Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
File: uRRkdndz8SObZGu2a9z09_sSBs4.mft (raw, json)
Hash identifier: csQ4rPQ7P/70dOQngC5mEuAfBrBYMq7X7D76cjnF8hY=
Subject key identifier: E9:00:B5:24:24:32:E6:C5:2B:E6:31:38:86:A1:F3:F5:4D:A0:6D:33
Authority key identifier: B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
Certificate issuer: /CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Certificate serial: 019DA41CE1C09D8272F6F026CCCE9529BE72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 05:00:49 +0000
Manifest this update: Sun 19 Apr 2026 05:00:49 +0000
Manifest next update: Mon 20 Apr 2026 05:00:49 +0000
Files and hashes: 1: FxSV3pjhlX5ncwMd1BJ4YPhboEI.roa (hash: V6ldsVa/sdoxhFtU1dGezva/tghG5qZAguTA3/NtrDw=)
2: YG_wDFENOqVU5myZSFJwFFRQIGo.roa (hash: IKdcIVVEkC9wFm1DM+wG6bBK4y8HgYiZDQKQ7434QC4=)
3: lWRN_vpnN3jdO53Qf_s9sKGgAYI.roa (hash: DSGrSvYMDlk724DBlB7/WGTLaoZcHPiH4iyTmdQidKM=)
4: m-OAweDj7IYWvNC6YulzJlZP2oY.roa (hash: SiV8TM2QfFlhSK0UqbnB7bWFP5VUqLMFVQELQm9ocug=)
5: uRRkdndz8SObZGu2a9z09_sSBs4.crl (hash: 1mceycE5NZiJakn3Az+zOLzwLCNhv+jMW6Mw8hWLkKE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:e1:c0:9d:82:72:f6:f0:26:cc:ce:95:29:be:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91464767773f1239b646bb66bdcf4f7fb1206ce
Validity
Not Before: Apr 19 05:00:49 2026 GMT
Not After : Apr 20 05:00:49 2026 GMT
Subject: CN=e900b5242432e6c52be6313886a1f3f54da06d33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e2:d2:9b:e9:a7:5d:5a:5d:a7:16:44:6a:94:
35:51:b1:41:9c:ac:c5:67:a7:f3:1b:90:7f:27:f2:
df:ad:37:ba:8d:9d:54:cf:ba:15:8d:22:6b:f7:a2:
50:3b:b9:9a:41:54:22:c0:9d:45:c3:6e:7a:98:39:
37:13:27:24:75:23:68:26:d1:c6:28:b4:a5:50:bd:
d9:16:27:97:5f:37:f9:b1:88:68:3b:57:77:f2:5b:
88:37:2d:8f:15:b7:fd:28:95:51:b0:f5:27:1b:6d:
d7:74:d8:3f:fb:26:b5:e9:dd:2f:02:f8:80:95:ed:
90:aa:b8:65:a1:e6:af:e3:83:d5:df:90:0f:c1:30:
b0:d1:d4:3f:b1:5f:61:aa:b6:32:4d:a3:2e:3a:ff:
87:a7:a3:06:ba:e6:95:58:84:ed:be:a2:60:ec:06:
c6:ce:55:aa:00:6b:db:f6:30:22:db:06:b1:a0:e5:
55:06:b0:f7:85:ac:9d:b7:20:3d:9f:24:8b:97:9d:
56:51:e5:09:aa:6c:b6:f1:73:fc:ac:53:0c:61:57:
13:d6:76:55:49:38:b9:09:a9:ed:40:4a:f6:95:20:
4e:12:d9:a4:01:f5:c6:9a:9f:e0:93:29:17:ec:db:
1f:f0:01:6a:0a:08:7a:7b:79:68:2c:ed:23:42:19:
8b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:00:B5:24:24:32:E6:C5:2B:E6:31:38:86:A1:F3:F5:4D:A0:6D:33
X509v3 Authority Key Identifier:
keyid:B9:14:64:76:77:73:F1:23:9B:64:6B:B6:6B:DC:F4:F7:FB:12:06:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRRkdndz8SObZGu2a9z09_sSBs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/13fcd1-d806-4e56-8533-475dbbb0c08c/1/uRRkdndz8SObZGu2a9z09_sSBs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:5e:93:d9:be:1a:ff:8a:88:28:71:22:d9:59:e8:c1:5c:46:
16:1f:d7:48:9b:1d:32:34:03:00:7d:08:ad:6f:31:d0:bf:ff:
77:92:b5:24:8d:b1:17:6f:f2:7b:4b:34:8c:1a:ec:aa:14:f7:
c4:d5:82:7a:32:2e:cd:e2:75:ef:b6:7f:f2:b8:f0:a5:4e:f6:
6a:1d:f3:73:34:b4:98:4a:00:30:0d:ae:93:1f:1d:a6:b0:4b:
a5:e1:24:12:e9:ae:7f:c1:76:78:3d:9a:5c:d7:7a:bc:cb:17:
df:f2:d2:a5:bd:00:72:b3:f7:a0:b8:64:4d:2f:22:72:31:1c:
d7:71:df:12:d6:24:4c:6b:22:e2:53:bf:f5:32:f0:23:8d:b9:
aa:ec:fe:e3:53:17:b7:d6:12:1c:24:79:05:26:3a:eb:1b:ec:
ec:31:e9:11:e3:26:08:1d:0a:1c:b0:5d:89:95:5b:9b:c6:13:
34:85:f0:e4:cb:4e:d7:5e:98:ec:21:de:52:1b:93:6a:89:b0:
4f:6e:df:56:f8:1f:ab:44:03:89:e7:a2:6e:26:9b:f6:0c:0a:
9a:cd:47:16:da:cd:cc:5e:c0:54:51:36:61:7b:2c:3a:31:4f:
30:02:d6:5d:ca:25:0e:a0:bd:90:5a:e5:23:65:d2:9e:f6:98:
b3:12:cb:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:50 2026 by rpki-client