Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: 2llg7dE+c4QCJI5NGHGeJiE5q3Q0YhE4bqVT/nP2+g0=
Subject key identifier: 98:9E:A9:BB:D0:AB:20:B7:E1:42:AC:4C:46:9C:36:F9:21:32:7D:EE
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019D2772D0D35B410018BEA1B5B4F4AC7FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 03BA
Signing time: Thu 26 Mar 2026 00:02:09 +0000
Manifest this update: Thu 26 Mar 2026 00:02:09 +0000
Manifest next update: Fri 27 Mar 2026 00:02:09 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: CXa4YeI2f3MS7ebY0oTVaoNSaQk4Jbw6oC+kJ8g5t6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:d0:d3:5b:41:00:18:be:a1:b5:b4:f4:ac:7f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Mar 26 00:02:09 2026 GMT
Not After : Mar 27 00:02:09 2026 GMT
Subject: CN=989ea9bbd0ab20b7e142ac4c469c36f921327dee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:c3:17:2a:20:31:85:1b:7e:d6:ab:e6:e1:45:
b9:e7:40:82:2c:91:1c:50:73:b1:41:1c:7f:71:96:
db:52:cd:65:33:9d:1a:dc:d2:51:05:86:32:52:ce:
d4:c6:7f:e1:ab:81:1f:d2:34:8a:e9:e9:66:57:8f:
8b:3d:0b:1f:ab:1a:43:80:1f:59:a4:24:34:00:39:
b5:71:35:18:9f:58:27:f5:3d:40:a1:d2:49:05:8f:
0d:d4:d8:d0:a6:73:43:16:2d:55:c4:22:26:69:68:
57:f9:ec:38:49:ff:a6:1d:8d:e1:41:46:ae:9f:ac:
0a:11:31:ba:68:07:d8:99:f4:f0:24:02:4c:ad:82:
f9:ef:29:b1:9c:75:54:c5:e1:a8:a4:e3:83:aa:6a:
ed:d6:b9:7a:ed:fd:81:bf:20:88:4a:0c:2c:61:c5:
1f:d9:d1:81:e2:1e:8d:a4:ce:e6:b0:34:5d:32:35:
ca:72:b0:17:f3:ce:b0:6b:ad:68:fc:18:18:62:db:
49:51:26:fe:6c:a0:63:72:56:27:d8:b1:e3:02:9f:
a0:54:93:6d:17:72:92:75:42:f9:1e:0f:72:30:49:
e3:8e:77:c5:d6:b9:ad:13:ac:74:a4:d1:36:a7:cf:
ee:2f:e3:3d:66:d9:59:83:c8:31:60:df:e3:b5:ba:
24:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:9E:A9:BB:D0:AB:20:B7:E1:42:AC:4C:46:9C:36:F9:21:32:7D:EE
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:11:5e:4d:2a:cc:84:7a:8d:39:f9:fe:ff:46:36:0d:fb:aa:
94:e9:ae:41:27:2f:0f:f1:8f:9c:7a:38:7c:f8:5c:07:79:42:
24:4e:81:eb:c7:19:15:eb:b4:52:fc:bd:97:fa:88:e9:ac:9e:
1c:ba:68:2e:9c:d8:5f:e7:e5:83:52:c3:05:8e:07:0a:9b:0a:
1c:35:f7:c2:b1:6b:bf:ed:83:a5:79:ec:86:80:62:89:bf:f0:
0f:0f:ca:3f:29:47:94:2a:f0:36:68:29:1e:d1:4a:52:8a:e7:
20:db:11:31:7c:d4:7b:50:7d:b5:87:ce:fb:ab:0b:c1:5d:5f:
ce:bd:a5:e8:16:47:00:69:26:5e:3f:3b:39:10:1e:b9:61:91:
c2:bc:74:c5:f3:46:a0:61:94:11:3c:31:53:7e:41:1a:cb:ca:
ce:60:22:68:95:b0:be:05:aa:9a:1c:07:43:51:39:61:71:af:
6d:f3:5c:ec:c5:fe:81:40:5f:cb:21:2a:ce:da:c6:e1:04:f2:
1b:19:e4:9f:0d:5d:bd:22:8e:44:b6:6b:fb:16:39:4b:ed:72:
6e:f5:b0:0f:f3:c5:74:0f:84:74:57:d1:78:34:71:a5:35:62:
75:ce:f5:d1:d5:b3:d1:57:cf:c3:16:97:45:29:07:c2:19:81:
97:ce:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:01:01 2026 by rpki-client