Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
File: u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft (raw, json)
Hash identifier: /O2Tt7tbcJSU4tGmrXBb951COGkDx5uaJ1eIuQIgIHM=
Subject key identifier: 39:B8:38:12:A6:38:11:BA:E0:0C:BD:E2:08:15:16:2A:0E:97:D1:DB
Authority key identifier: BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
Certificate issuer: /CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Certificate serial: 019D9A7509D280311042991A42D5CBF616A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 08:00:54 +0000
Manifest this update: Fri 17 Apr 2026 08:00:54 +0000
Manifest next update: Sat 18 Apr 2026 08:00:54 +0000
Files and hashes: 1: Sz0NLTrsK1zvfocWZIMOcuuroT4.roa (hash: MpuB2aIbgKIxgNnY5nxxHbqI1kRjgw1UedzDmdWgU1o=)
2: oNKjJGIAPXT8dZall2O4S4AYq6M.roa (hash: 56SmuGoIwTXV/CRw0vPr6Byhn2+aY12OfodEclBMp80=)
3: u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl (hash: kqhy4CK3pKzR/hAw7fDPBzaCa//9SkBmbsKWC2Ak3+E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:09:d2:80:31:10:42:99:1a:42:d5:cb:f6:16:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbbb2a4302094f4c3f5bada547ef4f7ede18e903
Validity
Not Before: Apr 17 08:00:54 2026 GMT
Not After : Apr 18 08:00:54 2026 GMT
Subject: CN=39b83812a63811bae00cbde20815162a0e97d1db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:4f:fa:00:19:7a:d1:8e:e8:4a:10:7f:5d:6a:
4d:74:69:ee:54:8e:97:57:b6:76:97:6d:e7:51:0b:
e6:56:c1:03:ce:be:08:bc:5b:7b:fe:93:20:6d:5e:
76:00:4c:0e:46:54:89:57:43:fa:66:8c:c6:1a:57:
d4:b3:35:b1:e3:12:b9:b0:a7:b1:55:63:08:54:db:
1f:9b:de:d2:d6:1c:95:28:85:49:d7:5c:65:38:7f:
c1:60:9f:74:4a:44:1e:ed:f8:28:b3:a0:85:a8:3e:
48:a0:f6:c2:7b:aa:5e:e9:e5:3c:5e:4c:53:75:39:
38:0a:61:ce:c4:80:26:b3:2f:31:42:ff:28:f2:39:
bb:43:cd:da:9f:ad:9a:94:ec:3e:24:10:a2:b9:eb:
90:9a:a7:75:ac:8b:21:2e:bf:35:3f:12:db:2a:5f:
65:84:08:6a:ed:17:43:fa:09:a1:eb:0c:5d:87:c4:
e2:9f:09:bc:03:55:21:7a:fe:c8:49:2d:82:b3:f3:
b6:e5:f6:ce:bc:dc:b9:06:25:76:a8:c2:3b:0f:e9:
f7:52:67:7d:c0:41:fc:19:cf:9b:88:52:0e:d0:c4:
e9:15:9e:da:49:6b:57:87:88:10:a3:c8:20:1b:2e:
6a:1e:94:91:55:bc:63:58:c5:cc:f8:fd:fb:e6:b3:
54:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:B8:38:12:A6:38:11:BA:E0:0C:BD:E2:08:15:16:2A:0E:97:D1:DB
X509v3 Authority Key Identifier:
keyid:BB:BB:2A:43:02:09:4F:4C:3F:5B:AD:A5:47:EF:4F:7E:DE:18:E9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u7sqQwIJT0w_W62lR-9Pft4Y6QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c399a4-53b6-4271-9b90-32bf1641fb3b/1/u7sqQwIJT0w_W62lR-9Pft4Y6QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:d6:16:4f:21:30:55:24:ba:91:d8:c1:1f:bc:4e:72:47:77:
c1:4d:bb:8c:39:e8:16:8d:d9:52:44:8e:fc:3f:ec:34:32:76:
72:d1:0b:15:dd:34:01:5f:7e:62:b6:9d:5a:62:b0:9c:2e:a0:
17:c6:a6:f5:90:01:fa:a0:6d:fa:79:8b:97:7f:6d:bf:3e:d8:
4a:81:6d:91:4e:14:83:a9:f9:34:f3:96:23:c8:23:89:3b:a8:
cc:c2:dc:82:6b:c8:54:2c:da:fb:9d:09:f7:d7:bd:6a:a1:f8:
11:49:67:37:5e:e5:4e:00:f8:8b:18:26:84:a3:ff:ee:c5:94:
a3:57:df:c0:e9:db:e8:af:d8:86:7d:35:8b:b4:f7:33:8b:34:
c6:a5:1d:f5:a0:94:6e:ba:b3:7b:8b:33:25:b2:62:8d:9a:00:
48:c8:a3:65:ee:4c:b4:1c:d0:38:d2:95:ca:f4:de:b2:13:9e:
5b:9b:d4:ad:7b:24:39:c8:c5:b3:5e:25:71:0c:ec:0f:6a:f4:
b9:5b:99:2c:fd:97:dc:c9:10:b0:c5:6a:b2:ac:85:73:bb:b8:
06:fb:4f:dc:32:6d:86:9f:ad:66:68:f5:8b:e7:69:02:90:34:
73:80:d2:03:57:2b:fb:47:f0:79:e8:8e:fd:3f:ac:23:ed:11:
4a:30:3f:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:57 2026 by rpki-client