Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: 5ikkmrCmh/jVHU/hsfN2arc7fpQTk/A/7+VgZpiOpFw=
Subject key identifier: 52:EF:5A:41:CC:E7:CD:18:D9:61:0C:C0:CC:8C:ED:0E:5B:C5:77:2E
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 019D9886F789688584E0EFE6BE839879F597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 23:01:15 +0000
Manifest this update: Thu 16 Apr 2026 23:01:15 +0000
Manifest next update: Fri 17 Apr 2026 23:01:15 +0000
Files and hashes: 1: EK98MbFFSSPIZHcJY-ZW_UF_ED0.roa (hash: Ug1DIE2wtnkuxo6OV5HarCRpdJ5eCoWMxa7DhgeBQVc=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: bd9vlb0EzoeCYZ9MKuxanl7MnSQDdX3ZWlXO7sCp3yE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:f7:89:68:85:84:e0:ef:e6:be:83:98:79:f5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Apr 16 23:01:15 2026 GMT
Not After : Apr 17 23:01:15 2026 GMT
Subject: CN=52ef5a41cce7cd18d9610cc0cc8ced0e5bc5772e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:84:0e:24:52:fd:80:43:b7:d3:01:7a:ae:
95:22:53:d1:c2:2c:f4:d7:f4:f6:08:87:8d:a1:00:
62:7a:26:b0:ff:59:c3:a2:e9:26:87:e6:db:00:2b:
01:82:d1:72:cb:0b:83:93:da:13:cc:13:9b:18:1e:
2b:49:ee:86:44:70:10:c4:9c:5f:05:0a:53:0d:cc:
82:3c:cf:84:e4:5d:7d:94:b1:3a:bb:6f:63:9d:2e:
ed:11:65:8d:91:fd:f4:bc:1b:88:d1:11:0c:33:90:
3c:f8:9f:e0:ca:f8:cf:af:f4:9f:ee:1d:45:30:3a:
0e:37:01:df:92:a2:d0:98:01:6f:da:9a:25:07:5f:
d8:f6:8c:fd:95:ce:38:fb:90:ca:08:c8:ef:a6:1a:
50:6a:48:41:52:3e:29:b0:6a:e9:77:e8:a8:de:8e:
8d:2f:75:09:c1:65:88:67:3f:39:f0:05:43:e8:97:
1a:4f:3c:75:75:f5:94:66:59:a6:d7:f5:84:bb:8b:
da:9b:47:65:bf:f7:7a:0d:6d:28:05:d3:de:39:41:
2c:d9:58:5a:23:1e:55:d1:da:f2:ad:68:1d:11:2e:
16:43:60:7c:97:e4:46:1a:c3:47:c7:5d:dd:a2:16:
be:55:cf:24:5d:07:1e:e4:82:f0:5c:cb:9a:3c:55:
bf:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:EF:5A:41:CC:E7:CD:18:D9:61:0C:C0:CC:8C:ED:0E:5B:C5:77:2E
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:60:41:50:68:5e:23:62:55:e7:a2:fb:6a:50:c1:10:9e:be:
e0:66:f7:be:a2:0b:4b:33:47:a6:3a:2e:f2:1f:cd:dd:69:dd:
e2:c3:05:db:0a:b7:98:72:ec:44:a5:f0:40:a7:1d:c7:d1:cc:
0d:7c:69:0e:32:fb:1b:e4:6e:97:0a:10:73:aa:7e:2e:ca:88:
01:22:b4:70:6a:b9:8e:7f:1c:da:cb:46:98:97:f0:e3:9a:1d:
2b:4b:e1:2c:d1:67:2e:7b:d7:ca:4f:16:d9:45:7e:58:d6:0b:
b2:89:f2:92:98:3d:56:77:20:60:ef:57:0a:07:bb:4d:d1:79:
3f:ae:a6:56:ab:54:bb:a2:0c:30:74:e5:6f:c1:f2:d0:ee:b1:
1e:d6:a8:75:b8:a2:70:21:58:0e:2a:64:13:15:cc:99:b0:ee:
75:06:2a:96:97:42:15:6b:77:15:35:5b:08:a9:d3:3a:9d:e1:
6d:b7:eb:50:63:1d:f8:94:9b:8e:26:d5:97:af:bd:d2:6d:80:
63:97:e9:89:30:b5:b7:3b:43:ca:1c:83:96:a1:cc:37:56:c9:
29:90:ca:c8:14:92:72:06:36:78:65:3a:3e:2d:2a:07:2c:f2:
ef:41:16:66:eb:97:2e:ae:02:8f:be:7a:c1:78:40:31:0b:f9:
d0:70:51:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:35:48 2026 by rpki-client