Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
File: UeK-E5rnec09T-68zTaCgaH156A.mft (raw, json)
Hash identifier: +OFuYrqQeoSE4j94k2qgBv4C4fcFnG/77nWIwNxbg+k=
Subject key identifier: F3:D8:B1:07:CC:AD:2B:57:C8:A0:35:C3:A7:60:3C:32:69:90:30:45
Authority key identifier: 51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
Certificate issuer: /CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Certificate serial: 019FAA87FBB1F7ADB6D3820855774E07201C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
Manifest number: 19D2
Signing time: Tue 28 Jul 2026 21:01:06 +0000
Manifest this update: Tue 28 Jul 2026 21:01:06 +0000
Manifest next update: Wed 29 Jul 2026 21:01:06 +0000
Files and hashes: 1: Fh1t7rzPIhJXnOEVD4FNHFJov6I.roa (hash: xyxnFW4AuKmT8OTwF87A3TgtZBfvGtO+UCiL5cJIqm4=)
2: UeK-E5rnec09T-68zTaCgaH156A.crl (hash: koM2es9JN7bl/cp0GKa5EFgWC0aDfJ8fa9HA3+gp1Ss=)
3: _FC9hMLG7SF2_l0VnWxgvnPruLU.roa (hash: /T+U+cTcUNtTkJxXrz2mxyyoddVM2fTKoj6v8XpQa6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:87:fb:b1:f7:ad:b6:d3:82:08:55:77:4e:07:20:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e2be139ae779cd3d4feebccd368281a1f5e7a0
Validity
Not Before: Jul 28 21:01:06 2026 GMT
Not After : Jul 29 21:01:06 2026 GMT
Subject: CN=f3d8b107ccad2b57c8a035c3a7603c3269903045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7e:a8:67:24:5e:69:8a:5e:f7:bb:3f:60:46:
d9:0e:5e:9d:e0:0b:52:73:de:c8:a7:bd:fc:5f:1d:
e5:8b:24:d7:23:47:80:0c:e2:3f:fb:97:68:4b:96:
ba:b6:fe:be:b8:df:b2:86:0c:ef:8f:f7:11:4d:5d:
20:3d:d5:4f:49:3c:aa:8f:fd:80:ec:c9:53:2e:3e:
ee:d8:a8:0d:05:25:6e:d4:b2:fc:28:4e:1b:b1:21:
67:0e:62:bc:28:7d:33:b3:af:c2:d2:cf:57:41:ae:
6d:01:ca:c0:15:84:d1:f3:88:dd:e5:87:fc:a9:8f:
26:53:b2:39:8d:bc:3b:b8:c7:89:f0:a9:09:8f:d2:
f6:5e:d7:82:f0:0e:35:fe:b1:47:e7:6c:ee:df:93:
80:51:7c:87:6c:4f:a1:b0:a6:51:cb:b7:cb:90:71:
43:13:19:23:78:77:79:94:e3:17:53:bd:8f:b7:6b:
c9:25:ee:2d:02:0e:cd:e5:2f:41:42:17:9d:db:46:
0c:c4:ee:82:d0:73:a0:20:91:ed:da:a2:95:36:68:
cc:6f:21:ba:65:03:b7:8a:1f:1f:9d:47:d4:b7:fc:
3a:45:15:4b:d1:1b:d6:a8:ff:72:fa:21:44:36:8a:
1b:ba:3d:91:bc:8b:8a:d1:2f:b9:33:31:a8:09:6a:
c3:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:D8:B1:07:CC:AD:2B:57:C8:A0:35:C3:A7:60:3C:32:69:90:30:45
X509v3 Authority Key Identifier:
keyid:51:E2:BE:13:9A:E7:79:CD:3D:4F:EE:BC:CD:36:82:81:A1:F5:E7:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeK-E5rnec09T-68zTaCgaH156A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/2f5931-05a8-436b-9273-cd7b6edbfcf5/1/UeK-E5rnec09T-68zTaCgaH156A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:5e:a7:7e:91:9e:30:c1:0c:cd:ac:a6:b6:9d:d7:b1:18:1e:
24:4b:5f:ef:ac:d4:e0:26:a1:0d:5b:af:46:30:8d:c8:7a:3e:
2c:e4:d5:27:32:0e:cc:1f:40:e8:10:34:b9:0c:71:86:25:4f:
3f:0c:e3:71:fe:14:2f:d7:18:07:07:a7:1d:30:83:fc:ac:6e:
f1:a6:fd:5b:f2:25:89:a2:cf:a9:86:9f:32:67:93:29:db:16:
df:cc:80:a9:36:fb:62:9e:f2:cf:63:cf:f6:98:c5:07:a8:26:
f5:2e:60:53:c6:ca:2c:9d:22:f9:a3:6a:6b:61:0e:10:8f:80:
d6:17:0a:d6:6f:31:4d:fe:35:00:b4:07:db:76:c1:e3:c3:b4:
3a:a4:9c:d9:4c:3a:42:63:03:a1:f8:f3:c3:0d:d2:24:f6:b3:
47:eb:4c:03:33:94:71:32:89:21:82:9e:85:95:dc:61:95:83:
18:97:1c:41:5f:3f:4b:90:cb:12:ef:9e:d9:0c:89:37:ac:c0:
b3:75:94:bb:4f:a6:3f:0d:75:bd:a4:af:9f:88:2d:ac:7b:34:
96:59:6a:b8:fa:e9:01:ea:cf:21:a8:ec:db:43:f7:2f:64:26:
5f:32:64:18:58:fe:3f:a4:c5:55:cc:6d:c3:0f:6f:db:34:de:
58:33:e1:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:22:39 2026 by rpki-client