Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
File: UjC2XWEW1LYNNv33tsbV5blUY54.mft (raw, json)
Hash identifier: 9OG57WYP+M3MwwwgCeiTjPrHjaQhrAz0H5SGyglDLm8=
Subject key identifier: B3:64:3F:9A:06:61:35:10:E1:41:CA:55:B1:3A:D4:B9:1F:9B:F6:45
Authority key identifier: 52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
Certificate issuer: /CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Certificate serial: 019F1A562BECBD8E63956B8158FDABC6E889
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
Manifest number: 1994
Signing time: Tue 30 Jun 2026 21:01:22 +0000
Manifest this update: Tue 30 Jun 2026 21:01:22 +0000
Manifest next update: Wed 01 Jul 2026 21:01:22 +0000
Files and hashes: 1: HCkTO8KxnQW5z_1GFAOAHjIGab8.roa (hash: XoAXikNwV8c/+4uyw3oTAAVmB0UR0KOtZ+V3aJEPK8c=)
2: UjC2XWEW1LYNNv33tsbV5blUY54.crl (hash: UugvlKDDVobVFvFJrZnIth8BS0lAyez488X5KBD8MMo=)
3: YDTabDi8KIiVn2g5g0ARZ4FOj6Y.roa (hash: 4uSS/xcfK9YISuyI1M3a8VYQt60GXuC8eBgPt3hFnMw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1a:56:2b:ec:bd:8e:63:95:6b:81:58:fd:ab:c6:e8:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5230b65d6116d4b60d36fdf7b6c6d5e5b954639e
Validity
Not Before: Jun 30 21:01:22 2026 GMT
Not After : Jul 1 21:01:22 2026 GMT
Subject: CN=b3643f9a06613510e141ca55b13ad4b91f9bf645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:26:c9:df:4f:df:20:88:ed:5d:08:44:7d:76:
e8:ff:d9:f3:a7:96:49:e5:4d:15:4c:68:db:03:9a:
b3:4b:85:27:37:4d:ec:73:11:17:0f:2f:ec:45:8f:
de:2a:f9:af:e1:f7:d4:29:ba:34:90:77:a9:3c:f6:
aa:80:c7:db:de:1a:c5:57:04:4a:19:82:f3:8f:ba:
88:70:ed:3c:47:c3:a1:2c:d1:1f:34:a2:b3:c6:51:
47:18:1d:13:95:53:b9:3a:5d:c5:12:44:92:a5:77:
05:f6:b2:ea:aa:79:e4:c9:be:39:19:a9:fb:5f:6c:
f2:e9:9e:b1:5b:91:58:5d:76:06:ed:af:c8:d7:d4:
e8:f7:e1:5a:41:91:05:95:3c:7b:44:02:b7:50:da:
95:fc:fe:48:57:92:dc:b1:77:3d:55:16:f3:41:1c:
44:4a:4e:5c:67:bb:5b:f1:a4:3c:9a:11:1f:b0:1e:
aa:fc:a3:e3:ca:32:99:dc:0b:29:92:b9:fa:2f:59:
dc:e7:24:89:ee:34:4b:ad:07:ad:b5:93:9c:56:2d:
3f:83:59:d9:29:1d:89:2e:ed:1a:1c:3d:e1:d4:d1:
89:c1:1b:97:e0:4f:1d:ea:fc:e7:df:b2:64:bb:23:
64:70:4e:ac:1d:58:b5:12:22:dd:0b:f4:af:26:9c:
d9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:64:3F:9A:06:61:35:10:E1:41:CA:55:B1:3A:D4:B9:1F:9B:F6:45
X509v3 Authority Key Identifier:
keyid:52:30:B6:5D:61:16:D4:B6:0D:36:FD:F7:B6:C6:D5:E5:B9:54:63:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UjC2XWEW1LYNNv33tsbV5blUY54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/fadff6-5cc0-4694-9c62-1358c2b5d541/1/UjC2XWEW1LYNNv33tsbV5blUY54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:12:8e:f4:c3:56:7e:9c:6c:20:2f:a5:55:fe:c9:af:a5:6d:
36:3e:89:57:90:28:94:18:cf:d5:bd:bd:84:46:58:69:04:b4:
21:d9:63:e9:b9:a0:d9:64:97:42:16:2d:08:ac:2c:b0:a7:c6:
69:a5:b4:29:99:a2:ed:ba:28:27:38:c5:6f:8b:3c:ff:82:47:
79:3a:bc:9e:a1:94:d5:74:b7:7e:1c:68:62:df:de:42:5b:88:
29:8a:55:ed:d6:bc:4b:a7:aa:a4:f8:3b:99:5c:75:79:66:8e:
6a:7d:57:9c:01:8a:5c:63:fb:f8:8e:e7:a3:2d:c1:c0:3b:d1:
d4:14:27:31:0b:5f:1b:14:39:f7:e7:f5:ef:73:fd:72:d2:a8:
3a:64:46:fa:aa:21:75:16:d1:ac:fe:8c:0d:3b:56:55:50:87:
f7:3c:07:18:54:27:a9:7e:da:6e:14:c1:8b:07:91:b9:71:64:
16:7b:e0:a3:e4:e2:41:82:f6:e2:63:c3:87:d3:d1:fe:d8:3f:
87:c8:1d:69:58:5f:ab:84:61:af:67:03:2a:bf:53:4f:19:6f:
f7:67:14:b0:58:50:3e:6b:41:b7:59:98:fd:fa:5f:0e:9c:32:
d8:3d:f6:cd:f8:95:e4:76:71:07:b3:28:b0:92:17:e7:d3:f5:
06:44:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:28 2026 by rpki-client