Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: /1S+SK3+LADNnu8uoxUIUYhcWW+mLqcW9VPBJ9N4LTU=
Subject key identifier: 7F:8D:E9:4F:6F:5A:C6:F1:9E:B1:C5:55:9E:14:7B:E1:96:B4:31:82
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 019E1F47D2A8810F1562CCC5EEEB1A799BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0B68
Signing time: Wed 13 May 2026 03:01:01 +0000
Manifest this update: Wed 13 May 2026 03:01:01 +0000
Manifest next update: Thu 14 May 2026 03:01:01 +0000
Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=)
2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: h5AxVook6Z2WASG23iH3WuaZ+sQeiof5gyohpTe+N10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 03:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1f:47:d2:a8:81:0f:15:62:cc:c5:ee:eb:1a:79:9b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: May 13 03:01:01 2026 GMT
Not After : May 14 03:01:01 2026 GMT
Subject: CN=7f8de94f6f5ac6f19eb1c5559e147be196b43182
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:03:be:16:37:59:6b:fc:e0:5d:e8:64:1f:32:
03:da:f9:8c:9c:65:e1:1b:55:27:3b:e4:9d:ee:9b:
6d:6a:7f:6d:54:c6:6a:49:58:5b:2b:02:b9:e6:ab:
d1:96:8a:ea:1a:0e:4b:0f:92:e8:f1:79:06:11:79:
59:8c:ea:f0:be:e8:8a:87:d4:2a:db:73:6c:fd:29:
86:61:60:aa:33:20:81:36:38:b4:c7:bb:d7:66:60:
66:d0:c6:94:ab:7f:cf:c5:67:10:a6:74:79:ea:67:
f4:11:8b:c3:e5:22:97:2a:2c:92:98:4b:ef:16:41:
f3:5e:f5:b6:e0:a8:4a:f2:c5:18:17:45:eb:ca:1f:
da:76:be:10:3e:19:82:88:71:25:da:0c:b6:c5:7d:
c1:8b:95:71:95:85:75:21:95:88:92:43:92:27:19:
56:91:ed:2b:b8:54:80:14:c3:ed:b1:67:f1:13:e1:
69:e2:92:f7:95:6d:64:0a:1c:8a:c9:c1:91:49:fe:
b0:79:34:90:42:ed:9e:d2:a5:dc:85:fc:ca:60:86:
ea:36:dd:22:b8:31:1c:46:49:1c:fa:d3:5b:d6:7f:
f1:f4:fd:de:e4:e3:06:35:9e:e1:4e:d1:08:08:44:
05:00:d9:d0:18:93:85:37:72:5c:8c:2d:dc:0a:5e:
26:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:8D:E9:4F:6F:5A:C6:F1:9E:B1:C5:55:9E:14:7B:E1:96:B4:31:82
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:e8:9e:20:94:89:c7:2c:7d:b3:14:3b:9b:33:64:bd:c4:05:
de:8b:5a:5a:e8:59:85:eb:23:10:96:b5:35:ec:63:da:bf:0a:
8e:02:48:b7:ad:d4:83:8a:57:89:e9:de:e7:32:10:a0:9f:4b:
2a:1d:60:0c:d5:ff:92:04:2c:19:49:25:3a:36:cf:fa:36:ac:
a5:02:64:3c:19:be:ae:ed:2d:6b:ed:90:8e:d1:9a:b8:c9:5a:
d3:cb:3a:a4:e5:0f:77:ad:c4:ab:d7:61:ec:e6:1e:b2:84:a3:
97:82:ab:35:ef:d1:b0:b2:be:03:8a:4d:a4:da:ea:67:da:67:
d8:5c:d7:1d:ff:71:6e:ec:dd:d2:a5:ac:a2:5f:b5:a5:45:2c:
ea:a2:d1:6a:3b:04:51:b0:d7:11:b0:fe:0b:ce:9b:8d:0d:cd:
f2:69:dc:25:d2:ea:64:72:ce:13:19:e8:df:d9:37:7a:ec:a2:
69:2d:ee:19:a2:e2:a3:77:e7:d1:ea:a4:e4:5d:54:97:c3:26:
72:39:79:ea:f6:ae:e7:b7:62:e9:78:5f:07:24:c1:6c:85:a8:
81:5a:ea:0a:46:7d:4e:2b:8e:8d:57:ca:d3:2b:cb:7d:20:21:
51:b9:bc:37:2c:bd:4b:c9:56:12:5d:74:dd:3b:5a:d8:11:fa:
dd:67:01:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:53:10 2026 by rpki-client