Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: 55SLW7+6BehIG2i2uYroJnPqZwRrnAsZ8sAtcvCHeVI=
Subject key identifier: 0B:50:C5:BD:A7:2F:DC:6B:48:64:9A:7E:55:78:F5:8C:20:34:F6:53
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019E1ED9D8B54D3AEC5AF8D5A2E602A9936C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 0852
Signing time: Wed 13 May 2026 01:00:53 +0000
Manifest this update: Wed 13 May 2026 01:00:53 +0000
Manifest next update: Thu 14 May 2026 01:00:53 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: A3wJb3EcVYWNcq7xJPSDLn8thnSXQRbqhZ7WLIKKRzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:d9:d8:b5:4d:3a:ec:5a:f8:d5:a2:e6:02:a9:93:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: May 13 01:00:53 2026 GMT
Not After : May 14 01:00:53 2026 GMT
Subject: CN=0b50c5bda72fdc6b48649a7e5578f58c2034f653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:14:4b:ed:ff:eb:a4:12:95:7f:8d:00:14:92:
04:5a:77:ce:bf:84:13:bd:53:aa:01:3d:56:11:c8:
19:9d:e3:3e:45:38:af:94:92:af:b1:a3:1a:9d:8d:
58:a6:25:44:cf:4d:6f:61:3a:d3:5a:8a:bd:11:df:
97:07:b7:41:9a:25:22:a5:0d:99:2b:6d:5d:f7:db:
a7:de:05:f3:25:46:3b:34:ab:35:20:24:fc:ff:6f:
30:6e:2d:e6:84:58:1a:c6:9d:36:22:14:7d:2d:89:
a3:34:5b:73:22:c1:6c:e1:22:c2:0b:b5:bd:69:29:
5e:a5:24:fe:83:5f:b6:56:65:d1:a2:b4:36:d5:00:
c2:b0:05:2c:a9:d9:7a:d5:8a:2e:b1:21:56:58:62:
55:4d:e3:42:ed:0c:2a:2c:82:50:fd:92:a4:00:d4:
76:4b:1b:a3:de:4e:3f:d1:0b:49:b0:d3:a6:05:2d:
42:2b:2d:b5:2d:cf:d7:2e:fa:7d:0f:c3:05:b7:5f:
dd:1f:1d:86:15:10:d7:ce:a5:4c:fa:2b:cd:d9:1e:
79:d0:97:ba:79:5b:3d:88:01:db:c1:b1:bf:47:04:
18:2e:97:ff:8e:7e:71:5b:27:d2:41:4a:60:b1:17:
8a:98:0b:f3:7b:ba:8c:49:84:ad:8a:32:25:9c:b6:
36:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:50:C5:BD:A7:2F:DC:6B:48:64:9A:7E:55:78:F5:8C:20:34:F6:53
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:19:5b:fc:19:f3:3e:cb:16:fb:13:30:06:da:15:d5:55:d8:
35:e8:25:07:fc:b6:b0:92:1a:13:c8:dd:85:bd:e8:7c:5f:4f:
46:d6:d2:c2:32:8e:ca:6c:3b:c9:76:ef:52:04:51:7c:dd:ea:
55:84:b2:89:07:a8:14:19:c9:3f:de:42:db:4e:cb:8b:40:4f:
ef:b4:df:49:ba:d0:32:65:d2:54:6d:99:5c:95:0a:01:47:63:
f5:af:7b:76:93:a9:15:1a:c4:ac:02:ce:88:02:eb:9f:6b:c9:
70:08:86:a5:1e:d0:5c:c0:8e:bc:59:dc:50:b9:83:73:60:62:
a2:4e:88:e6:16:91:53:f9:86:a8:83:19:c4:d5:5e:8b:ec:f1:
57:5f:4c:6f:aa:6c:85:b8:7b:28:d3:ee:27:dd:75:a8:93:87:
04:89:36:40:12:74:19:e4:72:12:cd:b4:a4:ad:da:71:6f:4d:
44:45:29:af:5a:da:fd:19:fc:cd:04:c0:25:15:ce:92:ea:a2:
9a:c1:83:71:88:6a:29:76:fe:46:a1:9d:ce:02:1f:90:6c:cf:
47:8f:ad:b4:a6:69:d3:b9:02:0f:33:e0:72:46:94:40:01:3d:
3b:7f:1a:80:a3:29:96:c9:c8:b8:e7:82:18:54:ee:8b:19:90:
91:6f:6d:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:47:54 2026 by rpki-client