Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
File: Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft (raw, json)
Hash identifier: SDPzVvSkzDFVOXqZlf7Z4KeHAyImX2RBomTMGincWSk=
Subject key identifier: A2:91:D9:63:5F:8C:06:F8:57:C3:64:5A:99:71:3F:97:8D:23:93:5E
Authority key identifier: 52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
Certificate issuer: /CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Certificate serial: 019D9BBEE97BE44B211C451DE6553CF75CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 14:01:13 +0000
Manifest this update: Fri 17 Apr 2026 14:01:13 +0000
Manifest next update: Sat 18 Apr 2026 14:01:13 +0000
Files and hashes: 1: 7lREXn6K5l-DbJ8mjZvq6RJ1uEk.roa (hash: 3nD474BFUX8wCCyCzrtNJIx6J0yUBUFRCHlh3/kVZac=)
2: Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl (hash: gYH6hm0h0HQf4rP0+7oAKijk41YBOOsZOWX1oQfAOjE=)
3: XqVaeCjaPtQW5nTcWKYaszB243o.roa (hash: 0c77i33BA9sh6hWoaqI47xWtW3Ms9jVeqGWtj/letD0=)
4: kEJSnxenHfD3MGsQVg0rWMsU-r4.roa (hash: CKWwPe7aGHyQIJbjGScWajSnRgDC3Bc7VORq9esiMd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:e9:7b:e4:4b:21:1c:45:1d:e6:55:3c:f7:5c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52bf21eeb36414b3280e6c33b0b57296b8f6b675
Validity
Not Before: Apr 17 14:01:13 2026 GMT
Not After : Apr 18 14:01:13 2026 GMT
Subject: CN=a291d9635f8c06f857c3645a99713f978d23935e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:84:83:53:a2:02:0a:51:2a:7e:e0:aa:64:92:
29:82:5d:7b:b6:6d:40:d2:d2:b9:32:e1:82:a6:d6:
c8:2f:c8:4f:13:9f:06:05:21:11:19:be:74:82:a0:
98:95:8f:91:a5:7e:e5:61:ec:94:9a:00:62:17:a0:
3c:e8:f7:c4:65:45:96:27:b6:22:9c:d9:c8:9b:fe:
ca:4d:22:97:93:89:7e:89:4a:de:c7:64:6f:9a:cf:
0b:75:d1:e8:fc:c2:f1:00:e6:f0:e8:62:53:a6:0e:
c7:65:48:61:44:ba:79:87:e4:5e:f4:ca:33:37:e8:
f0:27:08:f7:e6:43:47:bb:6f:db:62:90:76:2d:4a:
b6:32:86:0d:69:64:e5:a5:95:47:cb:e8:64:30:57:
3b:92:20:6e:c9:60:8e:e4:29:71:07:63:1f:27:2b:
2b:8d:91:ac:2d:14:21:82:ef:34:27:36:75:7c:20:
e0:df:06:b1:2d:46:d0:87:f7:cd:fa:83:b2:84:88:
ae:4a:3c:4e:3e:22:9b:03:f5:8c:68:fc:ed:02:02:
96:95:d6:a9:2d:79:78:6e:01:ec:35:39:9b:5d:47:
c0:27:84:12:c2:62:3c:e7:7f:25:c8:2d:18:eb:59:
13:aa:2d:5b:76:45:d0:af:3e:a5:37:29:bb:09:8f:
34:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:91:D9:63:5F:8C:06:F8:57:C3:64:5A:99:71:3F:97:8D:23:93:5E
X509v3 Authority Key Identifier:
keyid:52:BF:21:EE:B3:64:14:B3:28:0E:6C:33:B0:B5:72:96:B8:F6:B6:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ur8h7rNkFLMoDmwzsLVylrj2tnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/059543-69e4-48f6-a175-ac96f6aab494/1/Ur8h7rNkFLMoDmwzsLVylrj2tnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:1b:ae:6a:dc:df:9b:e0:1d:fc:10:73:6b:78:d5:0e:40:69:
10:bb:8c:9b:ce:8b:5c:f8:5d:46:f2:fb:da:23:ae:9d:b9:37:
fa:0d:91:70:23:7d:1c:ca:5a:6b:df:09:ef:5d:e1:75:8a:b8:
6e:eb:67:86:77:6e:26:09:3b:e5:7d:d5:55:f7:56:85:66:be:
11:17:fb:ce:35:25:ae:6f:e9:04:17:7e:53:67:fb:78:91:af:
ce:af:15:d1:0e:5b:ac:48:cf:ea:b3:5e:8a:a8:8d:72:f5:b1:
53:fb:e1:99:1c:18:ac:47:4e:0c:1b:ee:19:d7:da:6d:3e:3a:
71:a0:e6:9b:62:c8:ae:99:ca:34:15:81:c6:d9:e5:0f:be:85:
ae:bf:2f:13:4b:13:b8:be:00:63:ff:68:ff:f3:55:57:56:d5:
a0:05:bd:a0:c5:3b:d9:16:cf:f9:e8:cc:62:91:04:dc:c8:ee:
ca:99:9f:5c:28:21:11:3c:ca:3a:42:2c:35:a4:34:84:bc:7d:
0c:a1:f6:56:8b:47:07:9b:8f:6a:f6:f4:83:1f:7f:29:e7:de:
a7:34:4d:c5:c7:ab:8e:90:21:23:f2:71:00:18:3e:72:19:5b:
bc:28:6b:73:a7:30:db:02:f1:4e:d3:de:ed:3c:fe:12:49:6c:
d5:02:07:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:03:40 2026 by rpki-client