Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
File: uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft (raw, json)
Hash identifier: 8vdGmFtq6KzMADGjyM1DKP7Lwx+OaAx4xiwtHcZU2jk=
Subject key identifier: 90:98:47:09:06:FC:A5:6C:53:68:45:CD:A1:C8:03:40:74:98:6A:D7
Authority key identifier: BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
Certificate issuer: /CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Certificate serial: 019E1E6C26CEAEE8820C3042FE91A36C217D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
Manifest number: 104B
Signing time: Tue 12 May 2026 23:01:04 +0000
Manifest this update: Tue 12 May 2026 23:01:04 +0000
Manifest next update: Wed 13 May 2026 23:01:04 +0000
Files and hashes: 1: 1-hqgVSQBF_UvAinXCtYpxtppbVY.roa (hash: MeKegUTuGCWzFw8KT6nzeyZf5iVq1ADUyVCv+0PDLZ0=)
2: RgWpzavVVfS1b_1UHTxSsoDVFDI.roa (hash: eoIqVrp2QP0CPLWKfdOhEUrB73wKmzs7Euo9X382JX8=)
3: uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl (hash: 706Goqd8aOtDbCpph0NAqPyqIXggB6GNRPDjVh9o4fg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:6c:26:ce:ae:e8:82:0c:30:42:fe:91:a3:6c:21:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba838f1ca8bdcd81c04b6b678e79be614e51b111
Validity
Not Before: May 12 23:01:04 2026 GMT
Not After : May 13 23:01:04 2026 GMT
Subject: CN=9098470906fca56c536845cda1c8034074986ad7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:7c:56:60:fe:3b:53:b0:47:bc:ed:8b:17:a7:
b4:5c:80:13:42:9e:b3:82:99:35:c5:51:e2:4f:18:
9b:91:a9:12:67:6c:bc:40:c7:73:f8:51:6e:b1:5c:
1a:66:05:d7:22:9c:fc:16:b2:c3:66:79:71:68:a6:
6f:4f:05:5f:19:0a:94:67:1b:ce:1b:05:db:74:07:
88:0b:08:aa:59:10:ae:6b:e0:1a:a6:f6:52:21:69:
c3:25:d0:0b:3d:cb:56:97:51:73:78:af:3f:68:c5:
82:8b:47:65:5f:50:50:a1:fd:fc:e6:01:a7:a1:43:
d5:ef:7d:b9:e7:c1:ec:0e:95:c7:f2:01:0f:d0:a2:
b4:b6:2c:2e:09:8d:ff:23:f4:7a:e1:27:b3:a2:ad:
21:32:fa:79:76:a4:f2:6f:2a:64:bc:68:3b:df:ae:
85:df:6b:61:67:48:f4:59:37:a7:15:f2:7a:f2:24:
2d:83:d4:9a:82:63:b6:6d:5b:5e:b2:3b:fc:6e:c1:
5a:15:ff:6d:87:33:33:08:43:dc:da:15:44:96:64:
59:82:5c:5c:ed:df:82:c1:ab:d5:4d:ff:c8:26:c1:
9d:57:af:fb:41:71:c2:a5:34:81:da:55:1a:c2:f1:
de:4e:26:fa:99:fa:29:8b:73:ff:c0:c5:b7:3d:cd:
46:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:98:47:09:06:FC:A5:6C:53:68:45:CD:A1:C8:03:40:74:98:6A:D7
X509v3 Authority Key Identifier:
keyid:BA:83:8F:1C:A8:BD:CD:81:C0:4B:6B:67:8E:79:BE:61:4E:51:B1:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uoOPHKi9zYHAS2tnjnm-YU5RsRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/db4e88-e58d-4345-80c7-093eb9a9aa8b/1/uoOPHKi9zYHAS2tnjnm-YU5RsRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:02:56:90:aa:8c:c8:06:71:98:13:72:24:5d:0b:54:77:ce:
85:09:81:2b:00:03:2a:fc:2f:d6:f9:ac:6d:87:36:bf:c6:0f:
9f:5c:d4:a4:eb:84:54:d0:8e:c0:5a:45:2f:28:b9:5f:70:29:
39:8d:95:5e:13:08:7f:88:49:48:35:a6:ed:e7:96:74:df:2c:
83:71:48:8b:ca:4e:59:45:a0:3e:2a:0d:56:4c:a0:ee:a8:a8:
c4:68:7d:1e:91:9b:ab:c0:57:fb:2a:92:f9:30:b3:41:b1:86:
d3:d4:f6:05:44:e2:7d:f1:64:57:f5:0a:9f:cf:c3:5e:61:65:
ee:4f:03:de:9d:e6:88:ff:d7:6e:e5:57:2b:f3:2b:bc:8f:a4:
af:af:f5:18:f2:e7:1a:1c:0e:ed:a7:fd:ea:ca:b4:50:12:88:
df:be:46:16:8c:c1:6a:47:a1:e8:55:ba:24:86:6e:55:2e:90:
3d:7a:ee:03:ed:fa:e8:ab:6a:8e:98:f8:80:d6:65:83:e9:d0:
33:3e:86:67:7a:31:db:23:3e:e2:d7:1d:c5:3c:73:57:b5:a6:
bc:f6:e5:ee:94:59:9b:85:c0:bd:14:69:e5:1a:0e:85:b7:20:
b4:76:aa:ed:46:78:5c:b8:fc:9a:82:42:4a:09:ec:e3:d7:3f:
9c:51:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:20:23 2026 by rpki-client