Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: 111aVeUSFVq8BwJhE8QZFUC/DWKIX4OrMaJbegCcxgU=
Subject key identifier: 7A:5B:3F:5C:EC:68:83:99:D0:8B:45:CD:26:D5:A7:8A:18:59:95:96
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019F9EF1120D3891A3907DBA0CEB3E406E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 0501
Signing time: Sun 26 Jul 2026 15:00:26 +0000
Manifest this update: Sun 26 Jul 2026 15:00:26 +0000
Manifest next update: Mon 27 Jul 2026 15:00:26 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: psh9GWswlNJQ8pjw2K+BlcKpudK7k1nMZc2+A3sRE+8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 14:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:f1:12:0d:38:91:a3:90:7d:ba:0c:eb:3e:40:6e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Jul 26 15:00:26 2026 GMT
Not After : Jul 27 15:00:26 2026 GMT
Subject: CN=7a5b3f5cec688399d08b45cd26d5a78a18599596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:8d:ab:e6:ae:58:31:e4:26:07:41:c1:f6:6f:
5e:81:2e:24:c8:2f:1d:82:d0:a4:0d:1a:22:30:7c:
86:0f:a9:4f:50:0b:96:5c:4c:23:52:0f:8d:90:92:
a6:85:0d:7e:34:dc:df:b3:f3:22:f3:2f:c2:4f:49:
8f:1d:11:75:58:ba:46:7b:67:50:ac:12:6b:a9:af:
07:6c:ed:0b:4a:cf:3b:b3:d8:17:2d:31:e1:69:02:
d8:95:e4:39:99:09:37:ca:9e:fa:27:26:5c:f7:4d:
93:80:21:3f:16:fc:fe:f9:a7:9b:fa:0d:2f:18:00:
c4:4b:de:ca:cb:84:49:3a:f3:f9:1d:34:20:35:fb:
c0:74:5b:76:f7:36:54:56:a2:b4:7b:a8:a7:fe:80:
32:93:c0:1d:5e:9a:87:d6:c8:9b:20:f0:01:0a:ad:
b5:80:43:4e:99:a7:25:35:34:77:62:4d:63:18:ee:
4d:86:39:c7:44:e4:9a:39:58:27:6f:cf:40:a0:b5:
6e:bd:e5:83:68:b3:04:07:53:59:42:27:a8:0b:3e:
a0:dc:4b:3b:b9:8b:c0:a0:2c:9b:fa:da:09:b7:f8:
5e:e2:82:51:12:29:17:89:98:9b:c5:d6:4f:9c:d2:
3b:4f:c6:95:19:af:01:45:cd:b8:4f:48:97:53:2a:
dc:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:5B:3F:5C:EC:68:83:99:D0:8B:45:CD:26:D5:A7:8A:18:59:95:96
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:1d:12:fb:0f:ea:1e:48:fb:d9:0c:e1:4e:fb:82:61:72:d5:
96:a9:7b:f0:fe:f7:8d:32:54:f0:cd:a5:1a:be:7a:de:2c:a1:
04:31:49:df:dd:f4:6b:8e:5c:4e:26:50:bc:b0:08:8e:f3:00:
a6:e5:26:64:61:fc:06:c9:71:29:a9:0d:a5:33:71:db:02:c1:
f3:15:38:bb:70:23:86:88:a6:9f:90:48:b9:06:92:25:a6:13:
05:60:93:6c:39:5c:81:5e:d0:b9:74:79:4d:fc:98:0f:c9:66:
92:36:29:f4:e3:3a:20:18:08:c6:bb:53:f4:f0:bd:4d:45:6b:
ff:c4:d9:54:8a:4a:2c:9b:f2:70:98:8c:2b:94:32:e4:e9:1e:
78:ce:c6:04:c3:22:f1:d7:3c:cc:43:cc:ab:7c:99:4f:1a:20:
0a:12:2b:f6:03:86:c4:09:9d:1c:50:85:dc:c8:02:a7:4d:7f:
e4:60:9d:8f:ca:3b:9b:46:9b:05:b9:f1:4e:3f:94:e4:f2:2f:
76:bb:f1:e1:f1:91:5f:6e:d3:26:e9:c0:46:70:ad:2b:d2:c8:
da:bd:78:11:be:29:10:3b:dc:2f:b0:ef:df:34:dc:93:2c:02:
3e:42:69:d6:b7:65:78:ad:72:c6:bc:49:3c:bb:ac:55:b2:b4:
f0:0e:93:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:16:50 2026 by rpki-client