Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
File: uU8woHaUohE5ZIclom6zTOSha6s.mft (raw, json)
Hash identifier: m3xIpe2b6Z6JcyDWKrYsplb8kQvj7IoJenHZdisFdTQ=
Subject key identifier: 5B:35:50:8D:A2:23:0B:B3:C1:F8:66:0F:03:B4:64:27:5C:74:75:46
Authority key identifier: B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
Certificate issuer: /CN=b94f30a07694a21139648725a26eb34ce4a16bab
Certificate serial: 019D9998FFE0ED0ED3FBEF74AB1A90F13E37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
Manifest number: 0555
Signing time: Fri 17 Apr 2026 04:00:34 +0000
Manifest this update: Fri 17 Apr 2026 04:00:34 +0000
Manifest next update: Sat 18 Apr 2026 04:00:34 +0000
Files and hashes: 1: uU8woHaUohE5ZIclom6zTOSha6s.crl (hash: DrS2GzaMntVpDJcDMXclyHjlYPzWjid3+l81Vdd9aM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ff:e0:ed:0e:d3:fb:ef:74:ab:1a:90:f1:3e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94f30a07694a21139648725a26eb34ce4a16bab
Validity
Not Before: Apr 17 04:00:34 2026 GMT
Not After : Apr 18 04:00:34 2026 GMT
Subject: CN=5b35508da2230bb3c1f8660f03b464275c747546
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:b0:62:63:4f:52:3b:e5:b2:2e:31:fa:26:bf:
b1:97:52:bc:35:64:b2:5e:86:5e:a1:e8:f3:41:65:
30:1e:28:57:dd:dc:a2:d5:e9:1b:57:88:d1:bf:2b:
db:8c:33:4a:9e:5a:d3:d2:6b:c2:4c:72:b9:04:2b:
3c:a8:54:3a:36:c7:23:e9:15:80:01:18:a4:44:bb:
b2:fd:c5:af:fb:85:8e:27:d6:fa:f0:13:e8:bd:ad:
ce:51:cb:1f:f7:2f:46:98:91:28:50:07:97:b6:86:
f5:ec:aa:e4:4d:20:18:ce:10:dd:d5:24:5d:49:77:
3c:de:7c:3d:f9:9a:d1:63:41:e6:01:a9:ee:09:95:
30:4e:67:5f:09:5b:2b:70:d2:2f:76:9c:48:5e:73:
2b:84:97:c2:64:4d:7a:97:26:ea:b4:ef:e4:91:e3:
25:1e:d6:51:10:e1:68:52:2c:ac:04:a5:68:86:5f:
ce:7d:88:15:fd:1b:20:c4:46:80:50:93:ac:76:f9:
98:74:2f:85:0b:f8:45:37:79:e5:50:e8:1b:b7:c9:
ab:3f:d9:63:a2:85:f0:1e:0f:59:26:46:19:3c:99:
69:45:4a:05:e8:c3:24:9c:fe:19:2e:d3:9f:e4:2a:
79:5d:42:80:b2:8d:41:5a:25:78:6c:2c:9b:8a:9a:
f0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:35:50:8D:A2:23:0B:B3:C1:F8:66:0F:03:B4:64:27:5C:74:75:46
X509v3 Authority Key Identifier:
keyid:B9:4F:30:A0:76:94:A2:11:39:64:87:25:A2:6E:B3:4C:E4:A1:6B:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uU8woHaUohE5ZIclom6zTOSha6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/f76c21-99c3-4f9a-8b42-77a3835d4fbb/1/uU8woHaUohE5ZIclom6zTOSha6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:32:36:c4:88:d1:8e:06:9e:fd:55:36:23:2a:f3:60:42:f0:
26:8f:d6:e7:bc:c7:86:20:23:57:4c:62:ee:21:4f:2c:be:d0:
5c:48:93:57:82:5d:62:85:bc:a2:9f:75:cc:fa:55:ba:15:ec:
42:a1:45:6d:74:ad:e7:37:dd:34:f4:e4:52:8a:cd:3d:c6:e0:
ad:d2:52:b1:7c:00:28:31:4e:15:5a:48:b6:e5:c9:55:95:b4:
c2:46:a0:d8:1c:ff:2e:91:4a:bc:d9:f3:90:be:c0:17:6d:67:
0f:ff:59:83:fb:19:f6:34:39:1f:4d:ca:f9:40:9b:09:22:73:
e4:57:2b:ca:85:6f:12:95:fa:eb:0a:11:43:78:af:ee:e7:6f:
58:a2:67:af:9e:d2:d3:8e:e4:54:9e:aa:89:d2:b4:cd:52:7e:
77:75:8d:55:a9:61:46:13:64:06:18:aa:f2:eb:90:f8:a3:61:
b6:75:81:33:7b:0f:f8:bd:75:98:ae:23:30:2f:0c:7f:b5:11:
3d:e5:ab:82:c9:f7:0a:8d:21:b7:6c:73:f7:9f:2d:71:70:ce:
f3:31:da:3e:90:fd:cf:db:87:9d:95:22:3b:b8:0a:cb:31:d6:
79:c5:73:b3:c5:2a:2a:52:d4:d5:7d:62:9a:2a:ee:81:3b:59:
68:13:94:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:03:48 2026 by rpki-client