c9:c2:d8:c5:80:81:97:
e9:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:84:0E:ED:F2:B6:2A:02:F1:5D:72:E8:E2:E7:47:F7:7F:72:A6:57
X509v3 Authority Key Identifier:
keyid:50:01:51:E4:64:B2:97:91:37:6C:0C:57:BE:B4:0C:58:4E:F5:A1:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAFR5GSyl5E3bAxXvrQMWE71oc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4a12c2-9bed-45dd-863c-0b9fb97e529d/1/UAFR5GSyl5E3bAxXvrQMWE71oc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:70:81:90:e9:65:32:0a:3c:b9:6d:bb:64:ab:97:09:f7:f6:
e1:47:e1:26:12:bb:bc:d1:47:ee:d6:83:5a:a2:b7:a9:ad:bc:
19:60:19:00:a9:c4:92:83:70:6b:5e:65:a0:0e:d7:27:b6:b4:
e2:de:7f:da:bd:e3:e6:db:b2:46:cf:4c:97:4d:61:66:7c:45:
32:5c:6a:49:c6:02:40:d0:22:d0:f7:28:9c:f4:4f:de:65:24:
65:d6:6d:b4:47:8b:57:6d:a6:ea:05:e9:32:96:df:54:ea:33:
37:a3:65:c9:a5:24:93:a1:c8:80:98:c6:48:42:6a:59:f1:58:
fd:6c:f2:ac:d0:63:d9:a8:5b:18:a1:b9:04:2d:08:fa:43:44:
7d:93:00:bc:f3:93:95:de:b8:d7:87:f2:4b:6f:12:86:32:4f:
44:c5:3a:8f:58:85:88:72:b5:95:f7:ca:f6:d2:41:20:c9:3d:
cb:dd:79:23:a2:d5:ef:cf:a0:c4:ae:3f:bf:ae:9a:89:ba:39:
11:ff:52:c4:27:fe:df:41:bd:cc:de:8a:f9:d9:0b:f3:38:11:
a0:81:e7:3e:bd:38:68:0f:76:b6:27:20:c7:b6:51:fa:17:7a:
cf:ac:8a:3c:92:d8:3e:a3:46:80:16:b4:3b:b1:f2:5a:e1:db:
34:ee:57:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jeMunjeK26siFGtdt+NvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDE1MWU0NjRiMjk3OTEzNzZjMGM1N2JlYjQwYzU4NGVm
NWExY2YwHhcNMjYwNDE5MDIwMTM1WhcNMjYwNDIwMDIwMTM1WjAzMTEwLwYDVQQD
EyhhMDg0MGVlZGYyYjYyYTAyZjE1ZDcyZThlMmU3NDdmNzdmNzJhNjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAur0rUrqIRt2zL345GQmCPf9Iiydh
puK+HaLwndTvPEgmVNtF+nQfE1+NPbFgWl17ccM73Z7Cg68Q9e+R5M0JCg5IXDLD
KdY7W1l+IIvRgsyoOxyrP/y4MRYImYiPPGdkTJEj0+XH8cE65Sckj5qWPXlu8KHO
CEvCmP3yjKbUdxiM0RvbL91p417STjTPwg6e0Sn6oSvWGmqPVaXclI3B1/Y0Rqwh
N9LsVUoSrFFNHLXaYBI1BcFELycara7Ex2psACVuXd6jWf9bhb4hGpDEub+9q0QS
q6jHUZr1ec4kGBbgUDKWRyivjOLNDprOxCo0g0I/9NcfhMnC2MWAgZfpkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKCEDu3ytioC8V1y6OLnR/d/cqZXMB8GA1UdIwQY
MBaAFFABUeRkspeRN2wMV760DFhO9aHPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80YTEyYzItOWJlZC00NWRkLTg2M2Mt
MGI5ZmI5N2U1MjlkLzEvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi80YTEyYzItOWJlZC00NWRkLTg2M2MtMGI5ZmI5N2U1Mjlk
LzEvVUFGUjVHU3lsNUUzYkF4WHZyUU1XRTcxb2M4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHXCBkOll
Mgo8uW27ZKuXCff24UfhJhK7vNFH7taDWqK3qa28GWAZAKnEkoNwa15loA7XJ7a0
4t5/2r3j5tuyRs9Ml01hZnxFMlxqScYCQNAi0PconPRP3mUkZdZttEeLV22m6gXp
MpbfVOozN6NlyaUkk6HIgJjGSEJqWfFY/WzyrNBj2ahbGKG5BC0I+kNEfZMAvPOT
ld6414fyS28ShjJPRMU6j1iFiHK1lffK9tJBIMk9y915I6LV78+gxK4/v66aibo5
Ef9SxCf+30G9zN6K+dkL8zgRoIHnPr04aA92ticgx7ZR+hd6z6yKPJLYPqNGgBa0
O7HyWuHbNO5X3g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:22 2026 by rpki-client