Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
File: uG3av8SJUr7ibW1fgogx9ZahVOk.mft (raw, json)
Hash identifier: T/l5OXR6Ycbjl4+KMjRMRAZbfpkhc4W0QBdmlphEQgA=
Subject key identifier: E6:DD:A4:7F:54:B7:7B:04:4C:D4:DE:AF:C5:34:45:DC:0F:61:E8:45
Authority key identifier: B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
Certificate issuer: /CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Certificate serial: 019D99629AF76FC567C630B2F273553289D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
Manifest number: 0718
Signing time: Fri 17 Apr 2026 03:01:09 +0000
Manifest this update: Fri 17 Apr 2026 03:01:09 +0000
Manifest next update: Sat 18 Apr 2026 03:01:09 +0000
Files and hashes: 1: uG3av8SJUr7ibW1fgogx9ZahVOk.crl (hash: g88I+9psUPsKllRqJhXWMQ1F6SGgsDOWpbuXmuhzbtg=)
2: vK9AviNHBBZmkmPl_0sSpGx75xE.roa (hash: fK0YnxZPR23tzgwVRccUAsgY3YVzMSTdNPagihczIFE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9a:f7:6f:c5:67:c6:30:b2:f2:73:55:32:89:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b86ddabfc48952bee26d6d5f828831f596a154e9
Validity
Not Before: Apr 17 03:01:09 2026 GMT
Not After : Apr 18 03:01:09 2026 GMT
Subject: CN=e6dda47f54b77b044cd4deafc53445dc0f61e845
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:65:db:12:61:03:17:ad:5d:41:a9:04:8f:a1:
a6:32:87:30:06:45:95:b3:93:48:f5:b2:be:05:b7:
9a:42:07:d9:0f:56:b3:48:fe:e1:e5:95:6c:7c:18:
55:ab:5b:2f:62:0a:5d:de:46:07:93:6d:00:ac:8d:
88:59:3b:2b:28:27:3f:d7:24:e3:3b:9c:5b:2e:78:
51:c6:79:d8:b4:79:c3:d7:06:8e:6b:c1:1a:8f:d1:
7c:dc:f3:95:b0:a7:80:3e:96:53:33:25:23:f4:04:
4d:1d:63:0d:4f:48:39:ce:4f:f1:9e:74:87:70:02:
c3:ef:61:15:60:0d:e4:ea:2d:a2:24:cd:3d:8a:1a:
6f:a6:76:35:1c:1e:75:8c:0a:e1:d7:cd:d7:a9:b7:
92:4d:42:82:53:0d:43:81:b1:e9:3e:91:9f:24:60:
a0:ee:14:ea:d6:9a:2a:20:c2:66:39:55:d1:43:0a:
df:dd:e5:0e:40:d1:92:e0:e1:31:74:9c:1b:20:93:
83:4d:ba:9a:da:bf:a3:de:f9:f6:4b:49:ee:49:b7:
60:bd:f5:d2:a5:82:40:63:6a:67:ca:a4:13:36:b5:
21:2e:5f:06:c0:6e:7a:ce:a7:86:a7:65:0c:57:d0:
c2:57:28:f7:3c:84:b8:99:31:3b:28:3f:cb:77:5e:
53:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DD:A4:7F:54:B7:7B:04:4C:D4:DE:AF:C5:34:45:DC:0F:61:E8:45
X509v3 Authority Key Identifier:
keyid:B8:6D:DA:BF:C4:89:52:BE:E2:6D:6D:5F:82:88:31:F5:96:A1:54:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uG3av8SJUr7ibW1fgogx9ZahVOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/6679f4-9165-4a8b-8892-7dea8fff2e08/1/uG3av8SJUr7ibW1fgogx9ZahVOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:9e:31:c4:3a:c6:89:fa:58:7f:14:51:1a:df:bf:b0:f3:00:
83:51:ca:a1:d4:94:bd:d1:c9:9a:a9:12:26:57:dc:c3:a9:ae:
95:a2:9c:13:6f:da:ba:96:7a:4e:0f:1a:bc:5b:69:5f:f4:85:
cf:42:75:4d:75:4e:9c:96:15:50:f0:31:82:b7:0a:b5:cf:87:
67:ca:8f:1b:59:cf:51:be:a1:f0:0c:0a:58:16:fc:e9:7e:d5:
ea:2d:81:ca:bf:a7:2d:1c:2d:49:f8:4c:4c:de:68:dd:52:9f:
37:3d:fe:b8:dd:e8:76:52:6e:fa:9e:ca:1d:e2:2e:50:2a:ca:
31:23:50:9f:3b:4d:b7:56:03:c5:2a:a1:99:96:68:08:37:2c:
fe:12:06:03:e4:81:5e:5e:4c:98:4a:93:a9:ed:bc:18:7b:f2:
6f:76:54:e1:07:32:bf:b7:53:5b:98:05:b5:a7:0b:ed:c8:df:
9c:77:81:95:85:95:90:67:b1:e7:41:bc:22:c9:01:92:dc:21:
0c:94:e8:14:7b:e1:12:07:4d:3e:45:1b:85:76:d7:67:8f:c5:
58:d0:7e:49:3c:f5:94:2e:15:f4:8c:24:ab:94:7d:90:43:98:
67:24:7d:84:d0:f5:e4:82:d1:83:a6:eb:e5:bd:3d:eb:10:8c:
d4:2d:1a:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:20 2026 by rpki-client