Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: ealptJqvxEU0VFt+G/H1yV0REkc0ilqfXhjFdfXX/o4=
Subject key identifier: B7:CB:5A:9F:6A:BF:CB:B4:1F:27:4D:69:61:2E:34:8D:E5:E0:90:DE
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019F935B91ADB967D9041AD29F2D48E00BB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 04FB
Signing time: Fri 24 Jul 2026 09:01:19 +0000
Manifest this update: Fri 24 Jul 2026 09:01:19 +0000
Manifest next update: Sat 25 Jul 2026 09:01:19 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: svZgYdq/HuZ8ed/PTCMZJLCr1RSm4TXGB006QIDq5us=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:5b:91:ad:b9:67:d9:04:1a:d2:9f:2d:48:e0:0b:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Jul 24 09:01:19 2026 GMT
Not After : Jul 25 09:01:19 2026 GMT
Subject: CN=b7cb5a9f6abfcbb41f274d69612e348de5e090de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:5f:d9:1a:ab:43:d9:9e:13:09:e1:f6:d3:43:
d1:a0:73:00:8d:97:4a:e4:0e:da:95:46:c6:0b:c0:
80:e9:3b:aa:78:74:b1:c5:06:1f:54:cc:26:97:c9:
6d:a5:18:95:a4:67:0e:b1:5b:b0:54:07:dc:de:76:
ab:cc:ad:72:c8:94:16:47:82:a5:94:5b:9b:c0:17:
72:58:56:e4:64:33:f7:f1:6f:b4:bb:9a:f7:10:cf:
97:fe:a6:9d:55:2e:bc:32:82:df:8b:cd:9a:b1:4f:
bc:13:1c:f5:fe:cb:f4:e8:0c:a3:f4:5f:00:b2:58:
cb:ca:11:47:e5:43:61:ee:26:62:84:f0:2e:3f:d0:
8e:61:30:d1:8e:8e:2c:d1:2d:65:b1:57:d5:3b:59:
df:4b:30:f3:e2:fe:70:91:15:c8:3a:d7:d9:1e:00:
df:15:dc:69:62:a4:73:a6:4e:eb:2e:ab:03:d8:4f:
1d:9c:b7:56:b5:c1:ed:c0:d0:ab:ee:3d:fd:21:bc:
2c:12:a0:b1:c9:e1:62:7d:c9:d7:59:24:64:9c:78:
b6:74:2a:0c:40:8c:87:3b:e9:48:76:70:68:f7:1b:
0f:3b:5f:57:d4:f9:4b:de:61:aa:89:83:9f:70:1a:
87:54:01:89:0f:4f:63:60:db:eb:b5:54:d6:da:b2:
d6:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:CB:5A:9F:6A:BF:CB:B4:1F:27:4D:69:61:2E:34:8D:E5:E0:90:DE
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:ab:d7:8b:23:12:7b:5a:b9:1e:0d:56:1e:af:65:8b:6c:5f:
f6:2a:5c:5b:14:7a:c3:28:6c:c7:43:28:06:17:ec:d2:a1:32:
a2:8d:d8:41:68:e9:46:35:e1:f2:44:0e:57:3b:81:47:74:de:
d0:71:26:a9:d8:10:a7:1d:2a:5e:bb:1a:b9:b7:84:c5:45:23:
42:e6:66:5b:da:35:66:b6:ef:76:52:30:d4:03:e2:16:a5:58:
40:42:1b:dc:3f:11:f7:94:55:9c:c4:5a:6c:fe:e5:c9:13:59:
23:32:d6:03:c9:78:86:22:45:14:b8:1f:d5:ca:93:f1:3f:88:
d7:66:d6:43:eb:c4:27:a4:64:f7:15:ee:d0:7a:04:ef:e9:06:
74:22:0e:6a:48:e3:2f:55:9d:da:41:82:de:3c:a1:5a:e1:4c:
96:87:20:de:b8:c8:26:e7:fb:36:e8:f6:a6:2d:01:38:c3:70:
20:c9:a3:0a:61:7d:0e:74:fc:15:36:b6:cb:2a:49:30:7a:b6:
67:5b:7e:a6:56:06:46:19:2a:43:7c:90:56:3d:24:9e:3d:98:
05:be:76:9d:24:c5:34:26:cd:bf:08:b7:68:32:ba:16:bc:44:
3a:f6:e9:46:b6:9a:3e:f6:67:d7:bb:d1:f6:87:69:c0:f2:69:
05:4d:0a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:21:12 2026 by rpki-client