Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
File: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft (raw, json)
Hash identifier: 75F79y4yy90IzUpKrvzzqj7lVK5w8FwQw5e0SjBCSAc=
Subject key identifier: 86:5F:32:72:03:4D:02:07:02:0A:AE:A6:B6:5C:34:97:33:63:9B:B1
Authority key identifier: B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
Certificate issuer: /CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Certificate serial: 019D999982A32332F3990BB5AF4F389B0DFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
Manifest number: 139C
Signing time: Fri 17 Apr 2026 04:01:07 +0000
Manifest this update: Fri 17 Apr 2026 04:01:07 +0000
Manifest next update: Sat 18 Apr 2026 04:01:07 +0000
Files and hashes: 1: dsdqBIAnrCJg5gWYaMbCM3qAMWs.roa (hash: /P+LPCXiDZwClBrS2PGojc/QqZ2hX7FiQfLqx4lq3iA=)
2: uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl (hash: dGJ9kkMhiprlIG2aWxwzlSCKkAK8BNUuoLg1Y249+zk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:82:a3:23:32:f3:99:0b:b5:af:4f:38:9b:0d:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8b8da567492dcbf59f98a6bf1d1974ab42bc7d0
Validity
Not Before: Apr 17 04:01:07 2026 GMT
Not After : Apr 18 04:01:07 2026 GMT
Subject: CN=865f3272034d0207020aaea6b65c349733639bb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:26:48:a6:d5:26:ce:88:72:1b:d3:77:8d:e9:
64:1c:c4:2c:bc:c4:a0:02:1d:aa:3d:74:94:28:d9:
21:92:32:5f:f9:98:da:93:d9:48:0a:e4:fc:f4:47:
76:59:b1:70:4a:01:ab:31:bb:3a:de:92:f1:e2:0a:
a5:31:d4:6a:e0:b1:11:88:9d:d7:b1:bb:aa:94:82:
32:56:66:4d:b2:8c:3e:55:1d:49:88:28:1f:8c:15:
08:24:30:ae:52:ca:c1:c1:15:f7:9c:5c:26:82:21:
7f:bf:d8:41:48:6a:0c:11:43:19:9f:6f:15:fb:23:
64:fb:64:d5:19:b2:af:9f:a7:0c:12:03:1b:76:46:
b1:09:a3:f3:c2:28:e5:ba:19:0d:d1:62:ba:a5:c1:
97:d6:6a:50:db:c3:35:a8:ca:fd:0d:91:b5:37:e4:
d0:a6:38:e2:14:56:ab:de:32:24:34:03:dc:05:79:
e6:6e:79:66:48:67:40:69:d7:8b:af:36:7a:c7:bb:
20:ae:f0:98:42:5f:e0:9f:60:f0:fc:c6:f8:17:80:
17:cc:45:c9:ed:50:bd:c0:cf:1b:57:fb:57:dd:09:
f7:46:bd:1a:25:23:ea:2a:fb:1f:27:42:cb:48:04:
3f:60:78:43:3f:b7:dd:85:9c:3f:1d:34:3c:a9:67:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:5F:32:72:03:4D:02:07:02:0A:AE:A6:B6:5C:34:97:33:63:9B:B1
X509v3 Authority Key Identifier:
keyid:B8:B8:DA:56:74:92:DC:BF:59:F9:8A:6B:F1:D1:97:4A:B4:2B:C7:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/54faaa-37e6-4ad0-9ef5-6870684566e2/1/uLjaVnSS3L9Z-Ypr8dGXSrQrx9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d0:2f:d0:b6:e9:d6:00:ee:c9:43:c0:26:22:95:2f:6a:ef:54:
27:9f:0e:09:13:f8:ec:a5:42:96:6f:8a:a5:5e:f5:d2:b5:20:
1d:bf:af:c4:f0:a2:e9:07:7c:1f:28:32:30:54:71:a7:23:20:
1a:56:50:28:03:91:3b:59:e3:61:1b:62:90:4d:b3:cd:14:2a:
bd:e6:9a:bd:5b:98:27:7b:98:18:b0:e1:0d:ad:ee:47:79:a9:
9f:74:37:b2:04:84:ca:41:2c:db:9c:91:3c:7c:9c:71:5e:1a:
3f:b1:da:16:4c:2d:22:14:71:b0:8e:cf:1b:09:40:a7:89:07:
92:9d:1d:bb:41:59:fd:a7:42:5f:c5:c8:54:e5:b0:79:9e:af:
66:fe:7b:ea:1c:dc:19:b1:b2:38:9a:95:39:16:86:46:8e:5d:
f1:ba:94:28:c0:d5:e6:d0:b3:d6:d2:ee:10:12:e8:4d:8e:7a:
9a:88:16:5b:d2:64:ee:fd:54:bb:05:4b:4e:a7:a9:59:7e:12:
61:12:92:46:10:14:a7:1f:6f:84:94:3e:94:12:d6:63:2c:62:
2e:91:87:d8:39:0d:b3:b2:90:a9:b2:38:ff:6f:df:a9:7a:9e:
67:6c:4a:1a:6d:93:19:0e:d4:4b:90:58:01:b6:9d:ec:35:d2:
03:9a:80:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmYKjIzLzmQu1r084mw37MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4YjhkYTU2NzQ5MmRjYmY1OWY5OGE2YmYxZDE5NzRhYjQy
YmM3ZDAwHhcNMjYwNDE3MDQwMTA3WhcNMjYwNDE4MDQwMTA3WjAzMTEwLwYDVQQD
Eyg4NjVmMzI3MjAzNGQwMjA3MDIwYWFlYTZiNjVjMzQ5NzMzNjM5YmIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiZIptUmzohyG9N3jelkHMQsvMSg
Ah2qPXSUKNkhkjJf+Zjak9lICuT89Ed2WbFwSgGrMbs63pLx4gqlMdRq4LERiJ3X
sbuqlIIyVmZNsow+VR1JiCgfjBUIJDCuUsrBwRX3nFwmgiF/v9hBSGoMEUMZn28V
+yNk+2TVGbKvn6cMEgMbdkaxCaPzwijluhkN0WK6pcGX1mpQ28M1qMr9DZG1N+TQ
pjjiFFar3jIkNAPcBXnmbnlmSGdAadeLrzZ6x7sgrvCYQl/gn2Dw/Mb4F4AXzEXJ
7VC9wM8bV/tX3Qn3Rr0aJSPqKvsfJ0LLSAQ/YHhDP7fdhZw/HTQ8qWciYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZfMnIDTQIHAgquprZcNJczY5uxMB8GA1UdIwQY
MBaAFLi42lZ0kty/WfmKa/HRl0q0K8fQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUt
Njg3MDY4NDU2NmUyLzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81NGZhYWEtMzdlNi00YWQwLTllZjUtNjg3MDY4NDU2NmUy
LzEvdUxqYVZuU1MzTDlaLVlwcjhkR1hTclFyeDlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0C/QtunW
AO7JQ8AmIpUvau9UJ58OCRP47KVClm+KpV710rUgHb+vxPCi6Qd8HygyMFRxpyMg
GlZQKAORO1njYRtikE2zzRQqveaavVuYJ3uYGLDhDa3uR3mpn3Q3sgSEykEs25yR
PHyccV4aP7HaFkwtIhRxsI7PGwlAp4kHkp0du0FZ/adCX8XIVOWweZ6vZv576hzc
GbGyOJqVORaGRo5d8bqUKMDV5tCz1tLuEBLoTY56mogWW9Jk7v1UuwVLTqepWX4S
YRKSRhAUpx9vhJQ+lBLWYyxiLpGH2DkNs7KQqbI4/2/fqXqeZ2xKGm2TGQ7US5BY
Abad7DXSA5qAnQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:50 2026 by rpki-client