Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: dDpe/fIq5Hy1NSRtnuCRklsg4ckOmlsac0Sy3rj1+Cs=
Subject key identifier: 61:98:46:53:AB:A5:51:04:70:BC:8D:97:4D:B1:95:1A:25:DF:CD:4A
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 01A05968F0391F1A912552F64D542583E337
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 1A3D
Signing time: Mon 31 Aug 2026 20:00:44 +0000
Manifest this update: Mon 31 Aug 2026 20:00:44 +0000
Manifest next update: Tue 01 Sep 2026 20:00:44 +0000
Files and hashes: 1: KGRopBEr2JpxilCBAZtc3t1Ntic.roa (hash: AM42hyN+7UGqA0TYL4NFEGX9snO0u+0KggTGwFgB5mc=)
2: MYsrDD6_ix1Rtx9ae202FMZQt2A.roa (hash: wCa+FoC6lGoUEm8DzIyrEb7XOMkaGI8fNWlKnMyKjIk=)
3: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: JnOyahrD4kPF+RAWdY8c7wltIcOxqv3tk6tOsLC8Txc=)
4: xY9BroR3iRbJqm7RCTof9jEemr8.roa (hash: 9dLUnNHnNhC683i+pgDf8sFP0wo8PH6axmUl56au+bY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:68:f0:39:1f:1a:91:25:52:f6:4d:54:25:83:e3:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Aug 31 20:00:44 2026 GMT
Not After : Sep 1 20:00:44 2026 GMT
Subject: CN=61984653aba5510470bc8d974db1951a25dfcd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:73:f3:ac:dd:be:8d:02:60:50:85:a2:74:3e:
a9:aa:c7:21:4c:0c:95:fd:f3:93:03:61:5f:2a:0f:
94:1c:97:6d:83:41:ff:10:6c:05:35:51:0d:a8:2d:
63:c4:ca:45:ae:c9:eb:a7:0c:cd:80:29:6b:47:31:
db:d9:14:3e:0e:75:61:97:a2:5f:bd:e3:0e:1c:8b:
92:30:ca:ce:33:1c:cd:f5:05:be:b1:15:c5:f8:0e:
45:ab:76:10:d7:7a:88:b8:77:76:3c:06:5b:c9:a9:
0e:4b:97:3a:bc:5d:fa:8b:56:c9:de:1d:c9:d9:26:
c5:54:95:6e:d0:07:c7:48:fa:e5:c0:3e:fe:2f:7a:
9c:9b:7f:1e:65:f9:10:c1:bd:93:6c:29:cd:fc:e9:
3b:96:c0:77:60:be:be:d2:63:57:d4:73:d8:a3:46:
ad:2c:b4:89:75:bd:71:6a:41:6f:a1:73:60:0b:d3:
d0:e0:8c:a8:1a:d6:28:1f:2a:21:fb:d7:69:1c:60:
0e:70:95:36:00:d4:3b:f6:c3:10:13:8b:c4:df:4b:
17:8c:1f:24:3e:c1:59:0c:9e:2f:9a:3c:33:9c:7b:
0c:f3:6a:f0:6e:7a:9b:17:73:7a:a1:c0:78:ad:c9:
45:fe:dd:9f:2f:bd:47:47:0c:f3:27:70:d9:e7:a8:
09:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:98:46:53:AB:A5:51:04:70:BC:8D:97:4D:B1:95:1A:25:DF:CD:4A
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:6d:9b:b0:b1:63:f6:57:ce:40:5a:8a:8c:23:0f:e1:b1:87:
b6:4f:d2:ff:af:eb:15:44:f5:71:e4:10:45:c6:ba:22:1d:e8:
0a:bf:79:96:36:ee:9d:57:d2:84:90:72:bf:e7:27:27:a6:88:
cb:54:5f:46:17:e5:03:0a:48:9d:0b:e8:70:7b:82:34:30:6f:
14:04:7d:41:9b:7d:f8:2a:02:cf:2c:3a:8c:0b:88:24:34:9a:
c1:4a:2c:cd:25:d8:5a:97:ad:d0:ab:59:28:b6:98:a8:ab:f9:
db:c5:42:04:43:18:88:ec:ea:c7:ba:59:a8:2c:7b:7d:cc:cc:
3b:e4:a4:41:70:58:6e:c1:23:07:15:7b:14:4b:e8:6a:16:fa:
27:58:e3:4a:af:03:d6:9b:69:4c:97:aa:19:b9:da:0d:bc:06:
33:4f:25:21:28:89:2a:24:a6:59:20:1e:42:d2:b3:69:a6:46:
8b:8c:f0:59:98:43:fa:9c:73:e4:57:bb:b5:68:61:88:aa:36:
81:c1:60:d9:ad:9c:24:96:39:57:ff:02:1b:ec:32:59:62:67:
a6:47:ed:d2:ae:de:6c:cd:79:5c:b3:32:97:0f:ae:7e:c1:9a:
2e:70:02:08:95:f9:be:2f:9f:0c:49:14:da:85:a2:fa:d5:0f:
e6:c6:8c:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:02:09 2026 by rpki-client