Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier: 2h4h01L/nskCw8ox7t9LRpC4782d9pTQ09Vryc7L6xM=
Subject key identifier: F9:5A:71:73:00:CC:FC:3C:F6:6E:AE:8B:78:13:AF:81:38:33:E3:87
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 019EE9A05101F86B039600EF9FD9635E7C06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number: 144A
Signing time: Sun 21 Jun 2026 10:00:58 +0000
Manifest this update: Sun 21 Jun 2026 10:00:58 +0000
Manifest next update: Mon 22 Jun 2026 10:00:58 +0000
Files and hashes: 1: dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa (hash: /P+LPCXiDZwClBrS2PGojc/QqZ2hX7FiQfLqx4lq3iA=)
2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: HKMCRoVkcvbnkBo/mqlWXezUPoEjRh1g67ped1cMewE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 22 Jun 2026 02:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:e9:a0:51:01:f8:6b:03:96:00:ef:9f:d9:63:5e:7c:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: Jun 21 10:00:58 2026 GMT
Not After : Jun 22 10:00:58 2026 GMT
Subject: CN=f95a717300ccfc3cf66eae8b7813af813833e387
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fb:37:14:f5:e6:6c:f1:13:8a:cb:a3:f8:a0:
e0:2c:8a:dc:24:4b:34:8b:3a:3d:ee:e8:b6:e0:be:
4b:9c:d0:33:6a:b6:ea:78:3a:95:37:db:3d:bd:b4:
39:47:b1:77:de:45:1d:bf:f6:80:db:e8:20:6c:7f:
52:c6:97:66:37:5f:68:39:4d:57:3e:0b:44:84:d3:
37:f1:68:5e:f4:46:fa:01:a9:f4:a1:e9:74:ac:e5:
e7:98:be:20:d1:2d:c1:a5:dd:eb:89:19:dc:88:ab:
b0:b7:a1:40:d2:c6:99:8b:4d:cc:17:1d:53:fd:cf:
c2:16:ee:81:34:e2:07:ee:ac:ea:02:5b:e3:38:f4:
2b:bf:64:88:41:7e:21:c1:f6:c5:7c:2d:c8:f8:09:
f4:7d:9c:9a:24:e7:8f:1d:c1:85:34:ea:1d:ee:08:
3e:86:6b:0f:65:83:0e:74:4e:63:0d:2b:79:93:53:
da:f8:58:64:e3:b4:21:c5:27:e8:c0:33:7b:39:f5:
87:29:f2:9e:95:8e:e1:08:a2:21:f2:e5:35:c3:6b:
1b:fb:1a:00:ff:e1:73:3d:7e:7c:d9:36:09:d4:41:
b0:9b:be:ff:3f:e7:0f:90:e8:7b:82:98:41:7b:ec:
76:3e:60:32:9c:e5:8c:26:c8:4e:cc:4a:e3:41:28:
a9:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5A:71:73:00:CC:FC:3C:F6:6E:AE:8B:78:13:AF:81:38:33:E3:87
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:b6:24:3d:f4:3e:19:3f:72:7d:d3:63:f5:1c:07:72:90:d4:
15:b5:e5:9f:81:0a:da:79:d1:74:ce:5b:8b:93:8e:f1:fa:dd:
54:48:8e:02:c5:af:e5:ba:72:ba:60:04:8c:1f:ad:82:d4:4e:
21:91:c6:1e:ea:ec:e5:2a:98:a6:db:8d:fb:69:bb:f8:f7:35:
36:25:12:e2:3b:77:4f:81:dd:ad:21:8f:e9:09:5d:ff:2a:f1:
ae:7e:62:42:69:f9:bf:be:ea:e1:1a:62:56:96:93:ed:7e:d5:
a3:4d:69:ec:c4:bd:38:01:bb:90:4c:3a:88:f6:1f:f4:3e:4a:
2d:80:d2:88:db:cc:d6:5f:28:86:8c:95:f3:68:8b:90:f5:6c:
b2:92:59:9a:13:e2:39:20:26:dc:8e:f6:39:56:ca:73:ac:55:
2b:85:d8:3f:d9:cf:67:73:17:cf:ac:6e:03:ef:83:20:51:a0:
f9:73:e4:45:c4:7f:c0:4c:ee:dc:bc:a0:55:67:2a:e3:72:90:
ab:aa:ff:31:81:38:0e:05:1e:bc:28:4a:5a:48:2f:4d:ac:78:
14:cf:f4:63:54:d9:b0:b9:c1:e7:fa:54:9f:1e:28:2f:07:18:
34:6b:46:1a:23:27:87:a4:c7:62:a5:be:09:45:58:f3:05:14:
17:0b:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:33:42 2026 by rpki-client