Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
File: uPrah6dvKfguJaMXnno4zwxrAwA.mft (raw, json)
Hash identifier: r2KxlOJNLxrqARj2z0ycviRkjs3XL9uw2kUkZNISzLY=
Subject key identifier: 4A:72:CD:FA:33:58:A9:9A:53:75:A2:50:EE:A1:A5:B5:5C:31:C4:EB
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 019E1C0F8E9DD72A395798F399698BF0FC21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
Manifest number: 18D5
Signing time: Tue 12 May 2026 12:00:41 +0000
Manifest this update: Tue 12 May 2026 12:00:41 +0000
Manifest next update: Wed 13 May 2026 12:00:41 +0000
Files and hashes: 1: DAVFmZnYiqZx6KzJWbCmA5KUHHM.asa (hash: lwO6KNsDsUK02umvIhUrsPYfieazcxy0SsotATnRRFA=)
2: sxw94R-8dpDBFwr_QuU2x8m1Z70.roa (hash: nGqPu9eVja8tiL5hL0aJIPFGTLc3iJ+u/5CYg63lyAY=)
3: uPrah6dvKfguJaMXnno4zwxrAwA.crl (hash: ybmYw9ohF/o38nftmwxaLTsc+QK/00FC9dMlyym7nCQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:0f:8e:9d:d7:2a:39:57:98:f3:99:69:8b:f0:fc:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: May 12 12:00:41 2026 GMT
Not After : May 13 12:00:41 2026 GMT
Subject: CN=4a72cdfa3358a99a5375a250eea1a5b55c31c4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:17:c5:90:c8:1b:ac:06:7f:0d:77:c5:b9:a3:
e2:f0:32:76:c5:83:5f:90:bb:3e:4c:1b:44:18:8e:
52:eb:a3:0b:63:ca:30:10:36:dc:79:2f:b7:f3:ad:
17:c8:c0:5d:e8:3f:cd:b1:9d:71:4d:a8:53:75:87:
39:b4:bd:92:54:5f:c0:70:ea:b0:26:5f:c4:39:fd:
bd:5a:b2:a5:32:dc:88:a9:27:7c:d0:f1:9a:ed:bb:
fb:1e:53:fa:9d:4a:58:e0:16:8b:b2:ae:a9:e8:f1:
82:62:a5:71:b0:71:5e:53:d9:21:68:58:91:3f:33:
e4:2d:78:55:45:9f:7b:4e:cb:b3:49:31:91:19:e5:
5a:ca:c8:20:e6:35:c5:10:c6:62:f4:3f:28:90:7e:
cf:0e:6a:83:f2:64:06:26:15:3d:c9:fb:13:62:30:
64:2c:c8:f5:f2:dc:1f:4d:68:3b:2d:12:bd:ca:65:
4b:7c:8e:22:96:26:ef:02:8a:6a:6f:2f:86:cc:a6:
a6:be:25:2d:e7:9d:cf:73:c2:44:e3:1e:60:33:87:
1f:a7:dc:99:6c:01:1b:20:d3:04:d1:62:72:9a:05:
d3:aa:a3:db:59:fb:29:ce:10:3a:c4:31:45:99:d9:
16:1b:0d:19:da:c5:50:46:2b:42:11:1d:36:a9:71:
52:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:72:CD:FA:33:58:A9:9A:53:75:A2:50:EE:A1:A5:B5:5C:31:C4:EB
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:9d:41:f4:a8:fe:94:4f:f8:70:1d:88:07:f0:80:24:c7:f4:
92:ce:4f:ed:15:02:e4:36:0e:66:6e:57:de:7c:af:64:83:e7:
26:51:0c:f5:b4:d7:42:e7:98:ba:b5:d0:47:c7:a5:01:a0:ee:
1c:03:ca:77:b7:84:a6:e3:5b:41:0c:dc:3d:c0:9f:3e:e0:55:
f4:f7:e5:38:1d:fa:08:ad:f6:9f:a8:17:24:f0:44:80:4d:63:
21:ee:65:e8:7f:75:51:79:c8:b4:dc:e9:cb:ad:e4:59:c4:eb:
03:8b:6a:8c:c1:39:6b:73:c9:11:4d:6a:6f:b8:af:58:d4:8b:
9a:c9:85:6d:d0:01:6d:b3:43:b9:a6:00:f2:05:6d:0d:26:e5:
8e:12:4f:2c:93:b7:10:b2:cd:32:f9:aa:b8:c4:2a:06:8e:18:
65:26:07:4b:a3:13:78:ea:24:db:db:46:71:a6:91:10:c8:72:
31:f6:ed:a0:a8:9f:b0:fe:e7:37:cc:8c:70:37:b0:e8:dd:14:
64:27:65:03:33:ca:16:6e:0c:94:e2:9c:52:35:4d:11:a1:14:
a5:a9:56:9a:9a:64:43:4f:05:53:bb:17:af:9e:c5:22:15:0d:
38:ef:01:b6:b8:22:64:b1:0c:99:0b:a8:af:5c:18:0c:03:d4:
08:38:3c:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:23:05 2026 by rpki-client