Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: z8R77wjElLtpzgIyQCiwSDI4L1Z2cOwJXuTn4QV8IhM=
Subject key identifier: 9F:E1:AB:50:41:41:97:5F:9C:FE:FD:20:7D:18:93:56:DD:2A:D5:F6
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 01A0039477F9E339D5267CB950543B9EB318
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 094D
Signing time: Sat 15 Aug 2026 04:00:56 +0000
Manifest this update: Sat 15 Aug 2026 04:00:56 +0000
Manifest next update: Sun 16 Aug 2026 04:00:56 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: D0zRZL35frkEAdtJrbfoLyEytmQ4Z4EbcRKaggq3o+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:94:77:f9:e3:39:d5:26:7c:b9:50:54:3b:9e:b3:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Aug 15 04:00:56 2026 GMT
Not After : Aug 16 04:00:56 2026 GMT
Subject: CN=9fe1ab504141975f9cfefd207d189356dd2ad5f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2b:80:bb:35:dd:b8:37:b4:3a:07:b8:f3:5d:
7f:4b:4b:9f:38:c0:bf:bf:8e:eb:19:89:03:57:eb:
a4:cc:1d:ac:89:57:d4:b7:28:82:84:28:bb:71:bb:
c9:f0:b9:b9:fe:23:08:2b:5e:66:3f:0e:55:3e:34:
93:ba:88:05:6d:96:2c:d1:fb:0f:57:1f:00:c5:7e:
f6:65:6d:b3:10:ea:18:2e:0c:76:1e:cb:f5:78:72:
66:80:5a:21:70:8c:45:69:df:04:a4:f3:64:ea:41:
61:c0:75:31:ec:a5:05:bb:64:75:61:e8:65:0c:34:
38:7a:75:ee:57:91:b0:61:3b:8f:45:3f:b1:e6:9a:
ec:1a:1d:70:64:96:28:10:a8:fd:93:c3:da:e4:68:
4d:09:03:52:02:24:90:df:ff:c9:46:11:80:d1:30:
a9:14:59:2e:0d:c9:af:4d:89:90:2f:82:10:ae:9b:
c8:6c:cc:41:84:ef:ab:68:04:40:1d:a8:a1:0c:60:
b4:a8:65:1a:15:66:b5:02:94:a5:28:b0:67:2d:d5:
35:6c:00:4a:4a:82:0b:c9:d4:05:4d:c8:2b:84:a8:
ee:76:63:de:9c:da:64:b3:24:bc:06:96:10:69:bd:
47:b9:3e:04:7f:21:55:88:22:7b:07:0b:fa:53:39:
67:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E1:AB:50:41:41:97:5F:9C:FE:FD:20:7D:18:93:56:DD:2A:D5:F6
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:aa:d9:ca:52:3f:38:04:1f:58:ab:c4:64:22:04:7a:53:70:
b0:84:2d:0a:51:44:91:c8:86:cc:6f:5b:96:8f:7e:de:fb:35:
cf:13:a0:ef:8e:bf:09:e2:d3:e3:91:fc:2a:0a:0f:17:dd:c3:
29:7f:b3:55:52:3d:68:10:a1:4d:da:33:82:4d:b7:06:3e:37:
5c:c6:2e:f2:e0:cd:df:34:62:99:7f:d8:c8:fa:09:d9:90:8e:
50:22:77:cb:33:cf:cc:f6:20:4d:26:d9:4d:ae:34:b9:95:a1:
0e:99:af:96:6f:2a:3b:ab:33:56:05:10:c8:d4:b3:2e:ea:91:
4d:7e:46:52:b8:bd:a6:39:71:f0:30:13:18:21:41:50:8c:95:
9a:95:86:88:53:f1:91:cc:44:4a:d3:94:a0:c3:78:f3:af:7c:
86:e8:bb:44:77:02:8f:a3:6b:63:da:b3:0a:99:de:7f:28:14:
05:24:73:d7:74:e0:c0:e8:f6:3d:d2:da:9d:28:bc:9e:3a:67:
a6:aa:2c:4d:1e:ad:74:ec:aa:22:49:be:cf:20:7d:36:64:16:
cc:d6:7a:57:5e:12:bf:97:0b:a0:71:f1:32:ca:eb:54:50:29:
bf:a7:c7:c9:13:e9:87:7b:32:14:14:89:2b:02:a7:c8:e2:d7:
ac:94:e4:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADlHf54znVJny5UFQ7nrMYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl
OWQ3MDkwHhcNMjYwODE1MDQwMDU2WhcNMjYwODE2MDQwMDU2WjAzMTEwLwYDVQQD
Eyg5ZmUxYWI1MDQxNDE5NzVmOWNmZWZkMjA3ZDE4OTM1NmRkMmFkNWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyuAuzXduDe0Oge4811/S0ufOMC/
v47rGYkDV+ukzB2siVfUtyiChCi7cbvJ8Lm5/iMIK15mPw5VPjSTuogFbZYs0fsP
Vx8AxX72ZW2zEOoYLgx2Hsv1eHJmgFohcIxFad8EpPNk6kFhwHUx7KUFu2R1Yehl
DDQ4enXuV5GwYTuPRT+x5prsGh1wZJYoEKj9k8Pa5GhNCQNSAiSQ3//JRhGA0TCp
FFkuDcmvTYmQL4IQrpvIbMxBhO+raARAHaihDGC0qGUaFWa1ApSlKLBnLdU1bABK
SoILydQFTcgrhKjudmPenNpksyS8BpYQab1HuT4EfyFViCJ7Bwv6Uzln9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/hq1BBQZdfnP79IH0Yk1bdKtX2MB8GA1UdIwQY
MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt
OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw
LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKrZylI/
OAQfWKvEZCIEelNwsIQtClFEkciGzG9blo9+3vs1zxOg746/CeLT45H8KgoPF93D
KX+zVVI9aBChTdozgk23Bj43XMYu8uDN3zRimX/YyPoJ2ZCOUCJ3yzPPzPYgTSbZ
Ta40uZWhDpmvlm8qO6szVgUQyNSzLuqRTX5GUri9pjlx8DATGCFBUIyVmpWGiFPx
kcxEStOUoMN48698hui7RHcCj6NrY9qzCpnefygUBSRz13TgwOj2PdLanSi8njpn
pqosTR6tdOyqIkm+zyB9NmQWzNZ6V14Sv5cLoHHxMsrrVFApv6fHyRPph3syFBSJ
KwKnyOLXrJTkWQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 08:42:24 2026 by rpki-client