Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
File: uFcVr2ZAT7oDce5bMDd2hOptRu0.mft (raw, json)
Hash identifier: +lhl+TXWmgJjCQkfqz4fiJTkTJJ38bHo+JTLkaRP0wo=
Subject key identifier: 79:D3:57:8E:55:D7:EE:D2:BB:1F:A8:F0:21:CE:63:D4:E6:FA:6F:3F
Authority key identifier: B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
Certificate issuer: /CN=b85715af66404fba0371ee5b30377684ea6d46ed
Certificate serial: 019D9962E94670D2F614013E4BACE9C6756F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
Manifest number: 0707
Signing time: Fri 17 Apr 2026 03:01:29 +0000
Manifest this update: Fri 17 Apr 2026 03:01:29 +0000
Manifest next update: Sat 18 Apr 2026 03:01:29 +0000
Files and hashes: 1: TSjfj-QisRfZKTbvFvagtYYtljU.roa (hash: aXZ9GQHn0MfhoPq/DrK3cj/6rgXogLzvprkNtDCtBy0=)
2: uFcVr2ZAT7oDce5bMDd2hOptRu0.crl (hash: 4IRe3JxqcyHlimTbfC4KgnBXklPs1vUDCQCrP08VFAQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e9:46:70:d2:f6:14:01:3e:4b:ac:e9:c6:75:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85715af66404fba0371ee5b30377684ea6d46ed
Validity
Not Before: Apr 17 03:01:29 2026 GMT
Not After : Apr 18 03:01:29 2026 GMT
Subject: CN=79d3578e55d7eed2bb1fa8f021ce63d4e6fa6f3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ab:0f:81:25:5e:b5:86:86:7e:16:50:0d:b3:
ec:8a:19:92:94:cf:70:9c:08:90:4d:65:e5:e4:cb:
bd:51:3a:c5:b0:ad:05:65:ad:71:a8:6e:34:87:c9:
fa:e9:ba:dc:03:0f:9c:ee:e2:e9:3f:ad:9c:77:a1:
8b:db:50:cc:c3:e6:83:89:a0:cf:03:3c:fd:53:68:
ad:93:e4:6a:8e:4b:8d:c6:f1:35:78:76:9d:bf:61:
1d:cf:48:9b:2f:2c:c7:ec:29:34:fe:ea:50:74:61:
4f:f3:49:ad:6b:6f:b1:53:d8:0e:a5:da:5d:1f:44:
42:8d:f4:3f:48:40:08:73:ae:45:60:07:49:4d:19:
e5:43:8f:31:76:4d:0b:03:52:88:a3:da:6e:c9:ea:
98:26:8e:7f:34:63:eb:3d:f3:1a:ec:71:9e:a2:a1:
86:24:3c:a5:20:3d:29:32:af:e6:a6:32:89:43:20:
dc:26:6c:07:20:ec:1c:d0:6c:1b:4f:e9:60:0f:be:
15:7b:e0:f4:41:b9:46:b4:8a:79:1c:d3:ff:59:b4:
f0:0e:86:53:e6:17:3a:eb:7a:33:71:15:18:68:22:
41:eb:1d:d0:35:13:47:c7:0f:a8:26:f0:c0:fa:62:
ef:44:66:26:ba:cd:62:c5:27:a9:ed:54:2b:9b:c4:
ca:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:D3:57:8E:55:D7:EE:D2:BB:1F:A8:F0:21:CE:63:D4:E6:FA:6F:3F
X509v3 Authority Key Identifier:
keyid:B8:57:15:AF:66:40:4F:BA:03:71:EE:5B:30:37:76:84:EA:6D:46:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFcVr2ZAT7oDce5bMDd2hOptRu0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/bb7718-63db-412f-a75e-3f54179d49e5/1/uFcVr2ZAT7oDce5bMDd2hOptRu0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:82:5a:a8:39:2a:18:9d:f4:64:4b:5e:a4:df:85:b2:fb:1c:
51:43:86:3a:28:71:3b:1b:3d:c9:fd:bb:ea:e1:eb:fe:52:d3:
e0:91:d0:fc:6b:77:80:a6:fa:3c:07:62:01:43:92:dc:3f:b2:
8e:f5:42:7e:03:0a:2b:03:38:85:ce:ac:53:84:60:5a:69:d0:
de:49:bb:37:6e:1a:f1:38:98:65:93:ff:7c:ab:c1:59:a0:49:
95:7d:90:d9:9a:f5:99:ec:57:7f:35:b4:60:b3:bd:89:d5:92:
ac:5c:db:11:b6:88:48:85:7f:6e:df:81:fc:ff:86:c4:7c:c9:
67:9f:19:ec:fe:6b:80:18:52:a1:24:b1:30:2a:30:bb:44:5a:
16:d5:3d:ac:b4:35:3c:c4:28:7f:66:7a:f2:1b:0c:9f:5c:fb:
d8:c8:5e:ae:1f:4a:67:62:6c:95:6b:90:6d:a6:51:f7:c1:d5:
07:49:06:12:ab:4b:c3:25:40:9f:d5:87:c0:78:4a:8c:6b:3f:
dd:7d:78:f8:6a:3b:91:77:75:93:40:24:3a:9b:22:7f:50:6a:
d4:b8:f5:83:46:4f:b4:1e:3b:4e:68:9a:a2:c9:b3:63:32:b7:
d1:ac:2f:00:30:14:51:71:0f:1e:7d:a6:63:da:94:d3:1d:6e:
ef:d4:30:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:34 2026 by rpki-client