Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: FcipvTljgM5cAJIrSdda/VWtogA0Gb+W39PY/CVF+TY=
Subject key identifier: E8:5B:2F:7B:48:8E:6D:82:DD:ED:A3:D3:29:64:2E:42:2C:A9:37:34
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019E1EA39D091691669E43E9521F6808242F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 043A
Signing time: Wed 13 May 2026 00:01:39 +0000
Manifest this update: Wed 13 May 2026 00:01:39 +0000
Manifest next update: Thu 14 May 2026 00:01:39 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: 3cxTLWUeV/0wOOlQEJmd9g59LMgnYR1sSFpsVV7Ic0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:9d:09:16:91:66:9e:43:e9:52:1f:68:08:24:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: May 13 00:01:39 2026 GMT
Not After : May 14 00:01:39 2026 GMT
Subject: CN=e85b2f7b488e6d82ddeda3d329642e422ca93734
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ba:38:17:be:fa:2f:0b:e7:40:61:69:89:99:
e8:94:5f:23:b8:c5:25:9f:ef:e0:25:24:cf:7e:36:
d0:a2:b2:e6:29:4e:aa:55:04:61:ab:53:fe:8c:9f:
a4:17:9c:6d:57:57:0e:35:10:2a:85:0d:50:45:92:
04:38:9b:59:67:64:78:da:fb:4f:84:3d:e2:3a:71:
76:14:5d:cd:56:71:25:57:c4:27:00:57:bc:03:a7:
26:b4:da:e1:d0:b2:5a:0e:3b:e6:71:b4:84:ae:f7:
5a:0a:64:ef:b5:0b:f9:81:5a:fe:0b:f2:f6:e6:15:
d3:f4:5c:85:c1:cc:5d:27:08:63:c1:50:e2:45:97:
bd:c6:f5:7d:09:75:ce:5f:96:ea:0f:19:81:c6:0d:
b1:be:4b:bf:53:c1:0b:81:cd:00:11:68:af:5a:f7:
3b:f9:75:9e:f6:5a:43:f9:09:9e:3b:1c:15:26:d0:
b2:7c:2e:03:66:b8:af:5f:c5:29:f9:22:d7:5f:df:
c0:7f:57:b3:5f:2f:e7:00:40:db:17:7b:1f:ca:49:
2d:61:a9:9c:96:66:cf:9e:e7:92:a3:03:f6:a1:a8:
d0:06:86:3d:5b:81:45:37:54:c2:6e:94:1d:01:db:
9a:06:4a:0e:5e:06:46:ce:7e:d4:30:19:78:71:2a:
4d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:5B:2F:7B:48:8E:6D:82:DD:ED:A3:D3:29:64:2E:42:2C:A9:37:34
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:1c:a1:83:b7:14:66:81:ab:64:d3:43:63:84:3b:10:24:eb:
80:6a:e0:41:53:19:92:20:f4:2d:99:7b:34:7d:28:d6:cd:e1:
71:6e:1a:dc:d6:78:9b:26:93:69:13:ec:84:2e:a7:48:76:9b:
31:82:57:93:c1:e4:43:38:0e:34:d2:5a:43:ec:4b:46:01:53:
a2:cd:ef:a6:81:44:5e:f5:e9:2b:29:e8:9f:5e:bf:ed:22:da:
6f:00:8e:6b:ea:a2:09:54:19:4b:29:21:e9:a8:03:fd:19:55:
ce:e4:18:f6:62:fc:8e:da:bc:c2:42:d2:27:65:1c:fa:e2:47:
b1:41:74:50:1c:67:62:20:5e:ec:23:90:ac:20:56:d1:55:b5:
c8:b8:18:08:9a:f4:a0:30:28:7c:25:24:e5:35:e9:f7:5c:2d:
5f:29:21:16:7d:c3:6b:3d:32:be:d6:f3:27:28:75:1e:a5:d7:
d5:af:8c:4f:13:ab:22:8c:99:b3:45:ec:df:b6:d0:85:81:91:
92:06:32:16:49:da:b9:68:e0:8d:6e:d0:b5:10:5c:93:0e:03:
29:06:27:66:a6:44:c4:33:32:6f:e6:4e:b8:e5:01:4e:e6:61:
05:98:7a:c1:2a:84:98:66:2f:90:13:61:df:c5:28:99:33:39:
28:7e:14:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:07 2026 by rpki-client