
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
File: u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft (raw, json)
Hash identifier: 3ltxjRo0xZAOrfXohBB3sQyXlTY7Kp+lEvKZC+Q+Sqs=
Subject key identifier: A2:7B:47:26:0A:BC:A3:D7:3B:43:3F:8F:EF:B9:28:53:74:94:3B:A8
Authority key identifier: BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
Certificate issuer: /CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Certificate serial: 019D98863B5F20CD4CEBA5600C997405D9D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
Manifest number: 18C5
Signing time: Thu 16 Apr 2026 23:00:27 +0000
Manifest this update: Thu 16 Apr 2026 23:00:27 +0000
Manifest next update: Fri 17 Apr 2026 23:00:27 +0000
Files and hashes: 1: dK7BHFnWg4Ak5BA73uAKBbgJyrU.roa (hash: h8SstddteIMfyTQvh7qKg5ql0pCJQQ+o3Yc6Ve2+nJo=)
2: u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl (hash: rfqRuYwmn87+xVu9G9+eAs+87qsr5Sy+Odb+3UADLW4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:3b:5f:20:cd:4c:eb:a5:60:0c:99:74:05:d9:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb57561ca2dbf750e8f5e0b7389ef09ce9b5bcea
Validity
Not Before: Apr 16 23:00:27 2026 GMT
Not After : Apr 17 23:00:27 2026 GMT
Subject: CN=a27b47260abca3d73b433f8fefb9285374943ba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:99:49:89:78:a1:8c:fa:9f:2e:2b:88:bf:9d:
f8:a3:35:64:9d:09:c4:f6:aa:c7:08:45:72:7b:26:
8b:92:b2:6a:36:74:06:4c:ba:ae:9c:5d:54:90:ee:
9c:fe:11:74:0b:09:62:ca:24:ce:1f:d8:98:f4:e3:
73:aa:ca:86:f4:fd:86:5b:3d:e2:25:66:d8:10:7c:
44:f2:92:75:ac:09:9d:e0:63:7d:8b:2f:3f:9e:6d:
fb:50:e3:3e:29:08:17:0b:78:34:2f:69:a6:ad:23:
28:d8:14:3a:4b:5c:b8:8d:2a:e7:3e:1d:e5:9c:34:
28:86:85:b1:3f:e5:4f:c1:87:26:cd:d1:3a:fd:d6:
42:50:6c:59:97:3a:6b:d8:0f:75:e1:2d:3b:47:16:
8d:81:c5:89:3e:10:44:c4:2c:00:6d:5c:87:b1:91:
21:bc:e8:db:16:e3:a5:3b:c2:07:aa:5a:62:f4:17:
00:96:fc:03:bd:88:86:2e:95:67:63:d0:39:fd:e6:
ac:6b:c1:53:e7:98:04:6b:b1:64:bf:4d:fb:01:ce:
98:d2:1d:28:3a:3c:d2:1c:6f:05:29:98:b8:70:4d:
9c:18:9b:63:37:2d:fb:f2:14:d4:4b:28:dc:19:58:
91:1a:2f:53:85:45:06:ec:e2:50:2a:de:ee:9b:59:
d8:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:7B:47:26:0A:BC:A3:D7:3B:43:3F:8F:EF:B9:28:53:74:94:3B:A8
X509v3 Authority Key Identifier:
keyid:BB:57:56:1C:A2:DB:F7:50:E8:F5:E0:B7:38:9E:F0:9C:E9:B5:BC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1dWHKLb91Do9eC3OJ7wnOm1vOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/d5f9aa-337b-4d60-8f5e-02125e44e3a8/1/u1dWHKLb91Do9eC3OJ7wnOm1vOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:47:5d:a5:15:ee:79:b9:9f:14:56:3f:21:72:da:4f:f3:f9:
31:d4:6e:ed:77:f9:ba:2e:0d:56:37:92:d8:8c:a2:d0:50:a6:
82:09:97:dd:91:b7:fa:f9:fc:1b:90:57:de:b7:be:ad:03:6f:
1c:ea:1c:48:42:72:4b:48:f9:4b:a4:d6:0a:e8:b4:51:c2:19:
e5:d0:ed:1f:bb:25:9b:60:9d:f0:d9:96:99:23:f1:bb:70:e6:
79:c5:ef:25:2a:cf:c3:07:ef:4f:33:75:31:03:0b:55:45:db:
62:92:6e:a7:b1:1f:d1:09:63:0c:62:eb:b5:b0:5d:80:e1:b1:
1c:c9:5c:94:11:00:4c:a1:98:19:13:85:0b:67:98:be:a5:58:
8b:0c:ef:45:66:8b:48:6e:f8:54:bf:de:ef:cf:ed:9d:f0:36:
73:5c:b2:dc:d4:9d:12:a0:0f:62:11:9f:3e:3b:21:f2:6d:0a:
02:0b:b9:89:3d:7a:24:e3:be:b4:08:13:03:d9:7b:f4:bd:b0:
e8:16:c2:36:61:22:1e:78:97:cc:f4:d0:92:81:6b:08:47:b3:
60:b3:c3:d5:68:8d:20:70:96:57:2d:b0:3c:f7:29:44:f6:bc:
a4:26:f2:5e:39:a8:b7:c2:59:95:b3:14:41:5e:45:c4:b3:77:
9b:6c:89:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:54 2026 by rpki-client