Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
File: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft (raw, json)
Hash identifier: eoqR0GPAY/6tXH81T303t0XHivu98Wz3vuCYboHSbhg=
Subject key identifier: AC:91:E8:E0:EE:35:66:CD:85:C5:E5:68:47:C2:31:E1:2A:BC:AD:AC
Authority key identifier: B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
Certificate issuer: /CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Certificate serial: 019D98F4A1B647D8FE0BCD0E5B1A29D35727
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
Manifest number: 18A6
Signing time: Fri 17 Apr 2026 01:01:02 +0000
Manifest this update: Fri 17 Apr 2026 01:01:02 +0000
Manifest next update: Sat 18 Apr 2026 01:01:02 +0000
Files and hashes: 1: uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl (hash: xp2UQJRLDZT+Fan/9cTsOornrdUxdjRynt1d8TmsMws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a1:b6:47:d8:fe:0b:cd:0e:5b:1a:29:d3:57:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b943d7e44d37ac5910026319f10cdd73967d97ca
Validity
Not Before: Apr 17 01:01:02 2026 GMT
Not After : Apr 18 01:01:02 2026 GMT
Subject: CN=ac91e8e0ee3566cd85c5e56847c231e12abcadac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:b6:84:de:7f:e4:5f:6e:9f:8a:02:7f:38:0d:
ea:65:78:1b:c2:b7:d7:49:49:83:fb:47:d7:1f:2b:
2f:53:31:78:2e:cb:30:a6:2c:6e:da:88:10:5f:30:
04:83:a0:af:5b:a1:61:42:05:87:45:9e:1d:d7:e5:
51:b7:cb:41:db:3c:d7:ab:8f:a7:25:40:e7:2c:ff:
f9:37:97:e2:a3:9c:71:66:fc:b0:88:0c:1e:3f:5b:
ab:3c:96:69:55:5d:a7:3a:34:eb:91:f3:35:f7:42:
f6:1c:5f:3e:5d:61:73:ea:08:83:e8:94:6d:90:62:
d4:6a:4a:f7:97:64:80:49:ee:76:0c:fd:9b:88:37:
48:6e:10:c5:40:33:99:a4:97:3a:40:6e:54:84:72:
a4:12:94:f9:d0:25:a9:8e:fc:f5:26:9f:43:e5:5c:
3d:da:3e:dd:4e:ee:4c:f3:e4:0a:66:1c:8f:09:8d:
d2:36:64:9d:82:34:a7:dd:df:f1:df:ce:51:56:5c:
3f:f7:18:57:94:a6:3f:0e:48:e2:0b:ab:36:13:84:
d5:2d:66:a8:49:31:34:06:a9:3a:99:27:0c:8f:39:
f8:a3:66:39:43:6a:20:83:ad:82:6a:52:de:10:80:
80:d4:b5:d5:90:39:98:f6:5a:38:69:55:60:be:0b:
60:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:91:E8:E0:EE:35:66:CD:85:C5:E5:68:47:C2:31:E1:2A:BC:AD:AC
X509v3 Authority Key Identifier:
keyid:B9:43:D7:E4:4D:37:AC:59:10:02:63:19:F1:0C:DD:73:96:7D:97:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3f3080-c190-4da6-8ab4-083e7e5fd6a5/1/uUPX5E03rFkQAmMZ8Qzdc5Z9l8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:93:16:2c:af:bb:42:11:3f:46:3d:0e:df:e9:17:60:57:95:
97:82:83:34:bc:1d:79:ac:2e:a7:36:b0:89:41:5e:bc:69:68:
b2:b4:5e:91:20:a3:33:11:d4:be:18:56:4e:76:5d:5e:3b:de:
aa:75:87:53:f0:1e:81:a5:64:1a:4b:b5:d3:38:cf:c7:42:51:
12:d5:a6:5d:06:10:1f:ca:f8:5c:3a:8e:70:dc:27:1f:01:14:
5c:bc:93:19:f6:0f:0a:6f:c7:4b:83:16:1f:c9:6a:b2:d3:aa:
1d:e7:66:49:ea:1f:99:ce:20:09:6b:e6:71:68:bc:51:35:d5:
b3:96:12:f6:ef:fa:5d:1d:f2:a4:8a:8f:58:3d:58:a5:4c:57:
97:5c:ee:47:a4:6e:c5:8b:c4:a4:98:a3:42:18:9d:2b:0b:81:
bd:c0:64:6e:41:85:b6:b8:84:64:f6:b6:a2:db:f0:51:97:f6:
19:aa:37:fd:49:76:1b:60:a5:7a:c5:4c:6d:10:15:90:3d:ec:
01:9a:12:7a:78:71:ab:4c:a9:06:a8:94:6e:ae:f4:fb:dd:ff:
48:ea:18:38:31:10:05:73:56:0d:1f:79:3d:03:9c:d6:7a:d3:
dc:b9:30:57:f6:0e:ea:6d:21:90:b1:f0:e8:5e:11:c6:57:5d:
b7:a5:9d:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:35 2026 by rpki-client