Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
File: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft (raw, json)
Hash identifier: 1wdTCZlkdCD/LCf4UKngR/aYpKKPbZ1XQfwNr+VKJaQ=
Subject key identifier: 33:06:F1:97:78:65:A1:6D:C6:6F:BC:86:AA:ED:E4:19:11:E4:94:63
Authority key identifier: B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
Certificate issuer: /CN=b84785791e07646f5cc58b15e86434cb9c24149d
Certificate serial: 019D9A7505F342103BAE4F757A92FA2AFA79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:53 +0000
Manifest this update: Fri 17 Apr 2026 08:00:53 +0000
Manifest next update: Sat 18 Apr 2026 08:00:53 +0000
Files and hashes: 1: XREnjw7F4Wy3XlmjVUoBIpL_a3A.roa (hash: wuOiczzJqVh1W7P+ln61FSsyWFsn4n4esHJ/HU/I0Aw=)
2: s2iiETsUpUtweaUwFZTgM9aDg7A.roa (hash: /RumfnN7PhI2jQIZLF3QzcmABh/oQLcD7DbhwGLNMV0=)
3: uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl (hash: CRP7e5uQHN4wm3hVA825ucor/iPhgRYE7jTQwQowFLs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:05:f3:42:10:3b:ae:4f:75:7a:92:fa:2a:fa:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b84785791e07646f5cc58b15e86434cb9c24149d
Validity
Not Before: Apr 17 08:00:53 2026 GMT
Not After : Apr 18 08:00:53 2026 GMT
Subject: CN=3306f1977865a16dc66fbc86aaede41911e49463
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:0a:aa:67:9d:5f:c4:e1:b0:52:9c:bd:62:4b:
e7:82:d5:a6:68:f8:b3:be:01:5e:4a:93:3f:26:34:
0c:13:09:14:11:72:9e:9d:2d:2b:cc:10:eb:20:14:
fa:b8:b4:9d:20:2f:0b:c0:dc:d6:69:ea:33:0d:83:
73:6e:ab:d4:fa:fe:41:10:ae:6d:2f:70:21:69:ba:
a6:c1:49:51:3f:d9:3a:ac:dd:40:25:0d:c1:d0:cb:
d8:51:56:30:ee:e4:cb:80:a3:ee:57:04:dd:6f:0a:
90:ba:7e:70:5e:f4:90:f5:5d:99:25:6f:d6:32:d5:
4c:ee:5a:17:ad:8a:3d:d8:9a:25:9c:48:64:05:d5:
a0:8b:a0:42:89:b0:8b:01:df:62:a0:da:55:36:b1:
ae:c6:12:1b:35:7c:61:59:5c:7f:7d:f3:c6:48:ae:
7d:65:b0:9d:cd:e5:c0:c0:9e:31:a4:4b:c6:12:fa:
51:5f:20:34:ba:94:b2:9c:45:c7:69:05:e9:7d:22:
87:b1:8f:ec:a6:c2:b6:f0:1a:bb:11:6c:a2:ee:8c:
ef:b9:e2:3f:03:f0:44:85:2d:5d:27:f3:96:8c:13:
90:f5:a0:d1:d2:68:a8:73:f1:86:86:c9:95:fe:d9:
3f:cd:d5:9a:a1:fa:98:a5:e4:ce:e0:9d:19:9c:c7:
99:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:06:F1:97:78:65:A1:6D:C6:6F:BC:86:AA:ED:E4:19:11:E4:94:63
X509v3 Authority Key Identifier:
keyid:B8:47:85:79:1E:07:64:6F:5C:C5:8B:15:E8:64:34:CB:9C:24:14:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/df8105-18ee-4172-b6bb-0dc33acc1dba/1/uEeFeR4HZG9cxYsV6GQ0y5wkFJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a1:9d:d3:a3:44:37:50:ac:db:de:c4:4b:20:7b:b3:9a:c4:
ce:24:fc:ca:d6:52:7f:24:19:53:29:e8:c3:a3:9e:50:13:a5:
64:2d:6a:5d:d3:32:04:83:82:13:89:89:84:43:9b:22:6a:6d:
11:eb:63:bf:87:00:9f:28:8d:66:66:79:0b:97:1a:f0:ff:74:
70:e2:9e:77:30:a0:6c:c5:8a:12:f8:af:d4:dc:a6:b3:fe:e8:
88:55:ab:21:e8:c8:95:d9:ea:96:b7:d7:31:df:ec:56:c5:06:
f7:18:a3:37:6f:93:4e:4e:02:c0:3b:af:f7:33:40:e5:d6:7c:
46:6e:eb:0b:44:01:71:5c:28:5c:b9:3c:18:00:ce:00:01:52:
fe:db:38:d6:b9:58:0c:df:91:b0:de:c1:4d:a9:dd:82:e7:cf:
3c:01:45:fe:d4:67:2b:4d:a7:4d:99:e5:e4:ca:d2:32:37:89:
b1:77:27:03:6f:33:73:17:3e:7b:47:eb:c3:5f:38:71:5d:46:
81:6c:cf:a1:34:90:c1:c3:9f:38:ec:a3:b0:57:72:79:1c:83:
2d:cc:cb:a5:18:0c:f8:1f:cc:8c:45:23:5f:6f:89:bc:55:90:
26:1c:37:84:b9:3a:66:0a:a7:fd:af:7b:fa:fa:9d:d1:ca:2b:
41:80:95:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:58:16 2026 by rpki-client