Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: hs4mydGijyVqal9N39j+5IBl975ehjDYHUgdrb0uS7E=
Subject key identifier: E4:57:19:EB:1A:B3:16:EC:50:25:E5:94:A4:9A:12:1A:92:77:F4:DE
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019CAC0FF04189A3292C35ED4126BD902FB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 0792
Signing time: Mon 02 Mar 2026 01:00:51 +0000
Manifest this update: Mon 02 Mar 2026 01:00:51 +0000
Manifest next update: Tue 03 Mar 2026 01:00:51 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: HMsN3CSn2Gamnrw1RvN5TJ5LZUL372EDEyoYKkBZIpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:0f:f0:41:89:a3:29:2c:35:ed:41:26:bd:90:2f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Mar 2 01:00:51 2026 GMT
Not After : Mar 3 01:00:51 2026 GMT
Subject: CN=e45719eb1ab316ec5025e594a49a121a9277f4de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:be:5b:84:64:81:24:b3:fb:c3:0c:7d:0c:10:
50:95:22:27:d0:56:6a:c0:b9:31:c5:9c:e0:16:54:
69:d6:f1:29:7f:5b:72:f6:9e:52:33:02:4e:87:4c:
8c:62:19:75:64:cd:46:58:90:f2:5f:1a:67:2f:7b:
6a:43:66:01:b8:dd:eb:4c:33:fb:3d:fa:8a:da:f9:
9d:d9:35:90:ab:4d:92:a8:79:3a:5a:56:22:9f:2f:
28:4c:84:4f:71:b5:e3:bf:b0:23:ab:ca:c3:32:e9:
8b:35:82:08:07:77:10:de:d2:aa:1d:01:00:8e:f3:
df:56:20:4f:ee:8e:1e:98:80:fe:bc:3d:cb:42:8c:
77:ed:40:fd:61:bb:39:58:35:d8:ae:3a:cb:5b:ed:
3c:3f:16:13:50:b1:c9:5f:0d:1a:36:13:32:42:c6:
12:60:46:56:5c:a0:69:0d:fe:73:2c:8f:e6:5a:dc:
1d:fa:fa:f6:e1:24:f6:1e:0e:0b:17:ce:13:72:6d:
f4:72:cf:97:84:cf:55:7f:d4:62:17:76:7a:69:f9:
05:d4:f2:6a:45:71:b9:15:ef:bc:5a:0e:4a:60:09:
2c:27:41:f0:6d:97:08:4c:8d:83:3e:93:17:aa:67:
75:95:e0:b7:15:e9:7d:4c:f2:f4:53:40:5e:25:d4:
bf:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:57:19:EB:1A:B3:16:EC:50:25:E5:94:A4:9A:12:1A:92:77:F4:DE
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:f8:b3:57:a3:a2:5c:16:bf:0a:73:ef:45:3e:b3:bf:ac:41:
48:50:b1:cd:8c:79:24:9e:eb:d3:9c:6f:6f:c5:30:3a:c4:74:
39:cb:1c:de:8b:c7:80:f9:60:c1:f4:fb:a6:11:e9:87:78:64:
4a:29:dc:01:a0:d1:55:ff:8e:89:fe:e8:4e:33:02:38:e9:30:
87:a6:0b:a3:7b:78:13:8a:a9:1b:b4:f6:02:11:52:36:7a:a2:
92:1e:b1:94:1c:e0:ba:89:99:a8:18:11:61:ae:ee:3e:ff:6b:
b3:1c:f5:72:91:0f:c1:e3:3b:b8:f1:c1:ba:15:01:b9:70:99:
07:be:74:01:ad:2d:02:69:22:5e:44:44:c0:71:c3:0b:41:a1:
cd:d7:68:19:bb:1d:9d:3e:af:e6:83:bc:ba:cc:92:a8:55:d6:
80:43:bf:dd:68:5d:9d:30:fd:b1:3a:74:f2:66:92:7c:0b:0f:
e9:ab:11:06:f4:41:2c:fb:1a:a6:c0:50:09:e2:0e:fb:8b:5a:
eb:9d:2e:14:d0:dd:13:84:38:d9:c2:4f:55:03:60:36:f0:ad:
a5:a8:5b:b7:2a:7f:d1:f5:3c:e4:c6:f0:d6:4a:ff:2f:e3:6d:
4e:3c:8d:59:6f:31:6c:31:56:a9:58:13:89:14:58:7e:13:9c:
e7:ca:55:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:25:43 2026 by rpki-client