Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: gWeZU8CTgSk8Cb/ddTR6Cmbt9utlqqo+Zec5dRrjdvI=
Subject key identifier: 84:1D:2D:A2:CB:3D:47:B0:2F:0B:3C:C5:FB:E1:DE:B1:D6:84:45:66
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 01A0DBA8E995870464DA6D101A07C5202EEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 05A5
Signing time: Sat 26 Sep 2026 03:01:15 +0000
Manifest this update: Sat 26 Sep 2026 03:01:15 +0000
Manifest next update: Sun 27 Sep 2026 03:01:15 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: S58UF6CJjoXSeT9gQhagbaRCtzG1139Mi27Pl5a4cLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:db:a8:e9:95:87:04:64:da:6d:10:1a:07:c5:20:2e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Sep 26 03:01:15 2026 GMT
Not After : Sep 27 03:01:15 2026 GMT
Subject: CN=841d2da2cb3d47b02f0b3cc5fbe1deb1d6844566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:bc:a1:94:69:f1:70:2b:0a:12:46:b9:a3:04:
aa:d1:97:47:4e:f7:13:ce:96:00:d2:53:fa:46:53:
c6:9e:2c:44:3b:0e:c2:b3:27:43:b9:d8:3c:5b:aa:
61:ba:86:75:de:7c:ed:d6:0e:d5:0a:c4:c0:0d:47:
ee:e7:0c:14:2b:3a:a7:89:b0:f6:20:b3:68:fa:06:
5a:0b:54:ac:bc:e5:9c:6e:e6:69:a9:0a:55:89:7c:
3b:cb:04:bf:58:de:e8:b0:eb:ad:42:39:3e:04:5b:
88:3f:a6:31:45:33:d1:5c:10:63:cb:1a:fb:56:7b:
a8:db:51:dd:04:7d:bb:cb:f5:3e:f3:d5:b1:77:6b:
5b:98:63:5d:45:10:02:1e:85:e6:c1:71:0c:c0:fc:
34:49:b5:5c:df:f4:93:25:8c:06:bb:5b:0e:a1:9e:
ec:aa:67:08:70:26:18:58:ab:80:f6:e7:68:17:81:
44:12:03:34:3b:d4:a2:7d:5f:a2:71:7f:59:e6:db:
92:4f:98:57:22:a4:91:72:f6:e7:f1:22:00:40:4e:
e4:e3:e3:29:6c:92:57:29:3f:0a:c4:88:6f:b8:97:
cb:f9:99:05:7f:7c:c6:99:64:33:6b:d5:a6:56:9b:
92:ca:f9:a4:47:1a:14:e8:90:be:68:40:bf:f8:c3:
5b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:1D:2D:A2:CB:3D:47:B0:2F:0B:3C:C5:FB:E1:DE:B1:D6:84:45:66
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:44:54:b8:9b:e9:36:9c:3b:23:a9:60:d2:34:b3:43:0b:24:
40:8e:95:6d:4a:ad:58:23:cc:28:54:6b:f6:36:eb:dd:cd:e1:
0e:37:33:39:e6:8d:ec:31:fd:05:b9:75:a2:e1:b4:aa:5d:52:
f6:c8:53:65:e5:5b:53:a8:9e:50:97:25:06:4d:c7:f9:50:2e:
11:13:76:8c:d2:a2:e4:72:23:ea:00:11:92:13:a7:5c:87:50:
47:ec:54:e2:88:f8:4d:72:77:a0:0e:01:3c:1e:66:e5:f0:eb:
81:b4:12:dd:6b:7e:57:95:d3:2b:ea:49:3d:9d:70:67:55:e5:
cc:8c:bc:03:1d:7c:6d:ba:a1:c4:d3:a6:df:07:4a:01:1b:47:
6a:53:b6:e0:ff:4a:7e:6b:b2:36:b2:3e:aa:6c:56:4d:b4:d9:
25:cb:d7:ed:c7:2f:b4:1c:ef:cb:12:2b:9c:a9:81:90:88:6a:
17:e5:83:4f:b1:3a:12:e3:5e:2a:c9:b4:a1:f0:46:f7:df:15:
5b:4f:5f:76:16:6c:ba:39:fe:d5:3e:ca:9c:bb:8c:93:71:2d:
29:20:26:d6:24:8d:1c:54:af:6f:2a:02:89:71:61:27:70:3a:
87:31:7f:42:5b:33:ad:7a:33:f6:89:b0:f4:99:74:ec:18:2e:
ca:2c:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:52:35 2026 by rpki-client