Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: su5W/iXxxajPTOjpvBgtrQV5xj7EqNaZo96JapMrN8I=
Subject key identifier: 38:64:A7:71:B6:44:0C:71:46:D3:D8:EF:3B:14:E1:A9:22:4B:66:A6
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019DD72EE262842FC3DC75D7A904E6393F40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 0415
Signing time: Wed 29 Apr 2026 03:01:07 +0000
Manifest this update: Wed 29 Apr 2026 03:01:07 +0000
Manifest next update: Thu 30 Apr 2026 03:01:07 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: sPGm6TQYhmwhILUSfaR5rabWFVgtNY9VrPlQmv2vlew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 03:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d7:2e:e2:62:84:2f:c3:dc:75:d7:a9:04:e6:39:3f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Apr 29 03:01:07 2026 GMT
Not After : Apr 30 03:01:07 2026 GMT
Subject: CN=3864a771b6440c7146d3d8ef3b14e1a9224b66a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:7f:34:1b:28:56:22:4c:5a:97:fe:01:e2:69:
98:4f:f5:5f:72:f7:7f:6b:a9:71:07:aa:e4:05:26:
da:ef:db:14:99:35:3b:54:bd:2c:63:e8:d6:73:7d:
fa:33:47:65:89:5d:ff:ae:ab:2d:0c:0a:9d:2d:6f:
b1:de:14:ce:a3:cb:f8:fa:e7:8f:8d:e8:f6:96:64:
a9:09:4e:dc:c9:8c:70:e4:8a:10:37:9a:d7:86:93:
e4:96:5f:e4:58:fc:77:11:7d:bb:b2:ad:3e:11:d3:
b5:32:3c:11:b6:bb:b4:a0:cc:30:e4:6a:a0:c4:fa:
e3:69:dc:c5:59:e3:0b:3d:ee:ea:07:5e:8a:80:55:
bc:a6:28:29:d0:0d:e1:e1:e0:d1:3d:8f:c5:b1:ea:
7d:b4:78:d9:58:8e:29:47:72:35:26:e9:f9:a1:ad:
4c:44:5f:5c:e5:d6:ba:b9:f8:61:96:56:78:fe:b8:
b0:8d:d0:9f:5c:ec:6e:6a:88:47:61:9f:ea:8b:d4:
f1:6a:25:9b:49:db:7d:ad:c5:ae:67:13:06:f1:00:
61:c5:a5:53:27:dd:31:ed:6b:33:d9:25:cd:5f:52:
3c:75:41:e9:02:85:6c:b0:6b:0d:52:ec:67:44:0d:
16:0b:73:03:a6:bf:c5:e2:78:5e:26:19:16:03:7d:
38:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:64:A7:71:B6:44:0C:71:46:D3:D8:EF:3B:14:E1:A9:22:4B:66:A6
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f7:e0:74:16:bb:6c:7b:44:1f:ad:cd:e8:29:c3:0c:7d:e2:
0d:0b:02:e0:c3:61:87:46:5d:ea:f2:bf:9a:ed:3a:3f:ea:c1:
10:20:c1:0e:76:4c:86:41:51:3a:5d:cb:39:1f:58:9d:22:e9:
2a:70:bd:55:a7:c6:d5:fe:a1:0c:5c:83:52:4c:d2:ea:88:ce:
d2:1d:29:c8:f1:8d:17:30:6e:79:14:a8:17:aa:6c:c3:c8:74:
a7:5b:34:6e:80:d1:32:0d:b1:51:4a:e1:30:d6:f2:16:a9:55:
a5:8d:b0:68:21:15:6f:af:4c:10:b8:26:24:a2:af:e9:ac:3e:
0b:ee:87:bf:77:70:a1:57:20:04:c5:46:ba:ee:69:df:13:c7:
c1:0a:56:d6:e0:e7:c4:ed:bc:35:c9:69:65:0d:9a:0a:82:9d:
f6:ad:a5:c4:67:f4:66:56:80:be:4d:32:47:9c:45:51:1c:45:
6a:b9:e6:e6:d5:ae:02:88:f4:17:74:cd:58:6c:ce:2c:49:8f:
a2:27:ff:2d:d6:f5:91:ff:4a:db:3d:05:7f:8e:ff:a0:54:72:
24:87:84:fd:bd:82:74:08:16:c0:72:e9:ee:5a:33:b7:13:b5:
73:82:cd:08:ee:a4:6f:27:d9:bd:2e:c3:43:56:6c:d6:0e:49:
75:54:ab:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3XLuJihC/D3HXXqQTmOT9AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTYzMTEwODI1N2I3MWZlMzMwYmM5OGIzYWJjMTQ2Yzk1
Yjg4ZTAwHhcNMjYwNDI5MDMwMTA3WhcNMjYwNDMwMDMwMTA3WjAzMTEwLwYDVQQD
EygzODY0YTc3MWI2NDQwYzcxNDZkM2Q4ZWYzYjE0ZTFhOTIyNGI2NmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArH80GyhWIkxal/4B4mmYT/Vfcvd/
a6lxB6rkBSba79sUmTU7VL0sY+jWc336M0dliV3/rqstDAqdLW+x3hTOo8v4+ueP
jej2lmSpCU7cyYxw5IoQN5rXhpPkll/kWPx3EX27sq0+EdO1MjwRtru0oMww5Gqg
xPrjadzFWeMLPe7qB16KgFW8pigp0A3h4eDRPY/Fsep9tHjZWI4pR3I1Jun5oa1M
RF9c5da6ufhhllZ4/riwjdCfXOxuaohHYZ/qi9TxaiWbSdt9rcWuZxMG8QBhxaVT
J90x7Wsz2SXNX1I8dUHpAoVssGsNUuxnRA0WC3MDpr/F4nheJhkWA3041wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhkp3G2RAxxRtPY7zsU4akiS2amMB8GA1UdIwQY
MBaAFLhWMRCCV7cf4zC8mLOrwUbJW4jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEt
YTJlY2JhOGU0OTlkLzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEtYTJlY2JhOGU0OTlk
LzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/fgdBa7
bHtEH63N6CnDDH3iDQsC4MNhh0Zd6vK/mu06P+rBECDBDnZMhkFROl3LOR9YnSLp
KnC9VafG1f6hDFyDUkzS6ojO0h0pyPGNFzBueRSoF6psw8h0p1s0boDRMg2xUUrh
MNbyFqlVpY2waCEVb69MELgmJKKv6aw+C+6Hv3dwoVcgBMVGuu5p3xPHwQpW1uDn
xO28NclpZQ2aCoKd9q2lxGf0ZlaAvk0yR5xFURxFarnm5tWuAoj0F3TNWGzOLEmP
oif/Ldb1kf9K2z0Ff47/oFRyJIeE/b2CdAgWwHLp7loztxO1c4LNCO6kbyfZvS7D
Q1Zs1g5JdVSrcg==
-----END CERTIFICATE-----
Generated at Wed Apr 29 08:14:44 2026 by rpki-client