Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: cXaXdakLtGCgTwKVxPp7jCotpesydH+5jH6wlRrdA2s=
Subject key identifier: 68:90:00:17:56:4D:DA:1C:4E:D8:26:0B:96:9B:8D:50:23:F5:B4:FE
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019D9D75EA88281A0315474D5F706387391F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 080F
Signing time: Fri 17 Apr 2026 22:00:43 +0000
Manifest this update: Fri 17 Apr 2026 22:00:43 +0000
Manifest next update: Sat 18 Apr 2026 22:00:43 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: hGR7MLobR1D4+4+dDbJUf9CLKpngtTMcOCFlmNdPIR8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:75:ea:88:28:1a:03:15:47:4d:5f:70:63:87:39:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Apr 17 22:00:43 2026 GMT
Not After : Apr 18 22:00:43 2026 GMT
Subject: CN=68900017564dda1c4ed8260b969b8d5023f5b4fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:55:53:f5:af:0d:04:f2:21:20:95:f0:52:dc:
f3:61:62:fe:54:4b:c2:60:b1:46:af:9f:7d:e6:f9:
0c:89:e0:66:77:ce:a4:cb:21:b6:ae:c2:c7:98:82:
43:5f:e9:25:bb:e9:68:58:c9:ec:be:75:65:87:83:
18:d8:12:41:7e:eb:db:a4:88:5d:9f:75:47:ea:1e:
8a:a8:66:ea:e8:5e:60:1e:fc:8a:b5:d9:3d:26:b9:
6e:13:3d:31:22:32:19:75:6e:69:6f:c2:25:7f:8c:
85:04:b2:8c:93:93:de:c1:68:af:f6:01:03:d0:66:
3f:46:2a:29:5a:10:70:63:2d:57:b9:98:db:b6:3f:
1e:c9:f6:9d:d8:e4:14:c1:f6:bc:ca:dc:ea:71:18:
36:af:1b:34:b6:2c:ce:a9:e8:9d:c7:6d:26:03:b4:
0b:c2:1f:45:c7:8a:9b:3e:a8:61:c0:7c:ab:a5:65:
33:3a:36:58:8f:18:d6:e1:9d:06:68:f4:d4:fe:1c:
49:00:23:84:d5:9b:84:a0:15:bc:b0:9d:4a:ea:b8:
43:d1:6e:a8:c9:b3:57:96:1b:47:4a:f4:af:e8:2c:
eb:04:13:16:7f:44:8e:cd:2a:cd:f4:ed:25:e1:08:
82:5f:29:f2:22:dc:c4:e4:9c:ef:96:2b:aa:f4:54:
0c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:90:00:17:56:4D:DA:1C:4E:D8:26:0B:96:9B:8D:50:23:F5:B4:FE
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:e4:20:16:62:e2:02:9b:8d:7a:9c:b6:69:77:6b:8f:a5:9b:
6f:29:a3:0f:68:c6:c0:dc:c7:3e:33:aa:73:49:da:42:ca:90:
91:9e:de:60:1b:d1:17:f3:96:4b:6f:f4:51:3d:ea:6d:0b:9e:
17:22:30:a5:52:0f:86:2e:d1:82:e5:ab:ee:38:46:07:57:bd:
18:50:f5:21:50:d0:e7:4c:c0:d5:16:63:f9:c0:85:0a:d3:a9:
5a:e5:d8:1f:a4:b9:77:f2:bf:aa:09:d4:12:05:3b:83:ab:52:
8d:2d:b7:5f:5e:40:ce:67:6c:4f:0f:23:8f:07:bc:56:12:0f:
0e:c0:d6:6e:75:6a:1b:0b:40:ac:dd:38:7b:1d:c2:fb:1f:b1:
09:99:04:61:da:58:c5:6c:65:92:20:ad:df:53:9d:f1:c7:5c:
3e:e4:29:85:b7:2b:22:49:52:f9:2a:1b:de:53:3c:b7:30:ce:
c4:ee:8d:b8:54:46:73:6a:a7:3c:e6:60:79:c1:a5:67:26:6a:
e0:7c:b6:da:c7:24:d4:db:3d:f6:f2:fb:1f:75:b4:5f:7e:e1:
91:47:e3:76:6b:ea:45:3a:f1:6a:31:b1:da:ac:3f:25:ae:1f:
c6:1c:19:6e:7c:c9:53:30:7d:4a:80:f9:2f:4c:21:32:ba:e8:
01:bd:8e:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ddeqIKBoDFUdNX3BjhzkfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl
OWQ3MDkwHhcNMjYwNDE3MjIwMDQzWhcNMjYwNDE4MjIwMDQzWjAzMTEwLwYDVQQD
Eyg2ODkwMDAxNzU2NGRkYTFjNGVkODI2MGI5NjliOGQ1MDIzZjViNGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolVT9a8NBPIhIJXwUtzzYWL+VEvC
YLFGr5995vkMieBmd86kyyG2rsLHmIJDX+klu+loWMnsvnVlh4MY2BJBfuvbpIhd
n3VH6h6KqGbq6F5gHvyKtdk9JrluEz0xIjIZdW5pb8Ilf4yFBLKMk5PewWiv9gED
0GY/RiopWhBwYy1XuZjbtj8eyfad2OQUwfa8ytzqcRg2rxs0tizOqeidx20mA7QL
wh9Fx4qbPqhhwHyrpWUzOjZYjxjW4Z0GaPTU/hxJACOE1ZuEoBW8sJ1K6rhD0W6o
ybNXlhtHSvSv6CzrBBMWf0SOzSrN9O0l4QiCXynyItzE5Jzvliuq9FQMKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGiQABdWTdocTtgmC5abjVAj9bT+MB8GA1UdIwQY
MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt
OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw
LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ+QgFmLi
ApuNepy2aXdrj6WbbymjD2jGwNzHPjOqc0naQsqQkZ7eYBvRF/OWS2/0UT3qbQue
FyIwpVIPhi7RguWr7jhGB1e9GFD1IVDQ50zA1RZj+cCFCtOpWuXYH6S5d/K/qgnU
EgU7g6tSjS23X15AzmdsTw8jjwe8VhIPDsDWbnVqGwtArN04ex3C+x+xCZkEYdpY
xWxlkiCt31Od8cdcPuQphbcrIklS+Sob3lM8tzDOxO6NuFRGc2qnPOZgecGlZyZq
4Hy22sck1Ns99vL7H3W0X37hkUfjdmvqRTrxajGx2qw/Ja4fxhwZbnzJUzB9SoD5
L0whMrroAb2O/w==
-----END CERTIFICATE-----
Generated at Sat Apr 18 03:04:02 2026 by rpki-client