Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: QPvOIlLXAGs0dM/uGO25ZZvMWDUixeXrKJx2mfcnCq8=
Subject key identifier: 38:CF:48:C0:41:DB:6A:94:8D:05:C0:DD:37:1D:2E:CF:84:2A:0E:F3
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019F19E7BF7FE80E9171DF7EA4B047575C22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 08D4
Signing time: Tue 30 Jun 2026 19:00:45 +0000
Manifest this update: Tue 30 Jun 2026 19:00:45 +0000
Manifest next update: Wed 01 Jul 2026 19:00:45 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: 8aMWQRVJHdzatNufHjr18SLSVczfuYRCHVUn3l+a/MU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e7:bf:7f:e8:0e:91:71:df:7e:a4:b0:47:57:5c:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Jun 30 19:00:45 2026 GMT
Not After : Jul 1 19:00:45 2026 GMT
Subject: CN=38cf48c041db6a948d05c0dd371d2ecf842a0ef3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:97:e2:eb:67:cd:1b:e6:73:a8:1d:8b:c4:26:
f1:b9:47:1c:e7:74:12:f4:c3:b9:5e:29:b9:bf:f4:
d2:17:67:b0:aa:48:c1:ef:5f:c2:9b:0e:19:65:ac:
a8:e6:6e:ec:f9:eb:f3:6b:14:df:52:12:45:b9:de:
ac:7e:b8:5a:e0:bc:d8:d4:9d:e7:c1:9d:3e:05:fa:
59:c4:44:4e:0e:a2:d3:96:98:74:e9:31:3c:ed:3f:
02:ad:4f:c9:02:a4:85:d2:e1:7f:33:18:98:3e:23:
79:d4:18:7b:0f:bf:2d:72:d0:de:85:e4:ef:0b:50:
23:e6:8d:56:a1:08:35:79:71:ba:9d:7f:b5:e7:c6:
24:c2:80:c7:c0:d6:e2:e1:3b:94:60:df:bc:54:be:
c8:53:ef:04:8b:6b:20:d2:01:f0:94:7c:fa:a0:24:
90:f2:72:67:de:ef:d7:4f:99:80:f8:2d:91:2d:64:
dc:e6:1c:12:f2:db:9d:59:ab:94:c0:24:88:95:32:
ca:97:86:de:4d:c3:e6:89:1a:cf:d2:8e:77:80:07:
8f:11:5e:0f:c7:b4:a5:69:04:75:4f:6a:71:29:05:
f5:71:7e:a1:61:7b:81:e2:5f:52:ae:27:36:59:3d:
7c:da:d0:7d:31:9d:ec:2a:df:6e:06:06:6e:2b:8a:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CF:48:C0:41:DB:6A:94:8D:05:C0:DD:37:1D:2E:CF:84:2A:0E:F3
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:cb:7d:2a:be:56:49:b3:15:76:b7:be:8c:e5:ce:d6:18:9f:
d8:b3:42:c1:af:8f:3d:88:c2:19:c6:74:19:e4:8b:49:ab:20:
78:89:a1:5c:ab:4d:d0:59:4b:30:9a:91:92:f4:9d:47:98:4a:
af:9c:f0:a7:14:47:2a:57:69:7d:fb:48:03:f6:8f:99:6f:7e:
69:9a:70:00:86:a9:b0:63:de:7e:6a:d1:37:bc:67:1f:b2:f7:
5b:9d:4f:c3:ab:eb:10:06:af:62:44:35:a7:ee:22:87:13:70:
32:e6:58:18:58:d1:f0:c2:55:da:cd:d5:b8:19:74:b8:96:fe:
b4:d9:7e:16:42:95:05:65:1e:12:be:87:1a:9c:b5:c9:59:c7:
dd:85:f5:20:92:a5:c3:04:2f:0b:a6:d8:02:f6:03:4d:55:77:
db:54:3e:aa:08:c0:97:13:3f:b2:f2:a1:98:b4:b4:3d:34:60:
46:54:b6:f8:30:bd:54:24:cd:8c:4d:73:37:3c:18:f1:02:62:
14:4f:ae:93:15:b6:1d:7b:e6:8d:5c:6a:55:cc:22:b8:6f:3a:
62:42:2e:cf:8d:77:d6:31:d2:c2:61:72:25:c5:36:75:5f:65:
2e:1e:4f:c2:4b:62:03:38:07:53:75:08:95:58:ad:70:03:81:
6f:5f:ae:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:44:17 2026 by rpki-client