Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
File: UVfIfREcgFD9XJrCsGvmIyNnUDM.mft (raw, json)
Hash identifier: MzVVYyefxkNhnj0dowIzljJlGyBQUolhGAhTMth56J0=
Subject key identifier: 27:F2:8E:61:E2:AC:3B:F3:B1:4A:AA:C1:44:C9:68:30:51:84:5E:A9
Authority key identifier: 51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
Certificate issuer: /CN=5157c87d111c8050fd5c9ac2b06be62323675033
Certificate serial: 019D973CEE96B43D4971A39792C63040B19A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
Manifest number: 1090
Signing time: Thu 16 Apr 2026 17:00:45 +0000
Manifest this update: Thu 16 Apr 2026 17:00:45 +0000
Manifest next update: Fri 17 Apr 2026 17:00:45 +0000
Files and hashes: 1: UVfIfREcgFD9XJrCsGvmIyNnUDM.crl (hash: An2OfkMAll6PfzFVxgUVPpFh8kfjcDsAeZQRSYpk6ho=)
2: XoD5monHymuGy1Qsjqo--gAIcWw.roa (hash: +Dou7IR1JaVQPjmO6dXn1dx2p04Xr2K0Po+ZdyqZpIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:3c:ee:96:b4:3d:49:71:a3:97:92:c6:30:40:b1:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5157c87d111c8050fd5c9ac2b06be62323675033
Validity
Not Before: Apr 16 17:00:45 2026 GMT
Not After : Apr 17 17:00:45 2026 GMT
Subject: CN=27f28e61e2ac3bf3b14aaac144c9683051845ea9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:7b:32:d6:48:26:3d:81:f4:8c:47:18:a9:
cf:23:e9:ed:82:d4:38:9b:9d:9e:24:0d:73:d3:47:
50:a2:23:0b:59:87:86:aa:5b:a2:67:36:d0:0e:17:
3e:68:2f:7e:34:f4:32:d3:84:92:fc:c9:6b:33:04:
0f:b3:44:be:aa:41:96:49:12:7c:8b:91:b3:0b:23:
08:68:7d:26:b3:57:64:72:3d:5b:4d:cd:76:45:9f:
8b:b0:b7:10:26:4a:e3:fd:72:08:cb:dc:a7:dd:ed:
ef:f7:16:f4:2a:d8:0d:04:52:ad:cd:dd:4f:72:6c:
a0:8d:ba:8d:c9:49:d1:be:77:ca:96:bc:9b:51:1d:
f0:30:46:af:13:b7:3e:9c:70:cf:32:7c:bb:51:cb:
2b:55:39:c1:2c:69:69:6a:56:0b:bc:5b:f0:ab:91:
99:fa:a2:2e:06:40:58:74:5d:f0:7f:c2:9b:25:09:
70:95:2f:ba:75:ff:df:21:c8:60:66:5a:56:11:7a:
bb:2e:ae:72:2a:95:08:38:b6:76:50:63:8d:2a:04:
42:4e:16:84:0a:3e:df:23:fc:cf:4f:60:5a:fb:60:
47:54:bb:24:7a:98:61:f2:99:24:d8:4b:ee:70:71:
ce:de:97:68:78:3b:72:39:84:e4:14:00:e6:8e:52:
74:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:F2:8E:61:E2:AC:3B:F3:B1:4A:AA:C1:44:C9:68:30:51:84:5E:A9
X509v3 Authority Key Identifier:
keyid:51:57:C8:7D:11:1C:80:50:FD:5C:9A:C2:B0:6B:E6:23:23:67:50:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UVfIfREcgFD9XJrCsGvmIyNnUDM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/4e7b5c-2906-478a-8ef0-d29701487536/1/UVfIfREcgFD9XJrCsGvmIyNnUDM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:93:4e:7d:01:95:c5:1e:32:f8:6c:1c:eb:5e:bc:54:a8:1a:
65:1d:4c:9b:5b:fc:11:60:3b:34:41:fe:9b:29:0e:84:5c:e6:
c0:bc:ac:7b:33:d0:fa:e4:19:7a:82:9f:e0:8d:83:e4:33:f9:
f7:69:8e:56:ce:ef:6a:e9:9b:1e:d2:47:26:a8:63:56:98:2a:
62:b9:cc:30:32:e2:76:27:98:cc:ed:f9:c7:6e:23:d8:a0:63:
3f:9f:5f:ce:6a:3c:db:ba:b4:9b:f8:41:ee:0f:70:64:a9:99:
7e:01:01:1f:d9:d6:99:f7:70:0e:b2:bb:0f:68:67:b9:8c:22:
08:a7:a8:06:9d:84:4e:27:28:e4:a0:42:ea:05:b5:0f:e2:15:
dd:0e:48:63:3e:38:b8:09:c7:7c:f0:45:5e:c7:58:4c:c4:52:
80:96:ea:3a:1f:8b:52:f4:7a:10:12:e8:80:78:5b:dc:f6:ec:
fe:e6:77:f8:73:9d:bf:ce:6e:bb:1c:f2:a8:68:a1:21:a5:d4:
b8:f9:70:83:dc:d2:a0:d8:8f:95:dc:4f:85:51:a7:fa:d7:a0:
a9:77:b4:31:1b:9e:04:3b:26:08:89:a9:b6:5e:8b:ee:56:00:
98:72:97:2b:bf:65:a7:4d:57:a8:4c:64:e1:c6:a8:c2:d9:fe:
5a:86:9c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 02:36:17 2026 by rpki-client