Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
File: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft (raw, json)
Hash identifier: 6Y4Nd1JM8kP3xp/g2Tp6v2Sppdg7pF6VCk8+AbHrEjk=
Subject key identifier: 0D:6B:4C:09:8A:46:11:8E:3B:A6:FC:5A:EC:FB:C0:31:93:EA:79:7F
Authority key identifier: A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
Certificate issuer: /CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Certificate serial: 019D9AE31CC8EFCF287294D68DB15C15E8CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
Manifest number: 11DF
Signing time: Fri 17 Apr 2026 10:01:08 +0000
Manifest this update: Fri 17 Apr 2026 10:01:08 +0000
Manifest next update: Sat 18 Apr 2026 10:01:08 +0000
Files and hashes: 1: pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl (hash: gOEuEr3yhZ5rtqxI4trNirGFoeQPMZOg9yTKtvwlYjk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:1c:c8:ef:cf:28:72:94:d6:8d:b1:5c:15:e8:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a54a9e275c5c17809b8fcf8c0fe0b5f6329ceeef
Validity
Not Before: Apr 17 10:01:08 2026 GMT
Not After : Apr 18 10:01:08 2026 GMT
Subject: CN=0d6b4c098a46118e3ba6fc5aecfbc03193ea797f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:24:95:36:b4:b3:17:56:1a:d0:c6:ff:e9:75:
47:4e:4c:bd:3c:a6:5f:67:14:e0:76:39:6d:0c:44:
23:ff:43:7b:b1:d4:2b:9e:03:34:d3:68:9f:9f:34:
9a:f8:6f:82:c4:fb:e4:3c:53:29:40:bd:47:31:23:
84:70:35:61:a5:13:f8:95:31:f0:c3:d1:75:f6:01:
38:13:64:cf:6a:2a:88:55:34:78:fc:08:7d:b1:41:
87:7f:f0:ce:47:b8:22:d8:8e:44:b7:05:65:9d:8f:
ae:21:1c:16:9e:c3:dc:08:92:31:e6:ae:e5:4d:22:
64:07:d5:bd:c3:33:54:f0:ba:a7:df:b8:05:a2:91:
cc:b1:63:f6:57:70:4e:cd:42:23:b6:61:94:06:86:
37:91:b4:25:02:6e:8b:22:ea:26:0a:29:e9:a5:42:
12:01:3e:4a:44:50:b7:f7:54:05:3d:8a:a2:d6:78:
c4:d4:e2:84:a5:26:12:49:53:f4:68:ae:0a:c7:d7:
60:fa:76:8f:30:7c:ae:04:52:ca:15:15:c8:ac:fd:
ad:fa:12:f9:dd:14:d1:dc:28:5f:b0:b6:af:38:a3:
2d:e5:fa:ac:7e:bd:fd:be:20:40:d4:4a:80:31:61:
fe:c5:c2:80:60:27:9b:8d:ab:a8:bf:32:7b:8e:68:
77:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:6B:4C:09:8A:46:11:8E:3B:A6:FC:5A:EC:FB:C0:31:93:EA:79:7F
X509v3 Authority Key Identifier:
keyid:A5:4A:9E:27:5C:5C:17:80:9B:8F:CF:8C:0F:E0:B5:F6:32:9C:EE:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/4707ec-d3df-4470-92a9-69980eebc20c/1/pUqeJ1xcF4Cbj8-MD-C19jKc7u8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:b0:4c:e1:1c:74:48:2b:a1:3c:0e:b0:f6:63:c0:fd:86:14:
7b:e7:ea:6d:08:73:41:cc:60:8f:8b:84:50:60:b4:7f:4c:4f:
31:0a:35:7b:f0:13:f4:10:03:fa:97:ce:56:80:fe:86:1d:ef:
db:ee:99:7d:91:a7:4b:66:a7:a4:af:77:2e:9d:8b:27:fd:4f:
2b:48:7b:b9:35:52:75:8c:cf:08:4d:8f:6f:24:3c:bc:ab:74:
a9:20:36:68:54:d2:b0:ec:c8:94:2e:6b:96:0a:68:c2:e8:d8:
ab:d2:35:9d:71:7c:ab:83:85:dc:50:d0:12:95:ca:fd:10:ac:
7e:3b:14:14:cd:d7:ca:1f:37:d7:69:23:b6:e2:41:df:a1:44:
18:e3:8f:b6:44:d7:2e:b6:49:06:5f:cd:04:3a:49:e6:80:ae:
fb:c5:f9:4f:95:a6:0d:2c:31:61:80:9f:38:4c:35:9a:ad:52:
d1:9f:7c:52:fa:0d:9a:6a:f8:66:14:52:01:ac:89:c1:32:2a:
2f:9b:1e:f4:e3:12:b7:14:79:2b:00:73:5a:81:d6:77:a0:2f:
13:c6:e1:ac:99:54:39:2b:50:ef:d7:61:ba:4a:89:de:26:c6:
a0:43:94:5c:38:7d:df:64:e1:39:3b:26:1e:e8:4c:5c:a0:ef:
73:4f:ba:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4xzI788ocpTWjbFcFejMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1NGE5ZTI3NWM1YzE3ODA5YjhmY2Y4YzBmZTBiNWY2MzI5
Y2VlZWYwHhcNMjYwNDE3MTAwMTA4WhcNMjYwNDE4MTAwMTA4WjAzMTEwLwYDVQQD
EygwZDZiNGMwOThhNDYxMThlM2JhNmZjNWFlY2ZiYzAzMTkzZWE3OTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzySVNrSzF1Ya0Mb/6XVHTky9PKZf
ZxTgdjltDEQj/0N7sdQrngM002ifnzSa+G+CxPvkPFMpQL1HMSOEcDVhpRP4lTHw
w9F19gE4E2TPaiqIVTR4/Ah9sUGHf/DOR7gi2I5EtwVlnY+uIRwWnsPcCJIx5q7l
TSJkB9W9wzNU8Lqn37gFopHMsWP2V3BOzUIjtmGUBoY3kbQlAm6LIuomCinppUIS
AT5KRFC391QFPYqi1njE1OKEpSYSSVP0aK4Kx9dg+naPMHyuBFLKFRXIrP2t+hL5
3RTR3ChfsLavOKMt5fqsfr39viBA1EqAMWH+xcKAYCebjauovzJ7jmh3RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA1rTAmKRhGOO6b8Wuz7wDGT6nl/MB8GA1UdIwQY
MBaAFKVKnidcXBeAm4/PjA/gtfYynO7vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTkt
Njk5ODBlZWJjMjBjLzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC80NzA3ZWMtZDNkZi00NDcwLTkyYTktNjk5ODBlZWJjMjBj
LzEvcFVxZUoxeGNGNENiajgtTUQtQzE5aktjN3U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHbBM4Rx0
SCuhPA6w9mPA/YYUe+fqbQhzQcxgj4uEUGC0f0xPMQo1e/AT9BAD+pfOVoD+hh3v
2+6ZfZGnS2anpK93Lp2LJ/1PK0h7uTVSdYzPCE2PbyQ8vKt0qSA2aFTSsOzIlC5r
lgpowujYq9I1nXF8q4OF3FDQEpXK/RCsfjsUFM3Xyh8312kjtuJB36FEGOOPtkTX
LrZJBl/NBDpJ5oCu+8X5T5WmDSwxYYCfOEw1mq1S0Z98UvoNmmr4ZhRSAayJwTIq
L5se9OMStxR5KwBzWoHWd6AvE8bhrJlUOStQ79dhukqJ3ibGoEOUXDh932ThOTsm
HuhMXKDvc0+64g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:26:03 2026 by rpki-client