Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
File: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft (raw, json)
Hash identifier: MEy5HKbG8xfxPCAdfx/a6/ECvyHD7VXv26VfgpM4NfE=
Subject key identifier: CF:E7:76:60:93:2B:0B:9E:E0:51:09:7B:F4:CB:32:FF:47:F4:EA:27
Authority key identifier: B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
Certificate issuer: /CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Certificate serial: 019EC2C9BB3C2E514644FF8E7EBE2615B8C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
Manifest number: 0D33
Signing time: Sat 13 Jun 2026 21:01:01 +0000
Manifest this update: Sat 13 Jun 2026 21:01:01 +0000
Manifest next update: Sun 14 Jun 2026 21:01:01 +0000
Files and hashes: 1: JiTEOh1beM9m1c5OH759yqvEl9I.roa (hash: iaA6RPeL2WvcIuJLk8rfC+Z8u5aZ9GGTIq103Krs76s=)
2: uG2U8A5c_YazFIY440Pr9nX8jNc.roa (hash: OfRROMf9ocaB/l9WW0MPwoR5osaLIox3gDEvLkHcQls=)
3: ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl (hash: GSEVyOCpnCurM5ZYQM33Zbyq0pgGcDBgR8l1NAuUz64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:c9:bb:3c:2e:51:46:44:ff:8e:7e:be:26:15:b8:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9af19f4a60daf15efb7ec41fc59f5da655972e6
Validity
Not Before: Jun 13 21:01:01 2026 GMT
Not After : Jun 14 21:01:01 2026 GMT
Subject: CN=cfe77660932b0b9ee051097bf4cb32ff47f4ea27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e5:c9:aa:b6:56:03:cb:30:da:0c:b0:a4:ba:
c8:52:e4:b2:1f:d2:85:3f:ca:cd:df:e4:14:fa:be:
8c:da:42:c7:e7:31:1d:82:8d:b5:7c:50:6d:e3:d8:
52:8e:fb:76:b8:5a:56:5b:5d:45:36:e4:fc:c1:85:
7c:96:04:46:12:55:f2:fe:4b:f9:0f:b4:0a:e4:6e:
f2:b0:41:05:04:5f:55:76:93:17:6d:8b:d7:8b:89:
69:b7:1d:bc:a8:ec:8b:55:dc:0e:e3:a3:95:3c:d7:
c0:2f:da:e3:28:5d:13:ab:83:71:1f:ba:e3:0b:4b:
d0:02:10:7f:27:53:91:51:fe:08:71:e5:f5:07:6b:
e0:31:77:05:d5:71:df:d3:8e:2d:c6:8b:36:2e:e3:
23:c2:1f:b4:6f:1d:1e:4a:7c:01:b4:b9:86:fe:1c:
76:07:34:90:92:e6:89:f0:96:6a:45:24:d6:fa:b7:
3c:13:af:67:11:3f:46:90:cb:55:7e:a0:ed:43:d3:
cf:c9:e5:d2:2a:86:1d:13:1f:ee:45:cd:08:a5:09:
e0:02:db:d6:05:4b:7e:b6:8d:34:35:a0:d0:62:ec:
1b:8d:66:97:a3:e3:ae:5a:86:66:a5:87:9a:10:35:
08:3e:7d:8c:8d:fe:80:10:46:0f:96:7f:98:4e:65:
a7:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E7:76:60:93:2B:0B:9E:E0:51:09:7B:F4:CB:32:FF:47:F4:EA:27
X509v3 Authority Key Identifier:
keyid:B9:AF:19:F4:A6:0D:AF:15:EF:B7:EC:41:FC:59:F5:DA:65:59:72:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/14f46c-0a36-4cc3-b091-7425b13d5cf8/1/ua8Z9KYNrxXvt-xB_Fn12mVZcuY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:e6:a7:41:36:05:5c:9e:35:46:a5:8a:b4:8a:fd:a2:e0:d4:
87:fb:7f:a4:19:c9:81:2d:fd:cc:f9:19:81:68:59:d7:8f:30:
e3:9f:91:26:46:b8:e6:f8:4f:ea:13:18:f4:c1:d3:51:70:9e:
62:20:9f:d2:a2:05:44:62:15:45:ae:3a:e4:9f:bc:68:c1:93:
2a:61:d0:ce:f7:5c:b0:21:58:9f:22:f5:bf:75:41:77:f1:95:
f6:9f:59:55:16:1b:e0:37:a1:50:cd:bc:69:02:2d:86:0f:93:
8b:c6:d8:fd:03:b3:b0:94:28:28:0e:8a:f1:51:68:48:2e:22:
1e:c8:92:71:60:5a:d2:b3:3d:17:63:80:d3:26:bf:86:95:e9:
80:86:47:36:aa:46:67:9b:58:f0:9a:e9:55:4d:8d:a9:1c:62:
73:de:43:48:6b:bc:70:49:ba:99:d5:0d:75:fa:5f:cd:20:8a:
34:ac:6c:01:59:be:d3:e2:0f:df:25:60:f8:6e:06:56:37:1e:
df:27:ab:29:69:59:74:09:1c:18:61:d7:d8:46:12:73:82:15:
40:4a:f4:78:07:10:90:e4:79:ed:2b:c8:35:55:a0:27:de:7f:
a8:c7:ba:92:38:be:8c:23:7b:ba:e1:4e:6c:55:9d:23:08:5f:
a9:70:aa:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:25:49 2026 by rpki-client