Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
File: uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft (raw, json)
Hash identifier: kDTc/nlHX2T4QgXARElSOKm+DvhLWM1gNT5OWUAcxWo=
Subject key identifier: 62:DE:D8:CD:80:EC:84:7C:A8:EB:E6:CD:C2:90:46:A1:33:74:2F:54
Authority key identifier: B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
Certificate issuer: /CN=b914166b685ac015b94126cdb8b18c83a12ed862
Certificate serial: 019D9B1963FAC77F0DDAE174B060C325D88B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
Manifest number: 0625
Signing time: Fri 17 Apr 2026 11:00:25 +0000
Manifest this update: Fri 17 Apr 2026 11:00:25 +0000
Manifest next update: Sat 18 Apr 2026 11:00:25 +0000
Files and hashes: 1: Ynw_USCXsaamujZ2jBXDU9fnnK4.roa (hash: jCVDMKncWO22cr+grxT97/NOX8W2w5oWB/mTFF48O9M=)
2: uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl (hash: XKFLNuuc21FceG0o2FJXB7n63Nvb9rhTRF9Ex/qsBcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:63:fa:c7:7f:0d:da:e1:74:b0:60:c3:25:d8:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b914166b685ac015b94126cdb8b18c83a12ed862
Validity
Not Before: Apr 17 11:00:25 2026 GMT
Not After : Apr 18 11:00:25 2026 GMT
Subject: CN=62ded8cd80ec847ca8ebe6cdc29046a133742f54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:24:eb:fb:11:b9:ed:13:eb:a7:15:c3:dc:
c4:88:53:1d:13:f5:e6:43:aa:7e:1d:2e:22:a7:bc:
99:17:12:23:f3:3e:70:b2:19:50:48:af:89:1f:9a:
a9:2a:68:55:20:da:f6:00:7b:26:3e:9a:f6:d4:7c:
33:bc:3e:79:ce:32:71:af:1f:b5:1a:3d:2a:b3:57:
79:ec:28:e5:45:a9:b8:f9:c6:b7:e3:a9:95:6a:20:
36:81:5e:5e:4b:47:73:ed:09:e1:90:48:8d:68:bf:
f4:35:40:20:4a:24:d7:df:1d:e0:44:3a:c9:89:7f:
c6:01:ba:17:f9:03:b5:9b:b7:87:cb:74:7b:dd:7e:
dd:68:2c:a5:5d:ad:ce:3c:3e:91:5c:a5:64:ac:a0:
82:67:f5:f1:81:71:72:d2:8c:dd:6b:a2:a8:bb:09:
c1:2d:c0:8f:4e:7c:18:d4:78:bd:ab:a7:f4:c2:0a:
c9:9f:84:ae:e8:35:c2:8c:e9:4c:1b:f4:f9:31:64:
9d:76:5f:f1:a0:4a:2d:a7:6d:67:9c:16:9c:6a:b3:
9c:68:41:65:c6:9a:eb:7b:4d:79:e6:c6:f8:d6:7f:
35:26:20:f7:98:08:ed:46:35:2e:32:80:ef:01:2b:
99:7c:bf:7c:e3:be:4c:e7:37:d5:be:5d:8b:03:2d:
8b:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:DE:D8:CD:80:EC:84:7C:A8:EB:E6:CD:C2:90:46:A1:33:74:2F:54
X509v3 Authority Key Identifier:
keyid:B9:14:16:6B:68:5A:C0:15:B9:41:26:CD:B8:B1:8C:83:A1:2E:D8:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRQWa2hawBW5QSbNuLGMg6Eu2GI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/d3be70-ddf1-48f5-866f-ea67a98625fe/1/uRQWa2hawBW5QSbNuLGMg6Eu2GI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:4d:8a:bd:d3:4d:c3:92:3b:1e:de:0b:b4:28:21:a1:76:e8:
13:06:43:19:80:5b:df:92:3b:ee:ab:18:b4:19:87:12:e9:52:
15:48:5e:77:4d:4d:79:c7:eb:0f:81:59:1b:45:3e:f1:c1:55:
e7:64:8d:a3:e7:23:99:e7:e2:f3:fc:d6:5c:ec:6d:5f:b5:5f:
b6:50:56:c8:30:7e:bb:59:fe:db:7e:c0:49:c7:f7:66:83:e8:
9f:4c:f6:d8:3b:c9:9c:90:94:db:96:5d:13:97:f4:23:2c:c5:
49:8a:94:1a:1c:e0:6e:d7:b3:90:a7:2d:5f:55:09:c6:b0:df:
57:00:94:33:20:36:a7:a7:3e:19:04:5c:97:f0:01:3c:62:9c:
91:d4:31:15:3f:c1:2e:14:c6:7f:42:83:4c:36:be:be:90:b0:
23:39:4f:7f:a5:b1:93:9c:be:94:d5:8a:f8:7d:80:b4:2b:86:
23:1c:e0:b5:35:69:df:4f:e9:d0:ce:57:d1:16:40:d8:03:94:
b6:07:2a:ee:8e:2c:5d:99:e0:17:70:1a:c9:18:40:95:ff:3e:
93:b6:81:c8:37:de:e8:32:84:72:17:42:2c:58:1a:7b:40:4e:
09:85:61:88:59:27:08:df:04:c8:d5:0f:7e:d2:e5:e0:ee:65:
3c:60:fd:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:22:04 2026 by rpki-client