Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: LKNMWd6PrVaKQQKQ7qIExZNlY8dCaPteAPKbiusASu8=
Subject key identifier: 9C:29:F7:B4:1F:08:85:40:5F:F6:7D:31:94:90:99:D4:4C:67:F0:9D
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 01A00402593030F37ADBB695309A69510D92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0C63
Signing time: Sat 15 Aug 2026 06:00:57 +0000
Manifest this update: Sat 15 Aug 2026 06:00:57 +0000
Manifest next update: Sun 16 Aug 2026 06:00:57 +0000
Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=)
2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: 0MvV52r4xwFSMerKJUaAvdRL6EoDhgX6mB34Wv+GBZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:46:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:04:02:59:30:30:f3:7a:db:b6:95:30:9a:69:51:0d:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Aug 15 06:00:57 2026 GMT
Not After : Aug 16 06:00:57 2026 GMT
Subject: CN=9c29f7b41f0885405ff67d31949099d44c67f09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:cc:f9:d1:a6:11:39:58:b8:ca:b0:2d:3c:f5:
09:2b:c9:3b:da:b4:db:18:44:22:89:a4:c5:92:8f:
5a:4d:ad:8b:7b:f7:e4:ca:bc:b9:52:79:ba:41:22:
7f:09:dd:e0:cc:28:35:ee:b2:2b:0a:af:6e:3e:ea:
ee:35:1c:0f:3b:d5:62:51:2a:ab:52:91:41:f0:23:
6c:ff:d7:89:86:36:b7:15:1d:70:b2:9d:30:7d:f0:
70:ba:b1:ac:94:57:a2:a8:d7:25:5e:50:12:6f:1a:
06:08:cd:db:42:f4:cf:a7:28:8e:50:47:b8:da:bf:
4c:37:95:74:13:8a:36:fc:c8:72:b7:e3:75:66:5e:
64:d9:27:84:0a:6a:6f:3c:df:9a:85:a4:48:25:ad:
f8:3c:c8:2d:9d:0b:09:7a:af:45:9e:5b:a9:dd:24:
0e:92:17:89:a0:d6:18:70:0b:06:39:3b:a5:15:f9:
2e:4c:df:c3:fe:78:dd:6c:37:0a:f1:1e:41:b3:ac:
7f:f2:29:5c:53:3d:95:6e:f2:07:e1:81:8e:fa:3b:
a9:b8:98:7b:0a:d7:b5:11:0a:90:37:8a:68:a8:b6:
fe:84:86:e6:73:3d:b6:04:59:65:74:b1:6b:c8:24:
94:0f:f2:aa:e9:02:3c:d5:3b:5d:1c:64:51:84:39:
18:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:29:F7:B4:1F:08:85:40:5F:F6:7D:31:94:90:99:D4:4C:67:F0:9D
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:1e:41:96:8e:49:2d:33:a3:42:f5:3a:f9:6b:44:cb:56:3c:
4e:33:c3:84:8a:ef:92:7e:a1:8c:5f:66:09:5a:32:c0:0b:05:
37:1f:00:e5:b4:cb:57:21:0f:69:f3:ed:a8:28:f9:4f:7d:47:
3a:2b:3e:8a:7e:af:bf:36:14:16:d0:f7:57:77:ed:9b:4a:29:
61:65:c4:57:98:72:55:4a:e7:70:48:3e:f3:60:12:e0:73:86:
c3:59:df:5f:78:de:0a:e2:e9:04:33:fb:d6:74:5f:f2:a1:40:
30:32:59:89:c6:24:ff:50:5c:ac:d8:18:ba:ce:2f:02:a9:a8:
33:70:66:61:2c:36:5b:49:fb:82:a0:43:73:3a:e2:3b:5b:0a:
ed:d8:f2:74:c9:3f:ed:54:b9:6d:58:eb:cf:ee:e1:cc:a9:9c:
f1:70:5d:b7:c2:25:7d:bd:87:a8:86:f6:34:56:9d:c8:f7:d6:
f0:35:69:01:2f:be:45:4f:18:f1:15:bb:1c:5f:ce:9c:ee:1d:
68:72:6c:0d:a8:44:4e:df:97:18:31:69:23:7d:9c:5f:18:b9:
e1:54:69:34:dc:cd:99:65:b9:fc:17:c4:17:d0:5f:be:f4:2b:
26:34:5b:1a:67:f4:20:d8:d5:9f:7c:ef:9d:d6:5d:e8:a2:1d:
05:b4:5a:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 07:57:32 2026 by rpki-client