Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: 95+fzud+mJ/tyXI6w0ePnFOzDIpQplZKRBAWYhm/80A=
Subject key identifier: A8:5E:B5:BF:D8:31:BD:C1:65:A7:61:AF:AC:99:A0:45:81:31:D8:AF
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019E2C5EBFE83335132A9ED54D96823280F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 0859
Signing time: Fri 15 May 2026 16:01:07 +0000
Manifest this update: Fri 15 May 2026 16:01:07 +0000
Manifest next update: Sat 16 May 2026 16:01:07 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: LMtVrmWPulRML3USCu19sUf76PrBZCWeB6ngd+1rRiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2c:5e:bf:e8:33:35:13:2a:9e:d5:4d:96:82:32:80:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: May 15 16:01:07 2026 GMT
Not After : May 16 16:01:07 2026 GMT
Subject: CN=a85eb5bfd831bdc165a761afac99a0458131d8af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:19:25:6d:35:9c:92:27:b6:f1:d5:ce:2a:b9:
cd:a0:65:19:9f:5c:57:13:14:61:32:5f:ce:4c:15:
da:a0:c1:70:f4:65:fd:2a:6d:9b:c7:4d:9e:5c:2b:
f6:ce:ae:7f:94:eb:1e:72:bf:fa:f1:33:c7:74:ea:
10:a0:cf:5c:9c:fd:a6:5d:a8:dd:ac:b4:c3:ec:35:
57:e6:b1:b0:0e:1e:a6:ac:6c:28:fc:9b:94:b5:0c:
2a:58:33:6b:27:04:5f:ad:38:81:04:e6:9f:1b:53:
29:4d:0d:ab:ea:40:97:44:84:01:b2:7a:d8:dd:7f:
c7:73:14:d5:df:7d:f4:b6:89:22:fd:1f:dc:49:8b:
87:b3:21:4a:ea:c6:f9:a8:cb:60:85:a7:19:b1:cc:
53:cb:29:f2:fc:0a:96:7f:2c:c1:2d:f2:35:2c:c7:
d3:64:92:d7:25:80:2c:88:0c:23:03:23:2f:71:e6:
9a:b7:4f:7a:98:96:c6:dd:1b:58:12:37:83:d4:d5:
03:99:69:43:37:13:04:5d:ed:57:41:44:f3:7f:fe:
c8:01:e1:44:90:c0:a1:5b:da:95:c3:2e:47:25:32:
85:e1:7c:8d:20:7e:32:f8:c8:48:d8:05:33:3d:ba:
af:d7:97:9b:6d:87:3d:f2:4c:e2:6d:d7:43:8a:fd:
c8:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5E:B5:BF:D8:31:BD:C1:65:A7:61:AF:AC:99:A0:45:81:31:D8:AF
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:5c:27:21:5b:78:97:79:39:8a:3e:cb:76:eb:0a:46:b0:68:
dd:c5:10:6e:b0:05:39:36:38:e9:1b:5e:fa:d3:5b:76:41:8f:
30:11:63:a4:f7:11:c5:61:91:ca:09:9d:f6:9c:e4:10:c0:23:
2b:f5:2a:8f:ef:3b:4c:34:02:f6:b8:2d:3b:85:d6:20:e9:a4:
44:40:4a:f8:b0:9e:29:c2:b4:29:bf:e6:c6:e6:fa:61:40:f9:
2c:19:9e:70:56:a0:87:19:dd:58:ec:10:bb:25:3c:c7:49:b0:
fe:ba:9e:e1:d0:af:11:72:2f:57:b8:8e:f1:63:53:9c:44:0d:
be:b5:e4:8b:71:9b:06:a7:46:5c:49:b5:a4:76:75:a7:c8:ce:
c3:83:c3:9f:fa:66:d1:4f:c6:7c:df:f8:94:3e:22:ad:ad:fa:
2a:0d:6d:61:7d:61:ee:9d:5f:76:9a:7b:f0:db:07:55:aa:49:
bc:09:40:f4:ef:a3:d7:72:b2:96:7d:68:81:b9:51:7e:80:3b:
6b:d1:f5:53:a9:07:a7:98:59:03:a3:37:fb:33:ec:23:df:96:
12:f6:9e:93:f5:a0:f1:36:c7:5e:66:32:43:18:04:28:1d:c7:
3c:09:ba:ad:dc:cb:9e:70:27:04:52:c1:e6:ab:b0:74:e2:54:
fb:a1:00:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:54:55 2026 by rpki-client