Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
File: uP5lGLdAqxQFS-d0iZKLuffa8O4.mft (raw, json)
Hash identifier: AynCETy7AUeG8vS3MhGG8C6M/5KeIXIdNRfvNIkZkIo=
Subject key identifier: 9F:A1:62:D9:28:7E:B2:F1:A2:EE:D4:9E:22:31:F2:B0:75:4E:45:55
Authority key identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
Certificate issuer: /CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Certificate serial: 019E28EFC6D64E9D07A4062B5C3DF6C32EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
Manifest number: 0154
Signing time: Fri 15 May 2026 00:01:02 +0000
Manifest this update: Fri 15 May 2026 00:01:02 +0000
Manifest next update: Sat 16 May 2026 00:01:02 +0000
Files and hashes: 1: 4JCwNfUv9gLIG6iBe09ZnK0H4TA.roa (hash: 4RF+vi5lJMgYaMGuykMUcyN+ULDUABSxuTpTzGdpNR8=)
2: MYaYUHXegH6A3meVfIW9b0WZCQI.asa (hash: HCtWYbG0IxlPZ6Hn3ACDheREE8y6xefhsWjII5d7rK0=)
3: uP5lGLdAqxQFS-d0iZKLuffa8O4.crl (hash: dJ2FoMCYKooyphh9ieRV57Tp4Mvrkb+Apb1QzfC2CYs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 00:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:ef:c6:d6:4e:9d:07:a4:06:2b:5c:3d:f6:c3:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Validity
Not Before: May 15 00:01:02 2026 GMT
Not After : May 16 00:01:02 2026 GMT
Subject: CN=9fa162d9287eb2f1a2eed49e2231f2b0754e4555
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:13:be:75:d4:eb:dc:d5:2e:11:cb:b3:7a:35:
c8:b8:75:35:84:d1:f1:14:4f:4e:17:6e:53:db:f1:
94:8f:9e:97:f0:67:a4:ba:df:fa:a3:80:18:88:e2:
25:a7:53:5c:c8:7f:58:d0:ca:e2:2b:0d:6f:e6:57:
fa:db:e4:13:00:02:2d:15:01:60:36:6c:98:8f:df:
3f:59:af:54:cc:bb:cb:6b:72:f1:42:d3:22:fc:71:
46:46:86:f0:2f:55:4d:79:c5:99:57:75:7a:7c:59:
ea:d7:b2:da:d3:f1:7a:9e:5e:00:ff:0c:a7:43:9f:
13:93:02:7f:84:95:24:f7:20:dc:f4:c0:f6:98:95:
e5:84:60:42:4a:10:53:a5:a5:c8:1e:1b:eb:a0:a7:
71:00:26:d1:ce:90:8f:f5:7d:14:78:b5:21:4e:49:
e1:bf:20:4a:f7:aa:e2:86:62:34:d3:62:5a:a6:e7:
90:bb:c4:70:dc:36:00:65:e5:15:36:6d:3a:7f:bd:
b8:30:aa:fd:93:ae:78:53:15:8c:9a:61:35:19:76:
cd:d7:d6:7f:65:b0:54:93:fd:f3:6b:12:17:37:22:
a4:e5:c1:91:d8:e4:d8:3a:15:5b:95:d4:44:7c:89:
92:5e:1f:8c:58:71:ea:a7:27:3d:f6:bf:21:5a:0c:
b5:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A1:62:D9:28:7E:B2:F1:A2:EE:D4:9E:22:31:F2:B0:75:4E:45:55
X509v3 Authority Key Identifier:
keyid:B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:b6:e4:32:96:33:ef:1b:5f:ec:3a:b2:40:ca:72:6e:48:82:
58:cd:18:91:4f:6d:87:08:19:b9:2e:f4:fe:69:02:ee:44:2f:
0b:21:e5:39:43:92:2f:8d:ec:97:28:a6:76:69:c3:db:9a:3d:
f1:f7:30:bc:a0:42:bd:5e:e9:33:d7:28:4f:d5:31:bf:b4:cb:
d7:c2:2f:92:65:e2:5a:45:84:53:e5:d0:81:63:df:fa:46:32:
b4:6e:e5:06:c4:40:62:48:a8:b2:9f:08:0b:23:0f:82:db:ae:
0c:7d:13:87:3f:9c:68:7a:61:ed:e6:64:6a:63:48:38:aa:9c:
96:41:58:b6:2f:9d:79:d4:7e:9a:47:19:3a:e8:7d:6b:9c:6c:
1d:f3:23:45:90:2c:10:97:a4:77:a0:b1:f8:de:c3:ba:e3:71:
b4:19:6a:64:fd:75:fc:ad:28:08:b4:36:9e:5d:ac:5d:3e:7d:
e9:06:02:17:71:44:4b:3b:63:82:3c:3d:bd:65:d8:00:db:f8:
dc:fd:63:5a:31:82:f4:b0:f2:d3:06:2e:c9:44:33:5d:04:08:
32:58:3f:8d:9d:42:d5:a1:2c:e4:39:6a:35:fe:78:b3:5a:aa:
ea:74:01:0d:56:cf:52:77:c1:f6:6b:88:1a:0a:14:a1:4d:31:
95:c3:91:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:15:38 2026 by rpki-client