Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: Eqahmh2oliWEJ9vyI4b+/6TahfOsdhs2mNLDi7owQBI=
Subject key identifier: 47:FF:55:41:CA:5A:B1:2A:EA:6A:E2:3D:C6:6A:99:94:7E:C0:75:B3
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 01A17BF229588E86D488F4852689E6896C32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 05F8
Signing time: Tue 27 Oct 2026 06:00:30 +0000
Manifest this update: Tue 27 Oct 2026 06:00:30 +0000
Manifest next update: Wed 28 Oct 2026 06:00:30 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: ZNt0Af9kBXeXW+Pt5sPXAJfKRI4DqItcrhNfN0NQrYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:f2:29:58:8e:86:d4:88:f4:85:26:89:e6:89:6c:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Oct 27 06:00:30 2026 GMT
Not After : Oct 28 06:00:30 2026 GMT
Subject: CN=47ff5541ca5ab12aea6ae23dc66a99947ec075b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e0:9a:ca:e9:57:d0:30:66:a3:4b:6c:26:47:
7d:2a:ef:37:f1:a0:59:36:9b:05:99:9a:dc:91:d6:
7b:1a:02:ca:97:1c:9a:43:fb:6e:b5:c6:cb:71:e9:
c2:36:70:3b:ca:72:c5:c6:f6:b1:58:f1:d8:4d:9e:
c0:5b:c2:2d:29:88:a8:03:b1:cd:00:ee:53:20:87:
76:f1:be:17:7c:3d:de:26:b7:82:ce:21:91:45:46:
e1:ab:cb:6f:20:22:90:6c:40:aa:ca:43:7b:c3:46:
ce:9f:7c:a2:53:09:1a:f0:fc:e1:61:39:70:00:2e:
45:93:8f:2a:19:bc:85:bb:7e:08:ae:76:58:37:3a:
ba:74:de:82:0e:a0:81:fa:8e:4b:de:66:a6:7d:ea:
d0:90:73:c4:7c:fc:cf:49:f5:89:52:93:6d:91:fb:
53:a5:6d:86:3e:83:f0:89:cb:e0:fa:75:73:47:e4:
6d:60:bf:5f:08:b3:8a:e1:4c:34:d3:b4:7e:59:1d:
de:4c:49:e2:bb:c3:ac:d4:1f:c9:99:d5:cb:bf:d2:
1d:c2:a0:04:24:b1:81:be:65:26:1d:d1:0d:53:d0:
00:d0:1d:f4:c4:81:5d:2b:fb:3b:1e:6c:2f:9c:59:
1d:9c:9d:62:b2:33:30:4f:69:fd:59:24:d7:40:59:
ab:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:FF:55:41:CA:5A:B1:2A:EA:6A:E2:3D:C6:6A:99:94:7E:C0:75:B3
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:0b:c2:90:ad:45:a6:da:bb:e6:96:d2:d2:ac:53:94:f9:2e:
ef:61:49:f7:cc:04:30:3c:27:2a:15:bd:09:ce:98:e1:10:07:
fc:06:2e:08:b1:56:d8:6d:1c:61:83:3d:94:75:92:c5:7f:2c:
f1:24:19:f3:a9:9d:06:51:7c:58:54:92:99:2e:97:b4:2f:81:
4b:e6:f2:42:ff:aa:89:be:6c:38:6f:65:5d:09:0c:8a:80:56:
62:a1:58:16:1f:ff:7d:3f:e0:43:df:a3:73:31:67:65:45:c0:
41:fa:85:8f:15:3c:c5:cf:7a:42:af:09:27:f2:89:52:58:a6:
26:5a:84:53:73:37:5d:16:55:41:5b:aa:bd:d4:e3:78:91:4c:
c8:08:a1:e5:15:c1:1c:65:46:f4:cd:32:24:d6:be:6e:3b:54:
81:21:c0:ce:e4:05:c3:7c:db:37:9b:35:42:20:61:38:76:a2:
46:37:27:29:5e:bc:01:15:70:ca:61:21:d6:d8:dd:bc:5c:3b:
41:ff:93:2e:3f:3f:f0:50:e5:a1:b3:78:3d:0a:37:ac:ad:de:
08:bf:0e:34:29:fb:b2:16:9c:4f:d1:de:c5:6e:0b:bf:b2:5e:
83:49:ce:b9:5d:db:82:b7:b9:83:86:a2:d5:9b:c4:7e:48:4b:
00:b4:2c:5e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF78ilYjobUiPSFJonmiWwyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTYzMTEwODI1N2I3MWZlMzMwYmM5OGIzYWJjMTQ2Yzk1
Yjg4ZTAwHhcNMjYxMDI3MDYwMDMwWhcNMjYxMDI4MDYwMDMwWjAzMTEwLwYDVQQD
Eyg0N2ZmNTU0MWNhNWFiMTJhZWE2YWUyM2RjNjZhOTk5NDdlYzA3NWIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoeCayulX0DBmo0tsJkd9Ku838aBZ
NpsFmZrckdZ7GgLKlxyaQ/tutcbLcenCNnA7ynLFxvaxWPHYTZ7AW8ItKYioA7HN
AO5TIId28b4XfD3eJreCziGRRUbhq8tvICKQbECqykN7w0bOn3yiUwka8PzhYTlw
AC5Fk48qGbyFu34IrnZYNzq6dN6CDqCB+o5L3mamferQkHPEfPzPSfWJUpNtkftT
pW2GPoPwicvg+nVzR+RtYL9fCLOK4Uw007R+WR3eTEniu8Os1B/JmdXLv9IdwqAE
JLGBvmUmHdENU9AA0B30xIFdK/s7HmwvnFkdnJ1isjMwT2n9WSTXQFmrUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEf/VUHKWrEq6mriPcZqmZR+wHWzMB8GA1UdIwQY
MBaAFLhWMRCCV7cf4zC8mLOrwUbJW4jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEt
YTJlY2JhOGU0OTlkLzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEtYTJlY2JhOGU0OTlk
LzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUQvCkK1F
ptq75pbS0qxTlPku72FJ98wEMDwnKhW9Cc6Y4RAH/AYuCLFW2G0cYYM9lHWSxX8s
8SQZ86mdBlF8WFSSmS6XtC+BS+byQv+qib5sOG9lXQkMioBWYqFYFh//fT/gQ9+j
czFnZUXAQfqFjxU8xc96Qq8JJ/KJUlimJlqEU3M3XRZVQVuqvdTjeJFMyAih5RXB
HGVG9M0yJNa+bjtUgSHAzuQFw3zbN5s1QiBhOHaiRjcnKV68ARVwymEh1tjdvFw7
Qf+TLj8/8FDlobN4PQo3rK3eCL8ONCn7shacT9HexW4Lv7Jeg0nOuV3bgre5g4ai
1ZvEfkhLALQsXg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:57:49 2026 by rpki-client