Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: aFLD9/P7mXpYtIYEZ3j/Daynd2W9raud7v+Mz6hjHvU=
Subject key identifier: A9:0A:B7:C7:19:D4:F2:7C:B1:E5:E7:D4:6B:07:E3:39:36:12:1C:C5
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019CE3DA51E0EE499D282162E33695483FA5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 0397
Signing time: Thu 12 Mar 2026 21:01:01 +0000
Manifest this update: Thu 12 Mar 2026 21:01:01 +0000
Manifest next update: Fri 13 Mar 2026 21:01:01 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: FJvKF7fhLvfwWz7WrzU2Oo0XIiVXZpMXzAgHlaS1aKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e3:da:51:e0:ee:49:9d:28:21:62:e3:36:95:48:3f:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Mar 12 21:01:01 2026 GMT
Not After : Mar 13 21:01:01 2026 GMT
Subject: CN=a90ab7c719d4f27cb1e5e7d46b07e33936121cc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:90:b2:31:9d:99:59:f9:71:c0:20:f6:f1:00:
eb:b0:56:f5:aa:e6:a4:08:4e:b5:de:fe:3b:59:e4:
da:de:24:46:b1:af:84:55:4a:20:68:ba:70:4d:5c:
77:6a:45:7e:58:19:07:27:8f:f6:86:b7:7c:98:3d:
9d:a8:83:58:c5:60:ec:fc:dd:5e:b8:6e:b5:2c:19:
42:67:ef:e4:9c:de:3a:94:2f:a9:58:7f:52:35:a1:
d9:23:4e:10:9f:f6:9c:61:2a:27:72:6f:00:0d:a5:
2d:b5:d7:3a:f3:be:3c:2e:c0:87:59:e0:b1:25:32:
c5:1c:a8:78:01:0b:a6:71:f4:c3:04:00:7c:8d:d8:
d4:a6:c2:05:09:11:83:2f:e9:db:a4:f8:36:9e:64:
b0:3f:74:13:5d:d6:c0:86:f0:24:6c:ee:3e:00:0f:
0a:f0:c4:24:80:ff:c8:58:dc:d5:ff:58:dc:0a:74:
f2:31:6f:5d:93:93:10:85:15:a4:a4:cf:3b:04:7e:
84:1a:81:c7:17:16:03:45:c3:02:42:d2:c1:12:05:
67:a2:ba:39:35:17:a0:90:68:48:73:a8:51:76:24:
85:c4:25:5e:c7:4d:24:99:9e:cf:90:30:b2:57:28:
ba:5f:12:53:66:5c:32:b2:49:bd:4b:71:8d:1c:61:
8e:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:0A:B7:C7:19:D4:F2:7C:B1:E5:E7:D4:6B:07:E3:39:36:12:1C:C5
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ab:34:32:3f:be:a3:64:01:a1:03:32:81:e3:71:e9:b5:2a:
1e:29:db:89:f2:a1:8a:ff:c1:1f:02:1a:a9:92:52:b0:6e:a1:
d6:fd:14:7f:86:4b:db:84:14:bc:c6:3c:2b:dd:ea:49:64:9a:
86:0e:a2:12:23:60:af:1f:98:d8:ba:7e:4e:79:cc:85:97:2f:
73:82:cb:b0:40:1e:d0:b4:e4:f3:5b:cf:67:c0:cd:3f:50:cd:
0f:54:74:32:9f:64:dd:29:96:ef:25:0c:5a:44:64:e5:cd:fb:
fd:b1:6e:ab:8d:3f:87:61:e7:da:f1:d7:12:df:8b:4a:52:1c:
a6:23:13:bd:b6:0c:b4:68:2d:e4:b9:ee:6a:8a:bf:b0:e6:79:
38:fd:ee:7a:82:57:6b:de:f0:88:1c:49:ee:68:c5:f1:52:d1:
90:9a:91:96:a2:14:57:5e:6b:52:a0:fd:46:7c:12:48:c5:b2:
bf:fc:41:c6:ca:71:4b:db:2d:f1:c0:6d:86:b7:15:2c:c8:bb:
2b:19:89:c8:dc:55:be:49:8d:40:02:46:75:2f:ab:39:ab:ae:
17:57:88:ca:82:3d:8e:f7:08:e5:52:9b:fe:11:be:a7:d1:21:
5e:72:28:b9:1e:8d:3d:3e:a1:4f:cb:d6:df:10:f8:64:ce:e9:
cb:87:1b:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 04:18:17 2026 by rpki-client