Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
File: unnFAIApfLnMDMk07jifUMPnPUo.mft (raw, json)
Hash identifier: kykKY/SAhRTR6R4t5UfpfwPpe3+iP4hBl0bAq3AR2y0=
Subject key identifier: DE:27:4E:ED:F3:47:17:68:24:B1:B9:41:E2:2A:5D:AB:7D:EA:39:D3
Authority key identifier: BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
Certificate issuer: /CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Certificate serial: 019D98BDAE18B09F636EE8F2FF93C913A9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
Manifest number: 078F
Signing time: Fri 17 Apr 2026 00:01:00 +0000
Manifest this update: Fri 17 Apr 2026 00:01:00 +0000
Manifest next update: Sat 18 Apr 2026 00:01:00 +0000
Files and hashes: 1: XKauEkhgdHlzhfA3t4VdHxgbGbE.roa (hash: sIffgoQ23PXM37zJ/C0HFWWKObJRqfapVrUOvAIf2kY=)
2: unnFAIApfLnMDMk07jifUMPnPUo.crl (hash: cdukAXyTvg78iaA/lOWXrqPOP0qr/eQAoXYqyj2MpQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:ae:18:b0:9f:63:6e:e8:f2:ff:93:c9:13:a9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Validity
Not Before: Apr 17 00:01:00 2026 GMT
Not After : Apr 18 00:01:00 2026 GMT
Subject: CN=de274eedf347176824b1b941e22a5dab7dea39d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:e4:8c:6f:bf:5a:df:48:ec:68:59:eb:ec:43:
2c:86:63:2d:c1:5f:da:5c:e8:ff:d0:d0:82:97:1e:
c3:e5:d8:b3:bb:1f:af:78:42:71:9c:b4:12:23:c5:
3c:c4:14:52:cf:de:85:da:7a:2b:0a:1e:83:f2:b6:
19:d8:08:75:a5:c1:a5:7d:06:a6:ab:e4:67:bc:a6:
19:c5:f4:2e:5b:6b:86:1f:d5:2d:37:4e:13:a2:98:
e0:c0:1a:67:20:76:d9:97:b2:80:5a:4c:21:7e:4f:
34:e3:3c:fa:41:be:13:d0:e4:dc:c8:5b:50:a0:f2:
27:68:eb:62:da:94:f5:7f:6e:10:94:a6:d7:f5:36:
26:19:fa:ad:84:16:08:fe:65:6e:71:70:9a:0e:43:
47:2e:f4:ba:4c:13:17:a4:46:da:e1:21:9f:53:31:
d1:ac:37:8a:cf:41:74:26:76:a0:0a:9d:7d:5a:70:
43:d9:65:dc:70:95:5d:55:37:b4:e3:67:6b:46:20:
38:bd:77:c0:ec:bf:12:2f:91:c5:50:99:0b:4c:e4:
57:46:64:d8:fb:3c:94:a6:59:21:4f:8d:fb:fc:0d:
6a:9a:32:50:1c:09:c6:67:66:f4:7e:01:5c:c2:6f:
b4:68:f0:df:b4:1a:a7:d8:86:52:2d:dc:34:f4:58:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:27:4E:ED:F3:47:17:68:24:B1:B9:41:E2:2A:5D:AB:7D:EA:39:D3
X509v3 Authority Key Identifier:
keyid:BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:fe:39:63:b9:de:8d:42:62:79:fa:24:30:64:ea:21:45:04:
f3:28:a7:a4:16:b6:80:2a:38:0a:47:6d:54:da:a1:41:51:2c:
f0:88:8d:48:69:df:2c:3a:0b:aa:1a:a4:cd:77:14:bb:5d:2f:
7d:43:39:a1:4f:34:a9:a1:6f:93:c8:3f:1e:b4:05:d3:14:07:
a3:14:cc:d7:5e:39:7d:54:76:2e:71:52:79:24:f5:4e:c3:09:
d6:f8:0a:08:67:ff:4d:e9:2a:3a:8a:c0:55:b4:e5:44:fa:ee:
0d:e0:b7:db:24:d3:63:0e:86:f6:df:71:40:16:38:29:62:21:
4f:ce:9b:55:26:f1:9f:df:5c:26:2a:74:9c:79:72:44:6d:f9:
ac:c3:62:b4:79:f6:90:a7:16:89:20:97:c4:55:d7:85:f3:53:
ad:4a:87:eb:9a:97:d4:63:c2:70:c4:25:a6:fb:ea:31:1a:10:
09:9b:a3:9d:5c:50:9a:86:58:9e:92:81:f2:eb:b3:37:1f:7f:
40:56:5d:86:af:f4:5e:e8:9f:34:eb:05:2e:33:13:c1:92:40:
af:31:e8:ca:88:65:55:fd:bc:1d:b6:06:f7:e8:6e:79:49:ea:
e5:8d:fa:90:1c:56:5d:26:ea:4f:7d:d9:db:1b:df:89:d9:6a:
14:af:6b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:34:02 2026 by rpki-client