Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: 5+5Ayxkw57iGdA/zJNjhjIhEDCeKCrDj3Kl0sHU3OzQ=
Subject key identifier: 6B:86:0F:50:D1:78:96:DE:2C:B4:D1:DE:E1:A0:75:0A:97:82:B8:72
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019E4FC6F37F3D3D9BEB1A3662D2CA48B062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0F6F
Signing time: Fri 22 May 2026 13:01:38 +0000
Manifest this update: Fri 22 May 2026 13:01:38 +0000
Manifest next update: Sat 23 May 2026 13:01:38 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: WUpouG1ypL69lC7h5jYed92oTvFWrx8sN4xzLR5cDmw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:c6:f3:7f:3d:3d:9b:eb:1a:36:62:d2:ca:48:b0:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: May 22 13:01:38 2026 GMT
Not After : May 23 13:01:38 2026 GMT
Subject: CN=6b860f50d17896de2cb4d1dee1a0750a9782b872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:90:32:1d:fe:52:6e:d7:ff:2a:10:42:0c:0c:
f2:80:51:c6:05:5d:0f:2c:99:52:6f:67:ae:03:1d:
7f:66:d7:cf:40:8f:f2:fd:4b:72:2c:4f:e8:82:fc:
63:b8:8e:a3:92:0a:00:88:a1:d4:36:db:5d:dc:e0:
e4:36:30:bb:34:d9:88:f6:ef:73:fc:13:42:ea:9e:
aa:39:d6:10:34:73:69:e6:80:20:00:12:9c:03:60:
5a:51:0f:d1:92:09:fe:0b:60:76:80:74:b5:15:97:
02:91:a9:3c:2c:2a:e1:a5:56:b2:e3:e0:59:a3:e4:
87:82:de:8f:ef:ce:9d:81:b4:9e:7e:65:25:4e:17:
f7:8f:c7:ac:44:0b:d7:4f:fc:21:14:61:ac:c4:ef:
d1:b3:97:8b:c0:50:75:28:01:1a:33:ad:a7:52:4b:
f8:8b:d5:e8:62:6f:ae:37:ac:f4:ad:56:1b:81:0e:
31:b7:4f:88:d1:87:4a:78:6a:56:d0:25:d0:f1:6d:
97:3b:c5:fd:33:2e:4c:fc:de:d6:88:3f:f3:53:9e:
ca:ea:bd:93:83:73:ee:cb:12:f0:c0:73:f4:1b:a1:
d1:6a:46:84:d3:19:65:d6:30:b6:41:ff:a0:84:ff:
8e:ea:ad:de:c9:a4:17:23:b6:3a:09:e1:56:76:41:
b4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:86:0F:50:D1:78:96:DE:2C:B4:D1:DE:E1:A0:75:0A:97:82:B8:72
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:d5:4f:53:67:23:dd:79:4e:e6:f4:5a:a1:7f:8b:af:82:95:
8e:de:91:0f:42:38:85:04:dd:53:14:2d:0b:89:3c:36:9f:13:
20:10:89:65:ba:9b:92:37:c0:34:5b:47:9a:9f:ec:b4:16:a6:
1d:f8:e8:67:bd:cc:d3:c7:3a:71:bc:7b:77:f0:39:c3:34:7c:
75:1d:22:4f:93:57:b7:6e:f5:01:11:88:a8:39:75:a0:12:a7:
72:d3:82:65:08:71:02:b6:9e:f0:f7:f4:2c:93:53:8b:aa:45:
74:af:75:0f:ad:07:81:f3:d7:f7:13:95:2d:89:ea:6d:17:e2:
d3:8c:59:2c:a9:24:26:fa:c8:8d:0a:e0:6c:60:a9:e6:47:33:
9e:ad:d4:c7:d3:2f:af:09:cd:11:f1:84:7c:83:39:72:0b:e4:
85:89:c0:32:0c:b5:02:e2:6c:30:4c:9b:a5:ea:cd:e7:67:e7:
0c:8c:21:9f:48:43:d7:20:78:5d:30:7a:8a:b1:fe:a2:06:a2:
e0:b0:6b:84:ff:7e:ce:cb:af:ad:3d:6f:f3:42:a5:b8:dc:8d:
5e:cd:86:d3:51:67:fb:26:e4:dc:9b:bc:94:c9:94:5b:2e:48:
e8:e6:bf:39:69:63:69:fe:ab:27:c1:f7:36:84:af:b3:77:52:
f7:ae:9b:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ5PxvN/PT2b6xo2YtLKSLBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5YWIzNjEzOTQ2ODNlNGYyNDM5N2NmYzhmMjNlYWIyYzY4
MjhkZWEwHhcNMjYwNTIyMTMwMTM4WhcNMjYwNTIzMTMwMTM4WjAzMTEwLwYDVQQD
Eyg2Yjg2MGY1MGQxNzg5NmRlMmNiNGQxZGVlMWEwNzUwYTk3ODJiODcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAopAyHf5Sbtf/KhBCDAzygFHGBV0P
LJlSb2euAx1/ZtfPQI/y/UtyLE/ogvxjuI6jkgoAiKHUNttd3ODkNjC7NNmI9u9z
/BNC6p6qOdYQNHNp5oAgABKcA2BaUQ/Rkgn+C2B2gHS1FZcCkak8LCrhpVay4+BZ
o+SHgt6P786dgbSefmUlThf3j8esRAvXT/whFGGsxO/Rs5eLwFB1KAEaM62nUkv4
i9XoYm+uN6z0rVYbgQ4xt0+I0YdKeGpW0CXQ8W2XO8X9My5M/N7WiD/zU57K6r2T
g3PuyxLwwHP0G6HRakaE0xll1jC2Qf+ghP+O6q3eyaQXI7Y6CeFWdkG01QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGuGD1DReJbeLLTR3uGgdQqXgrhyMB8GA1UdIwQY
MBaAFLmrNhOUaD5PJDl8/I8j6rLGgo3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDct
ZGRmZWI0MjRhZGY1LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi8zNjBlZjktZWMyMC00ZTEzLTk2NDctZGRmZWI0MjRhZGY1
LzEvdWFzMkU1Um9QazhrT1h6OGp5UHFzc2FDamVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlNVPU2cj
3XlO5vRaoX+Lr4KVjt6RD0I4hQTdUxQtC4k8Np8TIBCJZbqbkjfANFtHmp/stBam
HfjoZ73M08c6cbx7d/A5wzR8dR0iT5NXt271ARGIqDl1oBKnctOCZQhxArae8Pf0
LJNTi6pFdK91D60HgfPX9xOVLYnqbRfi04xZLKkkJvrIjQrgbGCp5kcznq3Ux9Mv
rwnNEfGEfIM5cgvkhYnAMgy1AuJsMEybperN52fnDIwhn0hD1yB4XTB6irH+ogai
4LBrhP9+zsuvrT1v80KluNyNXs2G01Fn+ybk3Ju8lMmUWy5I6Oa/OWljaf6rJ8H3
NoSvs3dS966bkw==
-----END CERTIFICATE-----
Generated at Fri May 22 15:10:10 2026 by rpki-client