Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
File: UoUm3npC8eCAkWhA7r85A4uJPRY.mft (raw, json)
Hash identifier: N9L366btF7/oEQsgHdwGlE1ZLLz6e9zPpTSeOGCMOL8=
Subject key identifier: 6F:6B:0F:ED:5E:15:69:0C:DE:95:40:64:87:21:0F:01:0A:49:97:1F
Authority key identifier: 52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
Certificate issuer: /CN=528526de7a42f1e080916840eebf39038b893d16
Certificate serial: 019D98F492EB5044F1D184C07B225E82F97D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
Manifest number: 0C46
Signing time: Fri 17 Apr 2026 01:00:58 +0000
Manifest this update: Fri 17 Apr 2026 01:00:58 +0000
Manifest next update: Sat 18 Apr 2026 01:00:58 +0000
Files and hashes: 1: UoUm3npC8eCAkWhA7r85A4uJPRY.crl (hash: gH1M9rIlLZczwKkX4gu7l6grqy8MkrFEzTlVx/WHJSk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:92:eb:50:44:f1:d1:84:c0:7b:22:5e:82:f9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528526de7a42f1e080916840eebf39038b893d16
Validity
Not Before: Apr 17 01:00:58 2026 GMT
Not After : Apr 18 01:00:58 2026 GMT
Subject: CN=6f6b0fed5e15690cde95406487210f010a49971f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b7:60:02:f0:09:01:c4:9a:aa:78:c0:a6:f1:
ff:cc:18:3f:81:2b:46:bc:31:02:2b:b6:ab:74:d9:
6e:9b:bb:7a:61:0e:2e:f8:03:fb:99:5d:8f:78:2e:
ce:84:68:6a:47:55:9b:58:81:ce:fb:78:66:ed:3e:
5a:78:f1:b9:04:6a:81:d5:88:80:21:f4:f8:cf:e7:
f7:a6:03:a7:d4:df:bb:ba:39:1e:ea:b9:70:5f:64:
ed:64:40:ab:0f:a7:4f:2d:8a:ad:c1:70:c7:85:cc:
0c:8a:64:7a:0b:79:0a:72:f5:d7:e4:4f:2a:c0:9b:
1d:a9:a5:74:d9:51:19:a6:7d:28:89:3c:4b:56:eb:
32:8f:ba:1b:fe:e5:f7:31:82:48:8b:56:8a:81:3a:
d8:55:82:36:69:86:49:9f:8b:a8:d8:a9:58:cc:69:
90:c4:cf:4e:4c:47:18:5e:72:08:47:30:4f:fa:a1:
2b:5d:06:06:f1:6e:47:0a:21:26:e0:35:96:a2:1b:
7c:81:f6:47:1c:77:47:7b:7d:30:e0:90:9f:0a:ba:
33:59:40:86:4f:32:38:6a:db:c5:bf:ad:c9:e8:fa:
f3:5a:ee:55:23:61:05:d9:f5:be:4b:22:01:9f:da:
6c:b0:da:43:64:e4:37:19:e9:47:be:a5:43:86:b6:
bb:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:6B:0F:ED:5E:15:69:0C:DE:95:40:64:87:21:0F:01:0A:49:97:1F
X509v3 Authority Key Identifier:
keyid:52:85:26:DE:7A:42:F1:E0:80:91:68:40:EE:BF:39:03:8B:89:3D:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoUm3npC8eCAkWhA7r85A4uJPRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/96a928-819c-476c-bae1-50c9f5b3c3e4/1/UoUm3npC8eCAkWhA7r85A4uJPRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:e5:58:5a:5e:e7:ab:75:ef:fb:9b:f5:92:1e:fe:b5:c9:90:
03:85:07:2d:f3:08:3f:c3:9e:13:f6:d1:49:c6:1c:ff:99:73:
a7:22:7f:f7:be:35:78:48:03:44:ed:55:7f:51:8c:1e:ed:7a:
fe:1a:fc:64:ea:e2:4c:c6:0f:1a:df:71:66:29:a6:39:4f:ff:
32:dc:17:68:1b:d1:44:39:32:02:41:47:ba:0e:58:14:9b:b5:
76:0f:4e:06:fb:68:5c:55:ac:20:fd:15:cc:81:81:75:00:ba:
ae:cb:bf:be:86:32:8c:3b:13:d0:78:f6:38:88:05:ec:07:fa:
5e:f9:2a:cf:89:72:07:d7:f1:50:fd:5c:cc:42:6a:a4:fe:bd:
75:ef:da:3a:21:da:04:48:09:7d:33:7a:cd:9b:e2:f1:2b:48:
14:73:0e:be:94:39:f4:a4:b2:e0:19:4f:48:50:b5:0d:5a:c9:
ea:13:b9:6b:19:f9:92:7e:ba:24:86:27:57:27:11:3e:68:de:
30:f8:5b:83:2d:7f:c0:26:7d:02:c7:b5:f1:d4:da:82:e2:6a:
cb:70:bd:98:fe:09:91:33:6b:0b:a9:62:21:d6:09:63:f7:0b:
3b:a7:e5:f7:90:a1:2d:a1:81:ff:5f:bc:06:41:85:0b:9e:80:
32:0d:4e:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:21:18 2026 by rpki-client