Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
File: uybM-gcX259Wqji4aSzl3PooJec.mft (raw, json)
Hash identifier: YgHnaLoB0/VHr9wbu5zvUbZKsQ32gLPPj4vY0zT3tDg=
Subject key identifier: AD:4C:00:CA:A6:AD:52:10:B0:71:82:3E:1A:75:12:02:25:AD:B8:14
Authority key identifier: BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
Certificate issuer: /CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Certificate serial: 019E33734B83EF17D11EF703381222B80CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
Manifest number: 04DC
Signing time: Sun 17 May 2026 01:00:53 +0000
Manifest this update: Sun 17 May 2026 01:00:53 +0000
Manifest next update: Mon 18 May 2026 01:00:53 +0000
Files and hashes: 1: dbi3fG9bxI9rA-J9Egga8cnvqoo.roa (hash: Ap8z6NPW0v1Uxh7C5vK9EjLc2QYMMSk2Hr7IGcY1KpQ=)
2: uybM-gcX259Wqji4aSzl3PooJec.crl (hash: pF4uA/KlP4TQkfDpm5FoiZRKOwc/9IkQs5l/Hlj5szA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:33:73:4b:83:ef:17:d1:1e:f7:03:38:12:22:b8:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb26ccfa0717db9f56aa38b8692ce5dcfa2825e7
Validity
Not Before: May 17 01:00:53 2026 GMT
Not After : May 18 01:00:53 2026 GMT
Subject: CN=ad4c00caa6ad5210b071823e1a75120225adb814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:14:80:a9:8b:2d:4c:b6:55:0f:5a:56:a2:db:
78:af:84:f4:4a:e9:6a:a8:e4:4b:3d:02:e8:a4:2d:
9b:3a:7b:3a:77:d8:98:ff:74:24:d4:c8:f2:3f:e8:
56:80:e0:92:c8:02:c3:14:5d:63:87:4d:b3:45:66:
4e:46:7b:6c:bd:09:8e:d9:ae:69:5c:1d:b7:86:ca:
92:1b:c9:32:9b:f1:6e:14:7c:fb:dd:cb:d2:42:de:
67:5d:c7:24:96:4f:5a:1c:5b:d0:08:92:d9:b5:36:
2c:c1:6d:6c:ce:ef:ca:d0:b9:f5:80:c3:f8:35:c2:
86:9a:3a:02:28:0b:f1:1a:d5:c8:a9:a7:3e:b9:cb:
47:b7:ba:f8:3f:e3:3a:ca:32:29:9d:76:0a:97:87:
98:b5:d1:1d:6f:92:60:47:8b:de:7e:ea:02:23:58:
db:0a:c4:de:7e:e1:14:1c:d8:9c:9f:b2:fe:58:2f:
d6:b8:1c:42:e6:31:a5:bd:04:e6:20:ae:9e:36:80:
90:8d:60:52:67:c5:3f:07:ec:16:b2:28:e6:31:11:
a4:76:0a:5d:ae:9a:2d:ce:78:1d:8a:f4:21:15:e4:
0f:a0:9e:1f:8c:e9:a2:64:55:af:3f:cf:61:3f:10:
4e:b2:3e:30:72:8f:78:d8:bb:bb:1e:5a:63:70:a6:
16:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:4C:00:CA:A6:AD:52:10:B0:71:82:3E:1A:75:12:02:25:AD:B8:14
X509v3 Authority Key Identifier:
keyid:BB:26:CC:FA:07:17:DB:9F:56:AA:38:B8:69:2C:E5:DC:FA:28:25:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uybM-gcX259Wqji4aSzl3PooJec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/550c39-44a2-431b-933d-ccbf0e5b2add/1/uybM-gcX259Wqji4aSzl3PooJec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:08:9b:14:50:e3:c9:c1:49:77:5a:aa:c2:29:45:be:80:e4:
4f:28:b3:6a:2d:e9:78:0b:a7:22:72:46:08:c1:0c:58:89:86:
91:48:a7:f7:54:48:47:14:7d:70:9e:99:04:f4:6e:84:b5:65:
bc:a2:bf:25:6b:0a:1f:b9:28:74:d3:8d:ad:b2:b5:fd:11:c0:
be:71:63:9e:7c:c0:c6:b0:d8:e2:cc:7b:fc:58:fe:75:5d:ea:
89:88:1e:32:48:97:1d:97:a7:5e:52:83:04:0a:fe:94:e6:a1:
24:03:03:53:ba:f0:1e:42:82:6c:59:0f:14:b1:37:07:f7:ee:
a2:0c:8d:64:0a:10:05:64:30:a6:6c:63:59:3e:15:1c:df:c3:
6a:a3:a6:47:fd:97:5c:05:41:00:10:7c:ce:a2:1d:f0:12:50:
04:7a:8b:11:46:f8:f7:af:be:86:79:a8:73:20:25:f2:74:c4:
47:60:24:af:53:8c:c1:a3:67:c0:6d:69:c0:9f:a6:b8:ce:d3:
46:59:fa:67:b8:65:1d:c4:15:ed:c7:33:23:8b:a6:ea:31:90:
18:77:fb:ff:f1:27:95:13:a3:61:ec:cd:cf:25:71:f2:e6:07:
5e:bd:f9:39:6f:59:99:e7:1f:cb:1a:4f:33:a9:11:f9:91:82:
0b:ca:86:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4zc0uD7xfRHvcDOBIiuAyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiMjZjY2ZhMDcxN2RiOWY1NmFhMzhiODY5MmNlNWRjZmEy
ODI1ZTcwHhcNMjYwNTE3MDEwMDUzWhcNMjYwNTE4MDEwMDUzWjAzMTEwLwYDVQQD
EyhhZDRjMDBjYWE2YWQ1MjEwYjA3MTgyM2UxYTc1MTIwMjI1YWRiODE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArxSAqYstTLZVD1pWott4r4T0Sulq
qORLPQLopC2bOns6d9iY/3Qk1MjyP+hWgOCSyALDFF1jh02zRWZORntsvQmO2a5p
XB23hsqSG8kym/FuFHz73cvSQt5nXccklk9aHFvQCJLZtTYswW1szu/K0Ln1gMP4
NcKGmjoCKAvxGtXIqac+uctHt7r4P+M6yjIpnXYKl4eYtdEdb5JgR4vefuoCI1jb
CsTefuEUHNicn7L+WC/WuBxC5jGlvQTmIK6eNoCQjWBSZ8U/B+wWsijmMRGkdgpd
rpotzngdivQhFeQPoJ4fjOmiZFWvP89hPxBOsj4wco942Lu7HlpjcKYWewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1MAMqmrVIQsHGCPhp1EgIlrbgUMB8GA1UdIwQY
MBaAFLsmzPoHF9ufVqo4uGks5dz6KCXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2Qt
Y2NiZjBlNWIyYWRkLzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC81NTBjMzktNDRhMi00MzFiLTkzM2QtY2NiZjBlNWIyYWRk
LzEvdXliTS1nY1gyNTlXcWppNGFTemwzUG9vSmVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhQibFFDj
ycFJd1qqwilFvoDkTyizai3peAunInJGCMEMWImGkUin91RIRxR9cJ6ZBPRuhLVl
vKK/JWsKH7kodNONrbK1/RHAvnFjnnzAxrDY4sx7/Fj+dV3qiYgeMkiXHZenXlKD
BAr+lOahJAMDU7rwHkKCbFkPFLE3B/fuogyNZAoQBWQwpmxjWT4VHN/DaqOmR/2X
XAVBABB8zqId8BJQBHqLEUb496++hnmocyAl8nTER2Akr1OMwaNnwG1pwJ+muM7T
Rln6Z7hlHcQV7cczI4um6jGQGHf7//EnlROjYezNzyVx8uYHXr35OW9ZmecfyxpP
M6kR+ZGCC8qGLw==
-----END CERTIFICATE-----
Generated at Sun May 17 08:26:14 2026 by rpki-client