Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
File: uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft (raw, json)
Hash identifier: /aY9UELej/LsrgrHvp+aTYDEuY0frprf1jQwkxscvPs=
Subject key identifier: EE:5F:60:E2:BC:B5:44:27:24:64:1C:48:75:0D:4C:7D:07:84:54:EE
Authority key identifier: B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
Certificate issuer: /CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Certificate serial: 019D9A74F4AA30B8FBE5F840CF0B73AC03DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 08:00:49 +0000
Manifest this update: Fri 17 Apr 2026 08:00:49 +0000
Manifest next update: Sat 18 Apr 2026 08:00:49 +0000
Files and hashes: 1: 5qhVPI1i7bgsBqCDOR_pBDzMDds.roa (hash: hsXI0HXZI7WGFauILyyNN6KaKFpRLSAYg6OSGX8LjyY=)
2: uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl (hash: RiAP9WKAW68Rd9PDz2DZ3ciKP3WVhwY9atbpoyK2IE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:f4:aa:30:b8:fb:e5:f8:40:cf:0b:73:ac:03:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c9e7b1897afb008f3b1df8bf04f9b567703de4
Validity
Not Before: Apr 17 08:00:49 2026 GMT
Not After : Apr 18 08:00:49 2026 GMT
Subject: CN=ee5f60e2bcb5442724641c48750d4c7d078454ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3f:90:11:93:35:41:b6:89:65:a6:5c:b3:f7:
e3:4e:4a:5d:1e:fd:cd:00:1a:94:bb:1b:29:94:3c:
06:83:50:58:e6:c0:a1:41:70:83:dd:1f:78:fd:7f:
54:c6:1d:88:fb:09:65:80:ba:dc:53:25:79:2b:e8:
c7:ab:f0:61:c2:1f:73:e6:cf:48:bb:b8:a2:46:a8:
0d:71:53:36:5a:21:cf:8a:95:68:d0:93:19:46:6d:
40:a4:f7:e2:e9:e2:8f:94:8e:90:75:d0:80:0f:35:
00:b3:bf:6f:a4:2b:06:23:a7:b5:76:ae:c8:64:fe:
47:28:b5:97:c0:97:e4:78:fa:7b:99:fa:d3:b3:bc:
68:aa:66:bd:4f:d2:02:32:cf:6f:fc:85:94:ab:79:
94:e3:72:27:f3:17:fd:96:a8:a3:0f:cb:3a:00:75:
80:73:71:c2:b1:db:d6:26:59:11:57:82:05:3e:1f:
91:d2:46:55:c1:9e:d2:9e:e6:e0:16:4f:e9:a6:e9:
22:81:c4:90:d1:76:63:a5:ce:93:16:13:7f:f3:c8:
f3:1f:44:69:ef:c0:61:4c:ca:c1:ae:16:a6:79:bd:
f7:b1:78:c9:4f:ea:b3:b3:01:04:d4:ba:4d:69:5a:
97:83:fb:13:c6:e0:a8:c3:80:b9:69:63:4a:f1:50:
f5:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:5F:60:E2:BC:B5:44:27:24:64:1C:48:75:0D:4C:7D:07:84:54:EE
X509v3 Authority Key Identifier:
keyid:B8:C9:E7:B1:89:7A:FB:00:8F:3B:1D:F8:BF:04:F9:B5:67:70:3D:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMnnsYl6-wCPOx34vwT5tWdwPeQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/6a532b-3315-46ae-86de-e8e695b18583/1/uMnnsYl6-wCPOx34vwT5tWdwPeQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:01:d1:e6:e4:11:db:b6:7f:c5:31:d5:e9:4e:86:07:b0:d8:
bc:d9:59:63:7c:ad:15:09:b2:cf:d6:95:ce:6e:39:cc:01:0c:
46:85:c6:f7:95:44:99:47:a7:62:9f:0d:bf:fa:ba:e3:c6:97:
d6:e2:4d:e3:70:77:4b:60:70:c1:7e:ef:a9:c6:63:c9:80:7c:
69:93:45:6a:99:df:c7:be:d6:ee:47:13:65:20:d3:80:d4:44:
67:0c:f3:47:92:94:42:4e:92:8c:95:da:ac:f5:ab:b6:72:80:
7b:31:15:94:45:0f:47:5d:7a:f0:36:8d:53:80:4d:53:30:22:
2f:1d:17:e8:8e:33:36:d5:1f:d5:d3:fe:34:fb:a4:4a:c0:82:
dc:a0:4b:33:26:9a:35:e5:cc:8d:b7:13:15:78:64:1c:03:87:
59:e5:00:cd:44:92:4b:9b:8e:a1:12:56:b7:8f:f2:fa:39:1a:
fc:b8:a5:ba:38:a3:d4:a8:d9:3d:12:25:98:81:91:ea:5f:0f:
bc:ed:8d:c7:2a:f1:5b:7c:e1:5a:dc:a5:c5:52:a9:73:1f:3c:
11:de:ee:74:22:64:8d:23:92:20:9f:08:45:db:03:fc:17:00:
9c:dd:cd:4f:c6:ee:62:24:6b:33:33:68:0c:1d:60:74:36:d8:
11:0d:0f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:16:41 2026 by rpki-client