Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: BfS3j3jElDftf/VKvcvvugSs3V4E3RgtQi1BB/xXLis=
Subject key identifier: C6:1A:9F:D1:10:4B:0C:DA:53:04:33:CB:5D:BE:58:A7:26:04:3F:FA
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 01A0D3EF63AC092E52366B6D99C3850FC55F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 05A1
Signing time: Thu 24 Sep 2026 15:01:16 +0000
Manifest this update: Thu 24 Sep 2026 15:01:16 +0000
Manifest next update: Fri 25 Sep 2026 15:01:16 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: A/2s0KQwQj3NW1CcLq3Y0I7JbI404NNWg8GkrxdHWhw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:63:ac:09:2e:52:36:6b:6d:99:c3:85:0f:c5:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Sep 24 15:01:16 2026 GMT
Not After : Sep 25 15:01:16 2026 GMT
Subject: CN=c61a9fd1104b0cda530433cb5dbe58a726043ffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7c:6a:e1:18:13:c8:53:ee:e7:59:55:fa:07:
7c:1b:05:dc:23:2a:6b:20:8d:46:ea:4f:31:4a:fc:
df:6c:f4:cf:76:9e:b0:c8:08:b2:70:f0:cd:8c:c1:
ff:b3:d7:fe:9e:be:d5:be:2a:2f:72:07:84:45:7d:
ff:df:06:22:de:74:ef:03:bb:1d:b6:8a:b5:d9:ec:
6a:fc:c6:2c:ad:a5:af:4d:0f:8d:2b:75:82:c2:eb:
aa:b6:dc:c1:c4:5a:7e:f6:26:bb:4e:31:45:14:b0:
45:e0:33:bd:39:fd:c1:8e:41:58:42:01:11:1c:c5:
b0:f9:2f:50:49:92:c2:99:27:55:f0:b1:d3:ad:5b:
6f:8f:5a:30:8f:98:7d:19:e3:3e:f9:7e:bc:46:85:
31:c5:13:21:b7:f5:aa:66:ca:79:61:89:46:86:b6:
14:fc:7c:64:7a:bc:65:dc:ea:08:28:c4:a5:2e:74:
c8:16:0e:5d:fc:cf:01:a0:3b:ee:9d:48:6d:c6:38:
08:d1:9d:f2:6d:42:66:47:1c:de:de:18:6c:a1:22:
af:de:65:95:2e:7f:44:f9:1b:bf:51:fd:64:6e:7c:
ea:50:cf:90:33:aa:e2:a4:03:73:cc:7a:c0:c2:9b:
f5:03:95:78:d4:1b:fc:a6:59:2f:d9:e0:f1:aa:1e:
40:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:1A:9F:D1:10:4B:0C:DA:53:04:33:CB:5D:BE:58:A7:26:04:3F:FA
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:af:fb:e2:21:43:bc:c0:d9:fe:9f:60:e0:f5:fd:01:c7:25:
6b:4f:77:c0:6a:16:ec:23:16:e2:e6:9c:d0:be:b1:7b:c0:55:
fe:dd:59:57:9f:f0:ff:97:9a:d8:9f:f6:41:58:26:9b:b6:b8:
e7:c8:43:64:0c:b3:30:77:c9:42:b8:45:52:22:f1:82:43:4e:
8e:a5:e8:f0:d2:40:69:4d:77:1f:76:6a:c6:8e:2c:ea:3b:d3:
dc:07:e7:99:6a:29:58:a8:f0:43:4d:fd:1a:12:0f:87:b0:65:
3a:94:7b:48:2b:51:e6:4e:13:8f:33:81:26:58:32:4a:82:4c:
56:6b:6a:84:b4:9b:ab:84:4e:eb:c6:0f:45:d7:75:a3:c5:ae:
2a:86:36:80:6e:f9:5f:f9:d9:7e:d3:f6:35:65:01:1d:e0:df:
b9:d0:f5:c2:37:98:ed:fe:5f:48:26:e1:fe:bf:47:7a:d6:85:
63:ec:ab:62:7e:90:9c:e4:40:c8:06:24:4f:8a:a4:d9:bb:0a:
58:bb:7a:21:d3:da:cf:48:57:83:55:18:a6:83:69:b4:e5:f9:
fe:1c:c8:d8:dc:29:91:c7:78:21:34:5e:fa:e3:ef:16:90:89:
29:24:d1:b8:84:a6:18:fc:88:01:0f:8d:37:0e:b9:8e:93:61:
e7:7d:42:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDT72OsCS5SNmttmcOFD8VfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4NTYzMTEwODI1N2I3MWZlMzMwYmM5OGIzYWJjMTQ2Yzk1
Yjg4ZTAwHhcNMjYwOTI0MTUwMTE2WhcNMjYwOTI1MTUwMTE2WjAzMTEwLwYDVQQD
EyhjNjFhOWZkMTEwNGIwY2RhNTMwNDMzY2I1ZGJlNThhNzI2MDQzZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXxq4RgTyFPu51lV+gd8GwXcIypr
II1G6k8xSvzfbPTPdp6wyAiycPDNjMH/s9f+nr7VviovcgeERX3/3wYi3nTvA7sd
toq12exq/MYsraWvTQ+NK3WCwuuqttzBxFp+9ia7TjFFFLBF4DO9Of3BjkFYQgER
HMWw+S9QSZLCmSdV8LHTrVtvj1owj5h9GeM++X68RoUxxRMht/WqZsp5YYlGhrYU
/Hxkerxl3OoIKMSlLnTIFg5d/M8BoDvunUhtxjgI0Z3ybUJmRxze3hhsoSKv3mWV
Ln9E+Ru/Uf1kbnzqUM+QM6ripANzzHrAwpv1A5V41Bv8plkv2eDxqh5AmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYan9EQSwzaUwQzy12+WKcmBD/6MB8GA1UdIwQY
MBaAFLhWMRCCV7cf4zC8mLOrwUbJW4jgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEt
YTJlY2JhOGU0OTlkLzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS81NDg3ZGUtNjc4NC00MDJhLTg3YWEtYTJlY2JhOGU0OTlk
LzEvdUZZeEVJSlh0eF9qTUx5WXM2dkJSc2xiaU9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaa/74iFD
vMDZ/p9g4PX9Accla093wGoW7CMW4uac0L6xe8BV/t1ZV5/w/5ea2J/2QVgmm7a4
58hDZAyzMHfJQrhFUiLxgkNOjqXo8NJAaU13H3Zqxo4s6jvT3AfnmWopWKjwQ039
GhIPh7BlOpR7SCtR5k4TjzOBJlgySoJMVmtqhLSbq4RO68YPRdd1o8WuKoY2gG75
X/nZftP2NWUBHeDfudD1wjeY7f5fSCbh/r9HetaFY+yrYn6QnORAyAYkT4qk2bsK
WLt6IdPaz0hXg1UYpoNptOX5/hzI2Nwpkcd4ITRe+uPvFpCJKSTRuISmGPyIAQ+N
Nw65jpNh531CMw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 21:49:43 2026 by rpki-client