Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: vQSs7iy5rcfQW8HjYdSt8EB4yxUoZegPQjCvpzlQQVQ=
Subject key identifier: 72:5D:1D:49:93:BE:76:82:C2:B7:4D:5C:6D:15:32:C1:E3:5F:02:7B
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019FAC75BBEF82E679A430C7A132DB30551F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 0508
Signing time: Wed 29 Jul 2026 06:00:24 +0000
Manifest this update: Wed 29 Jul 2026 06:00:24 +0000
Manifest next update: Thu 30 Jul 2026 06:00:24 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: ey0DXJJJ/Sv60bSFnpg/DKRbkr3AAVZRI9h2SDRwIDs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 06:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:75:bb:ef:82:e6:79:a4:30:c7:a1:32:db:30:55:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Jul 29 06:00:24 2026 GMT
Not After : Jul 30 06:00:24 2026 GMT
Subject: CN=725d1d4993be7682c2b74d5c6d1532c1e35f027b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:26:64:a9:28:0f:b5:e0:53:ca:76:0c:3f:70:
8c:f9:7c:4c:fc:7e:a3:f1:a4:8f:67:90:28:4d:d5:
6d:6f:34:ec:38:32:88:a9:b9:70:14:f2:06:a2:75:
a5:2f:af:4e:9b:d9:ce:84:df:a1:f4:67:a8:cc:0b:
38:31:44:f9:17:3d:5c:b5:76:0b:25:7c:12:30:2d:
a1:85:83:d8:ac:2b:ae:97:45:be:00:7a:85:96:48:
2d:1f:fc:6b:4e:16:3f:ea:86:e2:51:4e:88:76:9a:
d3:f6:e5:ed:d4:52:98:9f:f4:c5:b0:1f:a6:ee:66:
d9:d2:6d:7e:18:35:4a:28:38:d6:bc:22:1a:10:79:
4f:7d:03:3b:54:b2:84:56:62:a1:5c:8c:b4:88:1f:
2a:9f:8a:df:c0:cb:ce:f3:ef:fe:18:21:31:e9:e3:
53:77:22:17:82:88:a9:50:56:1b:ed:9f:76:44:35:
20:7e:cf:1e:d6:be:5b:45:7c:dc:23:6c:c3:03:93:
3a:23:38:95:19:bf:16:ab:b9:f3:da:be:57:fa:ef:
7e:98:0b:10:82:4f:8c:86:14:6f:55:7f:61:1e:76:
a6:f8:8e:6f:a2:23:66:fd:b9:77:2f:8b:9a:45:8d:
33:c6:fd:e2:4f:5f:7c:63:37:bc:c6:f6:31:f9:37:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:5D:1D:49:93:BE:76:82:C2:B7:4D:5C:6D:15:32:C1:E3:5F:02:7B
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:51:a7:11:1b:67:63:e4:e8:07:9c:11:b1:73:43:ae:b0:55:
6e:38:a2:5e:2f:5f:ac:25:56:2d:57:c9:ed:c3:a2:79:eb:74:
23:fe:b0:99:68:68:6f:3f:c7:96:83:c1:07:81:4f:a8:d6:7d:
22:95:a3:dd:d9:74:a5:fa:4e:24:fe:2b:ea:ed:60:da:4a:5a:
84:4f:a9:9c:20:48:36:4f:cf:a9:a1:c9:a1:51:8c:0f:c4:37:
32:33:35:53:8e:87:25:a2:70:2d:df:44:4e:c9:45:31:62:ef:
42:91:74:b9:ab:9c:2f:dc:a0:67:71:94:48:ba:52:43:8e:bb:
a6:f1:1f:70:86:43:5b:95:03:67:39:ce:1f:f8:fc:53:99:16:
fd:b1:a1:3c:a1:10:7a:6c:c1:b2:b0:33:d9:41:fc:01:08:ac:
d4:68:15:2f:12:fd:ae:de:27:3d:4c:4b:b6:06:d2:16:15:a7:
7b:dc:f0:04:fc:c9:ef:f1:5d:24:f4:1b:66:fc:87:c5:91:54:
e1:f4:3b:8e:69:8e:a9:29:30:31:f4:af:ae:fc:2c:24:c4:73:
f9:0c:5d:54:3a:6a:cb:9b:07:08:3e:53:c2:ff:94:d6:59:cb:
53:88:1f:28:da:aa:2e:ce:31:c2:f5:ba:21:39:4d:5a:65:c4:
1c:aa:25:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:26:53 2026 by rpki-client