Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
File: uJUchRS33SGzM6uzPKyjxNrp1wk.mft (raw, json)
Hash identifier: N26BzF7iisbAYFFxj2m8xlJZDNCxHniauCH0aP3vydg=
Subject key identifier: E3:52:A3:0D:8D:84:53:B4:B1:69:83:73:86:0E:E0:7C:90:F9:AE:55
Authority key identifier: B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
Certificate issuer: /CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Certificate serial: 019EC111A4352E8B59AFE6B267D6F82D2014
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
Manifest number: 08A6
Signing time: Sat 13 Jun 2026 13:00:19 +0000
Manifest this update: Sat 13 Jun 2026 13:00:19 +0000
Manifest next update: Sun 14 Jun 2026 13:00:19 +0000
Files and hashes: 1: HSBygkTf7dqe7U2WUtpBTUwaXQw.roa (hash: Q1fpKqfIKqh1y1ml1lJpLEsGSFZBg21ZMx4ehtCz8ig=)
2: Iuk_zEJVyxU2iUIdKR4yhDvVYXI.roa (hash: mDmw6607ggVMlBfThQGZdDCwNa9yzypJPb2rv2R8ybA=)
3: uJUchRS33SGzM6uzPKyjxNrp1wk.crl (hash: AlfiNMGaK2l1hwLajsv8akyDIJ2FRbnc6g7xbKRm8ys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 13:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c1:11:a4:35:2e:8b:59:af:e6:b2:67:d6:f8:2d:20:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8951c8514b7dd21b333abb33caca3c4dae9d709
Validity
Not Before: Jun 13 13:00:19 2026 GMT
Not After : Jun 14 13:00:19 2026 GMT
Subject: CN=e352a30d8d8453b4b1698373860ee07c90f9ae55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:19:9d:17:dc:9a:38:19:60:da:d6:09:52:d2:
cb:8f:44:fd:c1:9f:24:5a:d3:57:3f:85:fe:51:ae:
d4:87:f4:07:20:77:ea:38:dd:60:06:a7:b5:e5:26:
ad:fc:8f:af:a4:d4:14:84:c2:3d:f2:57:0c:86:fc:
85:b4:57:5d:33:d0:e2:0d:3a:4f:19:7b:e4:d7:df:
79:5f:d7:82:be:c3:64:0d:b7:ea:62:cd:12:da:b7:
7a:c3:d2:b1:63:46:50:dd:4e:e0:86:b2:ae:18:f6:
6b:45:55:9b:2a:be:97:dc:c4:9b:85:2b:86:0b:8e:
4a:1e:b2:db:09:15:de:60:f9:13:95:0b:27:d7:35:
a4:12:ec:3f:09:f4:0a:78:29:0f:ef:e9:75:90:0c:
0d:ad:7e:d2:c0:a5:be:b2:08:24:da:f9:bf:6a:2f:
8a:1b:f4:21:c5:1d:cb:9a:2e:51:e4:64:86:70:7a:
c0:a8:d9:21:b4:74:68:fe:9a:68:35:a2:9b:44:01:
96:6b:cc:c0:f3:91:75:b6:3d:41:97:18:f6:c7:e1:
4e:0c:56:98:5a:9b:dc:15:be:d3:29:0e:88:18:c8:
63:bc:34:b9:f7:d0:bc:34:e2:28:cb:55:4e:0b:fc:
7e:f6:a7:bb:d0:de:2d:e3:ff:9c:b0:3c:04:1e:c5:
ea:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:52:A3:0D:8D:84:53:B4:B1:69:83:73:86:0E:E0:7C:90:F9:AE:55
X509v3 Authority Key Identifier:
keyid:B8:95:1C:85:14:B7:DD:21:B3:33:AB:B3:3C:AC:A3:C4:DA:E9:D7:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uJUchRS33SGzM6uzPKyjxNrp1wk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/642eb2-3fb9-4f0e-baf4-8cd79527e530/1/uJUchRS33SGzM6uzPKyjxNrp1wk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:d3:ea:28:82:d6:0a:47:81:99:8e:7d:25:07:92:27:5c:d6:
7a:b7:5c:98:f6:0b:1f:bb:1a:60:f7:19:b5:f8:db:d1:2f:ca:
72:f2:ba:24:ab:71:53:29:1a:d6:2d:d7:87:91:d7:63:3f:32:
cc:7a:9d:b8:fe:80:12:d2:2a:54:2e:1f:3a:56:27:75:fe:22:
a1:44:d5:d9:39:70:53:dc:94:f9:d9:91:7a:77:24:a4:10:ff:
bc:9a:21:02:c1:4d:bc:34:74:c3:21:6f:85:65:a0:52:97:99:
e1:f4:d7:38:2b:48:34:ec:db:9b:da:57:6a:72:75:bc:13:91:
2c:e5:94:bc:7f:1c:d9:a6:5d:da:ad:6d:ff:03:bc:b1:cb:e1:
77:6b:f9:d6:fb:65:b3:58:67:c0:18:76:47:1a:4f:57:77:8a:
6f:35:76:7f:78:39:86:42:78:b9:3b:48:b5:7a:27:97:c4:52:
dd:b3:15:b4:8a:76:cb:53:b5:01:cb:34:ba:b9:29:3c:c6:6e:
c9:ef:cd:1c:b0:67:06:48:a8:a5:77:21:b5:e1:38:fd:de:a4:
47:1d:49:54:ab:37:e2:3f:31:99:c1:72:1d:c9:0b:eb:8b:88:
9f:3d:1d:d5:80:01:87:96:d3:ec:1e:76:d3:cb:9e:af:81:75:
cd:1b:25:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7BEaQ1LotZr+ayZ9b4LSAUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4OTUxYzg1MTRiN2RkMjFiMzMzYWJiMzNjYWNhM2M0ZGFl
OWQ3MDkwHhcNMjYwNjEzMTMwMDE5WhcNMjYwNjE0MTMwMDE5WjAzMTEwLwYDVQQD
EyhlMzUyYTMwZDhkODQ1M2I0YjE2OTgzNzM4NjBlZTA3YzkwZjlhZTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhmdF9yaOBlg2tYJUtLLj0T9wZ8k
WtNXP4X+Ua7Uh/QHIHfqON1gBqe15Sat/I+vpNQUhMI98lcMhvyFtFddM9DiDTpP
GXvk1995X9eCvsNkDbfqYs0S2rd6w9KxY0ZQ3U7ghrKuGPZrRVWbKr6X3MSbhSuG
C45KHrLbCRXeYPkTlQsn1zWkEuw/CfQKeCkP7+l1kAwNrX7SwKW+sggk2vm/ai+K
G/QhxR3Lmi5R5GSGcHrAqNkhtHRo/ppoNaKbRAGWa8zA85F1tj1Blxj2x+FODFaY
WpvcFb7TKQ6IGMhjvDS599C8NOIoy1VOC/x+9qe70N4t4/+csDwEHsXqKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFONSow2NhFO0sWmDc4YO4HyQ+a5VMB8GA1UdIwQY
MBaAFLiVHIUUt90hszOrszyso8Ta6dcJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQt
OGNkNzk1MjdlNTMwLzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82NDJlYjItM2ZiOS00ZjBlLWJhZjQtOGNkNzk1MjdlNTMw
LzEvdUpVY2hSUzMzU0d6TTZ1elBLeWp4TnJwMXdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKdPqKILW
CkeBmY59JQeSJ1zWerdcmPYLH7saYPcZtfjb0S/KcvK6JKtxUyka1i3Xh5HXYz8y
zHqduP6AEtIqVC4fOlYndf4ioUTV2TlwU9yU+dmRenckpBD/vJohAsFNvDR0wyFv
hWWgUpeZ4fTXOCtINOzbm9pXanJ1vBORLOWUvH8c2aZd2q1t/wO8scvhd2v51vtl
s1hnwBh2RxpPV3eKbzV2f3g5hkJ4uTtItXonl8RS3bMVtIp2y1O1Acs0urkpPMZu
ye/NHLBnBkiopXchteE4/d6kRx1JVKs34j8xmcFyHckL64uInz0d1YABh5bT7B52
08uer4F1zRsl5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:49:27 2026 by rpki-client