Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
File: uFYxEIJXtx_jMLyYs6vBRslbiOA.mft (raw, json)
Hash identifier: ed4L7bPatvS+Ju39S1NknHLV0NWUCNxHNW+kRrfk4VA=
Subject key identifier: 20:EC:D0:C1:F5:E1:C7:20:16:7F:E8:A5:10:ED:6B:F2:8D:C3:1B:19
Authority key identifier: B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
Certificate issuer: /CN=b85631108257b71fe330bc98b3abc146c95b88e0
Certificate serial: 019CADC75A42FAF2D0B236E94DC4675F934A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
Manifest number: 037B
Signing time: Mon 02 Mar 2026 09:00:48 +0000
Manifest this update: Mon 02 Mar 2026 09:00:48 +0000
Manifest next update: Tue 03 Mar 2026 09:00:48 +0000
Files and hashes: 1: 78HP6hQi1EoBCF0dfLSifGax-uA.roa (hash: ufuQcDrTPgoIXjW21OeudFFjjDUi4TaTymNiqch/4eg=)
2: H5JHH1DLge4h7pfmCgr_cVf_IBQ.roa (hash: 6AjKnUFFBVJ7dfd01u9qH9oqcCZAX9GaVjPYeCYDJQA=)
3: uFYxEIJXtx_jMLyYs6vBRslbiOA.crl (hash: ZfHBqp4kHwOwTqsdUFDkKxb1H96m0mZl+jbDh9mizkM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:5a:42:fa:f2:d0:b2:36:e9:4d:c4:67:5f:93:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85631108257b71fe330bc98b3abc146c95b88e0
Validity
Not Before: Mar 2 09:00:48 2026 GMT
Not After : Mar 3 09:00:48 2026 GMT
Subject: CN=20ecd0c1f5e1c720167fe8a510ed6bf28dc31b19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:d3:58:28:18:33:8f:5a:0d:00:f3:3c:ee:
51:8f:d0:1a:ad:60:a1:8a:0e:06:01:49:c7:02:17:
8e:11:2a:42:f1:d9:25:f7:9e:d6:28:51:48:5d:2a:
19:21:37:cd:93:3d:a2:bd:b0:a6:df:5f:5c:1d:6b:
a0:7c:98:d3:14:c8:c4:1b:7d:78:34:6a:89:c3:e4:
e8:45:c5:65:04:4c:ce:2d:95:45:86:2c:da:1f:6a:
7b:6e:ff:0e:71:04:c0:f8:c9:91:95:d9:62:d4:b6:
c4:d3:be:55:68:91:62:78:36:72:db:57:ca:0d:39:
9f:cc:b1:f8:fd:c4:32:18:2f:b7:57:6b:bc:97:05:
ef:16:4e:08:df:88:77:5e:2d:35:91:7e:d2:ce:c4:
15:fb:85:12:7d:c7:9d:86:53:52:3f:ad:e1:42:44:
5e:2d:1e:47:3d:8e:33:6d:75:e6:11:d5:5b:68:c5:
40:a3:85:f4:37:27:21:ab:67:1b:49:04:65:ff:19:
2c:aa:7c:f6:94:f1:f7:c1:10:7c:cb:41:6d:97:75:
96:e7:01:43:4f:1b:10:87:bf:b4:48:9e:86:8a:e5:
94:cc:22:43:53:d6:65:09:01:a3:2e:e9:30:63:3f:
6e:74:45:5b:94:b4:f0:a6:c7:e9:c2:fa:2e:6f:7c:
44:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:EC:D0:C1:F5:E1:C7:20:16:7F:E8:A5:10:ED:6B:F2:8D:C3:1B:19
X509v3 Authority Key Identifier:
keyid:B8:56:31:10:82:57:B7:1F:E3:30:BC:98:B3:AB:C1:46:C9:5B:88:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFYxEIJXtx_jMLyYs6vBRslbiOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/5487de-6784-402a-87aa-a2ecba8e499d/1/uFYxEIJXtx_jMLyYs6vBRslbiOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:ff:4d:cd:00:de:87:6a:ff:d2:ba:ed:8f:f1:e9:3f:52:de:
ca:e7:2d:08:ea:68:15:54:b8:b4:a9:af:a6:4b:93:8e:2d:52:
6f:6d:a4:8d:4e:5d:52:9f:57:92:b2:27:0a:11:c9:bb:f7:ad:
ef:c2:2c:fc:80:85:b3:7b:e1:61:09:80:4e:ac:51:b4:f7:00:
50:9f:33:c5:f4:bf:c5:ef:e2:c9:cd:9e:34:fc:71:bf:63:d4:
b0:50:c4:b1:af:46:2c:cb:82:c6:79:67:ec:20:54:4e:75:be:
e8:44:e0:4e:fa:e4:7a:0a:ba:fd:3f:2f:4e:8c:e6:48:6d:04:
11:da:df:c3:92:9e:0e:51:25:82:be:11:08:d9:77:38:59:d3:
9e:e2:06:69:c8:75:31:1b:f7:16:4e:cb:69:c4:03:e1:8c:c6:
bb:1f:e5:fe:0e:1d:b6:9e:30:42:66:72:e7:85:d8:17:eb:c2:
38:84:f5:b8:df:e6:7e:b2:a4:9d:98:40:db:ac:7a:7b:41:38:
9e:d6:59:24:a8:8b:04:44:e3:bb:49:61:b6:93:7d:4c:5f:43:
7b:2c:e9:de:2f:50:a4:e7:94:2e:92:d1:23:b1:e0:df:28:87:
e1:91:b9:d6:1f:b7:ed:93:31:01:22:f9:8f:d6:2a:d3:9e:cc:
45:26:b0:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:26:33 2026 by rpki-client