Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
File: uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft (raw, json)
Hash identifier: SjkyYb+hyDm+QDAZo/anT44FrYk2WVQBcHeHm9v2800=
Subject key identifier: AE:B0:9D:95:7A:ED:F6:60:27:B9:9C:9C:AA:DE:C6:FE:52:72:45:3E
Authority key identifier: B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
Certificate issuer: /CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Certificate serial: 019D99628E9BC9B1EEB7AF5E1A2D6143DC51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
Manifest number: 117D
Signing time: Fri 17 Apr 2026 03:01:06 +0000
Manifest this update: Fri 17 Apr 2026 03:01:06 +0000
Manifest next update: Sat 18 Apr 2026 03:01:06 +0000
Files and hashes: 1: 5pmE9mYBjRhZe38QmWwWm942O9U.roa (hash: I/XtJQhuUGNWJY5SlUg6TDyMur1mKeDTnd/4LdzUf1c=)
2: uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl (hash: g/70jI6+WIiYPtquZp9ak6sRWct9JHB0TtweeogtNLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:8e:9b:c9:b1:ee:b7:af:5e:1a:2d:61:43:dc:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8d3ecb8f711e0b92b505b8a0f7a5ee042291395
Validity
Not Before: Apr 17 03:01:06 2026 GMT
Not After : Apr 18 03:01:06 2026 GMT
Subject: CN=aeb09d957aedf66027b99c9caadec6fe5272453e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ee:b3:3d:0b:78:5b:f1:70:1c:89:e7:fa:d2:
8c:fe:f2:9c:80:32:46:8f:bd:60:81:82:79:9b:b1:
a0:af:8c:e2:1f:cc:b4:c6:88:fd:57:39:3b:4f:97:
7b:23:e1:0b:64:67:87:12:77:76:72:66:ce:07:01:
bf:94:6d:99:29:16:24:53:1d:f9:2e:f2:4b:4c:9f:
2f:0e:bd:58:27:70:6c:3b:8d:83:53:25:b3:7e:26:
cb:45:68:fc:7c:f8:84:1c:45:4b:64:b5:3d:b3:d3:
a0:df:ee:0f:7d:ef:51:9e:de:69:5d:66:31:c5:f9:
5e:d6:c6:b3:05:94:1e:43:23:50:4c:d9:c3:f0:e2:
96:b0:11:56:95:fd:39:5e:a0:ff:c5:41:c6:da:1b:
5c:b2:ca:41:d3:d3:a1:5a:01:8f:3d:fc:70:ef:43:
42:b4:0e:4a:8e:37:f6:c5:16:41:19:5f:74:71:24:
ef:a2:3f:b3:48:c5:65:88:fe:9d:ca:db:07:3b:ac:
e1:7b:8b:52:3a:dc:8d:56:21:f8:a2:08:21:ea:7f:
7a:e3:0f:55:d7:fb:3b:cb:ea:45:5b:0d:d4:32:f2:
d7:e2:77:18:28:78:74:3a:3e:27:dc:38:27:d3:dc:
8c:a4:93:f1:e4:21:5f:48:05:0b:e8:2d:33:84:8e:
f6:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:B0:9D:95:7A:ED:F6:60:27:B9:9C:9C:AA:DE:C6:FE:52:72:45:3E
X509v3 Authority Key Identifier:
keyid:B8:D3:EC:B8:F7:11:E0:B9:2B:50:5B:8A:0F:7A:5E:E0:42:29:13:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uNPsuPcR4LkrUFuKD3pe4EIpE5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/368a8d-eff2-49c2-a963-a1861e53544d/1/uNPsuPcR4LkrUFuKD3pe4EIpE5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c2:8a:4d:bd:a0:2c:73:cd:b7:35:af:a8:5c:a1:7c:c2:e3:
1f:6f:05:55:19:72:ff:d5:66:23:c0:e6:51:be:c4:89:6b:3e:
27:f2:f0:97:26:66:ed:74:9f:b0:a4:53:f7:f4:c9:55:80:6a:
d3:39:8e:bf:6d:b5:28:77:43:17:50:3c:c0:e3:ab:d8:62:f5:
f4:93:d1:b2:45:c5:a3:0c:75:85:c3:e0:4c:c0:0f:d4:ff:a9:
57:d2:24:0e:f1:06:13:1b:ba:24:e3:f6:be:f6:1f:61:c9:02:
b8:e9:30:67:7c:4f:ae:25:96:03:57:d8:42:23:e1:b8:40:67:
0c:3c:42:62:03:6e:fc:3c:b7:ea:21:20:f3:ed:27:c4:f8:1c:
b4:9d:d1:a4:f1:5b:d5:66:51:ed:b9:c8:59:40:20:b9:5f:2b:
40:00:9f:38:d9:74:22:5e:fa:f4:e0:fd:e8:3b:89:28:71:d4:
45:43:b9:e0:47:7d:55:cb:17:81:a7:2a:50:7b:f5:a2:22:c2:
a0:8f:96:65:24:0f:cb:76:38:14:7d:c4:76:43:58:0f:a2:6a:
9a:84:d9:98:82:66:d1:01:47:10:2c:3c:64:3a:01:30:70:20:
5b:97:15:11:54:36:ad:2e:21:6e:1c:e4:08:dd:a3:1b:b1:88:
e9:2f:f3:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:13 2026 by rpki-client