Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
File: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft (raw, json)
Hash identifier: p730mysDPk/nPsjh6jR75zK7ipyJjYQPRvOAStUavc4=
Subject key identifier: 34:43:C2:35:C8:0E:92:CA:73:35:5D:A2:33:57:13:B4:B7:43:6B:A2
Authority key identifier: 8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
Certificate issuer: /CN=8fe502397dd6439c068bd053f28187dd77574578
Certificate serial: 019D9A3E4911F35CB923C0A1683C855C2FFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
Manifest number: 0A2E
Signing time: Fri 17 Apr 2026 07:01:06 +0000
Manifest this update: Fri 17 Apr 2026 07:01:06 +0000
Manifest next update: Sat 18 Apr 2026 07:01:06 +0000
Files and hashes: 1: O9jTuaIwSklnvAfhZBN0WWcgZXE.roa (hash: TZQoxFlSub9NUs3bu775AFUShxwX/KmkPryQTWD+vU4=)
2: j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl (hash: Sf6JFoOmhxc/QE1p4GxuahEtECMlDRbu1ZJ0PiUm/Tw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:49:11:f3:5c:b9:23:c0:a1:68:3c:85:5c:2f:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fe502397dd6439c068bd053f28187dd77574578
Validity
Not Before: Apr 17 07:01:06 2026 GMT
Not After : Apr 18 07:01:06 2026 GMT
Subject: CN=3443c235c80e92ca73355da2335713b4b7436ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:4b:47:2c:08:03:72:fe:5a:66:ec:4e:30:c2:
39:d7:c5:c8:9d:e7:97:23:c1:c5:bd:23:3a:8c:7a:
fa:24:53:75:dc:40:ad:6c:19:28:be:6b:bd:5f:c3:
1b:f1:9d:9a:ef:2b:f6:85:1c:18:c4:30:6b:14:e8:
46:4b:b2:dd:5c:56:11:1c:ab:47:df:80:15:16:d5:
d9:4d:12:69:6b:b5:42:04:fc:6e:8d:65:8b:43:5a:
49:f5:b7:be:18:f8:1c:88:a4:da:c4:ed:69:c6:ec:
57:98:8b:4b:1f:ca:77:45:d6:ed:34:b5:0e:1e:cf:
d8:1b:d4:fa:f5:e3:ed:7a:0a:15:02:99:9d:7b:cc:
13:a3:5f:61:d7:67:6b:87:c7:65:f9:4f:e8:39:3e:
2a:49:76:db:3f:6c:6e:62:b7:a6:3e:d4:3c:3c:f4:
2d:a8:6b:6d:1a:67:05:cf:05:e8:20:27:0a:25:95:
f3:2e:8c:b3:71:68:64:59:87:9d:64:be:76:09:44:
ab:46:e6:f8:a0:8e:f1:cf:23:4e:f5:a8:e5:8e:65:
25:e4:c0:26:63:1d:12:6a:08:62:63:4a:70:f8:44:
bd:18:cb:34:2c:f0:99:fc:d6:ce:99:b7:70:01:69:
bd:95:09:2d:c5:bb:b0:74:a5:a3:53:5b:ee:5b:d9:
fc:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:43:C2:35:C8:0E:92:CA:73:35:5D:A2:33:57:13:B4:B7:43:6B:A2
X509v3 Authority Key Identifier:
keyid:8F:E5:02:39:7D:D6:43:9C:06:8B:D0:53:F2:81:87:DD:77:57:45:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/ce4671-3f43-433f-8445-bd80475762d5/1/j-UCOX3WQ5wGi9BT8oGH3XdXRXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:39:7f:d9:01:49:f3:73:d6:21:ad:45:5d:64:e2:e5:6d:0b:
e3:99:11:c6:57:4b:49:d0:8b:b8:87:1c:1b:61:dd:73:c8:67:
fe:95:78:8e:8e:14:25:32:32:36:53:2f:b9:65:cb:c3:cc:9b:
21:b9:d2:de:de:1e:17:b7:ec:f3:b6:c9:45:a2:4c:22:05:b5:
34:ab:0d:0c:b0:c8:4c:98:64:50:22:30:c2:d3:c8:80:9c:b6:
4a:06:6f:87:71:5a:43:47:e0:2e:29:6f:55:d5:49:bb:9f:65:
92:f8:18:03:03:4a:1b:94:59:6a:c7:55:5d:48:8a:70:17:0c:
c7:0c:d7:a4:61:5f:a2:e3:ef:0c:b3:18:fe:19:5c:84:c0:dd:
89:8b:e8:36:22:48:f6:21:e5:1f:7a:f3:1d:f5:4f:f3:8b:20:
b3:99:da:3b:dc:18:9e:41:6d:f9:97:55:40:c0:5e:f7:96:06:
4a:ab:a9:ad:a3:c6:10:e4:19:2c:45:de:44:4b:f0:02:fc:fb:
fe:fd:41:b6:b5:03:1f:8f:51:4e:29:32:25:ce:c7:9c:2d:b6:
15:84:eb:ad:f4:cf:99:7e:8e:37:a2:17:da:20:5f:d6:77:c9:
89:8e:86:bf:fd:da:4d:69:ea:6c:e8:12:c9:87:d6:46:c8:74:
4a:9e:61:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPkkR81y5I8ChaDyFXC/8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmZTUwMjM5N2RkNjQzOWMwNjhiZDA1M2YyODE4N2RkNzc1
NzQ1NzgwHhcNMjYwNDE3MDcwMTA2WhcNMjYwNDE4MDcwMTA2WjAzMTEwLwYDVQQD
EygzNDQzYzIzNWM4MGU5MmNhNzMzNTVkYTIzMzU3MTNiNGI3NDM2YmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ktHLAgDcv5aZuxOMMI518XIneeX
I8HFvSM6jHr6JFN13ECtbBkovmu9X8Mb8Z2a7yv2hRwYxDBrFOhGS7LdXFYRHKtH
34AVFtXZTRJpa7VCBPxujWWLQ1pJ9be+GPgciKTaxO1pxuxXmItLH8p3RdbtNLUO
Hs/YG9T69ePtegoVApmde8wTo19h12drh8dl+U/oOT4qSXbbP2xuYremPtQ8PPQt
qGttGmcFzwXoICcKJZXzLoyzcWhkWYedZL52CUSrRub4oI7xzyNO9ajljmUl5MAm
Yx0SaghiY0pw+ES9GMs0LPCZ/NbOmbdwAWm9lQktxbuwdKWjU1vuW9n8zQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRDwjXIDpLKczVdojNXE7S3Q2uiMB8GA1UdIwQY
MBaAFI/lAjl91kOcBovQU/KBh913V0V4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9jZTQ2NzEtM2Y0My00MzNmLTg0NDUt
YmQ4MDQ3NTc2MmQ1LzEvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9jZTQ2NzEtM2Y0My00MzNmLTg0NDUtYmQ4MDQ3NTc2MmQ1
LzEvai1VQ09YM1dRNXdHaTlCVDhvR0gzWGRYUlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARTl/2QFJ
83PWIa1FXWTi5W0L45kRxldLSdCLuIccG2Hdc8hn/pV4jo4UJTIyNlMvuWXLw8yb
IbnS3t4eF7fs87bJRaJMIgW1NKsNDLDITJhkUCIwwtPIgJy2SgZvh3FaQ0fgLilv
VdVJu59lkvgYAwNKG5RZasdVXUiKcBcMxwzXpGFfouPvDLMY/hlchMDdiYvoNiJI
9iHlH3rzHfVP84sgs5naO9wYnkFt+ZdVQMBe95YGSqupraPGEOQZLEXeREvwAvz7
/v1BtrUDH49RTikyJc7HnC22FYTrrfTPmX6ON6IX2iBf1nfJiY6Gv/3aTWnqbOgS
yYfWRsh0Sp5hyA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:45:50 2026 by rpki-client