Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: uMiW0wgYoSvtCm8cct2NlSy05/QQsSPrK2FgcXeQ5Zo=
Subject key identifier: F0:F3:66:59:ED:2C:0B:9A:47:B0:7A:A4:E8:4F:E8:2A:CE:98:94:A5
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 019E21362596E382682135B3719F95826202
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 1627
Signing time: Wed 13 May 2026 12:00:57 +0000
Manifest this update: Wed 13 May 2026 12:00:57 +0000
Manifest next update: Thu 14 May 2026 12:00:57 +0000
Files and hashes: 1: AWxzzyNyiEe96JGpfTTltwTSHS0.roa (hash: e990mLN/bBQ15JQILJpMpdVXqqpNaInRtBdXK82dx1E=)
2: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: b/00n7SxfcwlT/JMxNQSKX4i6BOCgk5gZ+dfuxmpcJE=)
3: yHLToeByeR5LXnQLDh6oCy31RMM.roa (hash: JH11seY61l0JGKEmVY9l0Ssg5gMsTcO0W459L08nH2c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 12:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:36:25:96:e3:82:68:21:35:b3:71:9f:95:82:62:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: May 13 12:00:57 2026 GMT
Not After : May 14 12:00:57 2026 GMT
Subject: CN=f0f36659ed2c0b9a47b07aa4e84fe82ace9894a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:0c:9d:42:56:4b:90:5f:85:7d:70:33:cc:28:
63:cd:5d:d8:89:a9:e6:91:be:b5:ee:6a:75:5b:43:
9c:4f:0e:48:21:5f:ad:a0:54:22:0c:10:a2:54:af:
8d:d5:54:fa:b3:2f:c4:e3:4b:e7:c5:b3:64:9f:87:
5b:d6:a2:a8:08:ca:55:0b:08:c9:7b:8b:e6:37:c9:
01:fb:ea:16:e3:e8:86:94:76:e0:f8:22:d7:a9:cd:
f1:b9:00:ab:47:d6:84:f9:90:21:c9:e9:65:34:3f:
c9:d8:b8:50:2a:84:e3:b9:8d:b9:2a:36:e6:af:87:
90:1a:9b:97:a0:70:42:a9:40:90:36:cb:5a:d5:93:
f8:97:84:89:d0:7b:e6:4b:52:a6:18:a1:83:9c:dd:
5f:9c:18:50:21:9e:4c:c6:f1:aa:c1:2a:4b:17:e7:
17:a8:e8:18:0e:0f:48:64:e5:6b:96:85:b2:7f:72:
f8:22:49:2e:13:80:bc:b9:a7:39:6e:e7:f9:28:8d:
5e:96:ae:8c:1b:f6:b3:df:ad:15:ea:61:56:3c:bf:
dd:47:25:4e:61:02:c0:a0:21:ca:23:de:6c:94:81:
3e:2c:c5:3a:10:4c:c4:73:b7:a7:df:92:27:37:5b:
9c:f7:f6:39:c4:d1:5f:8c:3b:79:5c:91:ec:0a:0d:
0e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:F3:66:59:ED:2C:0B:9A:47:B0:7A:A4:E8:4F:E8:2A:CE:98:94:A5
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d5:5a:6a:9a:8e:5f:7f:44:d6:75:74:7a:40:9a:96:3b:51:2e:
2e:05:2a:bb:9b:75:35:fe:1e:37:c6:e0:65:de:1a:db:fc:13:
9b:22:69:f6:dc:00:02:8e:40:c7:66:1c:8f:b0:74:6b:ff:24:
2d:14:82:e7:84:93:ba:db:2b:61:03:6c:5f:e0:06:b8:bd:e8:
2b:46:a4:07:4e:73:cc:fb:e6:12:a0:d9:9c:ab:a2:63:a5:45:
41:87:e9:22:46:f2:21:8f:fb:37:a3:c7:82:2c:8b:49:64:01:
df:31:13:2b:11:29:ef:a7:49:a1:dc:00:77:0a:0a:2a:75:01:
f9:96:d8:33:61:9b:7f:50:b5:d8:9d:a0:20:1e:1c:8d:57:4d:
f5:46:47:dc:93:2e:9e:d3:ad:e4:b5:b5:3a:07:3a:c8:cc:9e:
5c:df:6d:67:09:38:8f:02:d7:95:73:03:2c:f7:06:3a:32:1d:
2e:40:5e:4f:f4:6a:90:34:93:4c:42:95:2f:76:68:7e:26:85:
84:2e:b6:1d:b0:a0:24:c8:2f:ab:7b:cc:1d:d9:60:7f:59:22:
0e:fd:d6:4c:1c:23:fe:26:66:2e:1a:f4:64:b5:b3:de:0a:73:
84:19:3e:c9:99:46:bc:7a:d4:69:23:31:06:6c:af:a9:97:e0:
f1:ec:d3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 20:16:37 2026 by rpki-client