Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: 1bXiEGDqpeBA+94SYPEb21RhSLrVRc2MkRN24U+oU4U=
Subject key identifier: C5:EB:D7:6A:30:65:65:05:A4:04:D2:32:81:4D:59:A7:05:C2:17:C1
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019FAC76D6D519715514FF5B050FB9E39049
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0DAC
Signing time: Wed 29 Jul 2026 06:01:37 +0000
Manifest this update: Wed 29 Jul 2026 06:01:37 +0000
Manifest next update: Thu 30 Jul 2026 06:01:37 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: 9wPZN0kreZ7DoXKqtQ0fNrk1jj61FaaItyqMMY0Xkf0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:76:d6:d5:19:71:55:14:ff:5b:05:0f:b9:e3:90:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jul 29 06:01:37 2026 GMT
Not After : Jul 30 06:01:37 2026 GMT
Subject: CN=c5ebd76a30656505a404d232814d59a705c217c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:eb:dc:de:16:1b:0d:46:05:97:cc:70:56:5b:
6c:7a:7b:77:3c:53:06:51:c0:8e:ff:5f:08:01:aa:
84:3f:19:7e:97:e1:97:48:b1:42:5d:86:77:7f:76:
8b:b1:04:4c:d5:68:5c:3c:cc:6d:38:ef:06:41:98:
a9:7a:ee:9c:03:79:e3:7c:19:99:47:72:d8:e2:c2:
80:8e:02:6a:60:41:e9:e0:ec:72:b4:11:f7:b3:c5:
77:f9:e9:d3:7c:80:19:eb:b1:e3:c7:c3:41:bf:ab:
ee:3c:92:f9:d9:63:c3:0b:6b:9c:b4:5f:50:6a:02:
39:57:d5:8b:d1:60:0c:8a:7b:51:c0:5f:c2:26:32:
57:a1:16:84:0e:cd:1e:de:95:b4:98:1a:bd:5c:b6:
69:e7:e9:c5:e9:af:18:17:de:4b:2b:c6:e7:cf:e9:
6a:b8:b6:22:65:bd:25:05:98:b3:87:51:a1:eb:70:
a2:db:7f:fa:18:ca:c0:01:35:20:9c:61:c8:87:c6:
da:a1:ff:30:7a:cc:64:d4:08:ce:c4:50:9e:1c:39:
0a:ef:57:50:5e:ed:d2:35:49:68:0f:f8:0e:2c:0b:
8e:06:51:49:21:3b:d6:f6:f4:d9:40:fb:63:a5:ee:
50:66:64:38:5c:f3:17:df:97:90:af:94:32:29:86:
ee:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:EB:D7:6A:30:65:65:05:A4:04:D2:32:81:4D:59:A7:05:C2:17:C1
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:c4:b2:f9:a6:61:2e:79:9b:d0:7a:00:4d:04:5d:19:cd:c3:
a0:32:c3:97:fe:c0:9d:bb:e9:48:ef:6e:2a:cd:27:50:51:a6:
ed:be:8d:57:66:d6:9e:37:68:bd:be:ad:d3:55:ef:b1:9d:6d:
10:73:a0:93:55:fe:d8:5b:95:f0:c3:93:c6:e3:1a:ff:9c:17:
10:43:e5:1f:ed:59:47:c5:ee:11:33:fe:b3:51:72:b1:27:88:
3f:1d:12:16:c8:3e:b5:03:17:5e:89:b4:89:2c:f4:1d:31:b9:
c8:f1:03:16:77:d5:89:b3:34:94:4f:ce:58:d3:b3:20:37:2d:
e8:b4:58:44:a7:83:a9:be:5b:8c:b8:00:e8:ec:be:64:1d:e2:
6e:7d:2b:4a:59:78:12:4d:80:97:73:14:c9:da:52:e8:d6:51:
b8:4b:6f:a2:25:4b:5a:b3:be:a9:fa:f3:aa:1d:7d:86:72:a2:
dc:68:ac:2b:0f:c3:c0:46:31:0a:be:58:2b:16:8e:cf:11:7d:
83:5f:b1:fd:4d:49:8b:ed:b6:d6:55:51:bc:d7:c7:ed:7a:2d:
26:31:85:cb:0f:5a:82:03:a7:91:29:53:d9:25:d7:20:2f:5b:
ee:a0:72:ef:bb:78:10:1b:c4:6a:e4:aa:99:b9:19:e8:ab:60:
f3:31:58:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:23:50 2026 by rpki-client