Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
File: u1KMEmrtDX9aBpUOssIDNIaFahU.mft (raw, json)
Hash identifier: s4XOLlgszJynoUYyOHwKujFoHn+XBLWGfMH+TIRPf+4=
Subject key identifier: 30:E9:34:D6:98:F7:4F:41:B7:A5:F7:4E:01:CF:E5:02:E7:94:83:3E
Authority key identifier: BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
Certificate issuer: /CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Certificate serial: 019DA52F75E8A0DE557B952C47F26CA60690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
Manifest number: 11DE
Signing time: Sun 19 Apr 2026 10:00:44 +0000
Manifest this update: Sun 19 Apr 2026 10:00:44 +0000
Manifest next update: Mon 20 Apr 2026 10:00:44 +0000
Files and hashes: 1: qM0Ao1npKGHo4sRaXkAZ4PKUkao.roa (hash: xm3mTURCaqDC11Ly2xfoF8pGLGSgKdJlsYcgaLK7YyQ=)
2: u1KMEmrtDX9aBpUOssIDNIaFahU.crl (hash: ayTZEDKMu1NPdBTi9QA9d+1KSeCf8lzrO6S2sElGleM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:75:e8:a0:de:55:7b:95:2c:47:f2:6c:a6:06:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb528c126aed0d7f5a06950eb2c2033486856a15
Validity
Not Before: Apr 19 10:00:44 2026 GMT
Not After : Apr 20 10:00:44 2026 GMT
Subject: CN=30e934d698f74f41b7a5f74e01cfe502e794833e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:bd:9d:c2:f2:95:5e:bf:5d:cd:b1:e3:76:4a:
8c:68:cb:b9:00:64:e5:1d:e7:70:89:81:0e:31:88:
24:bf:aa:c8:97:b2:ad:c5:77:5d:bb:91:a4:d7:a1:
8a:d0:e2:bf:37:ac:42:cb:24:b6:93:aa:6c:28:b1:
f1:d4:1a:15:f1:5b:3a:e6:d4:6b:b5:f2:dd:5d:73:
ed:d4:b4:0c:9c:99:31:ea:8a:2e:fd:b5:30:f0:ff:
3b:d5:27:50:0c:b3:db:6b:8d:e9:b9:00:50:f5:69:
83:ed:b2:4b:12:8d:6f:26:2d:ec:b1:61:32:30:93:
4c:b6:1e:60:54:55:9c:6a:d8:46:5b:e6:30:c8:95:
ba:1a:f5:87:fa:91:6f:7a:01:8d:95:34:68:37:34:
b2:57:48:5e:e9:97:8b:0a:bc:30:85:69:66:b0:bc:
81:42:ad:b9:d9:cc:8f:3e:5b:75:c2:91:7d:ea:55:
d1:8d:6a:e9:06:a8:d7:f4:e5:e9:98:6a:a3:9a:c2:
52:c4:c6:0c:c0:70:b8:df:fd:31:db:1f:51:32:8f:
a5:5f:9d:c1:25:73:46:42:d7:12:c5:ec:32:76:19:
c7:de:f8:56:9a:53:93:ed:dd:d7:2b:d2:63:40:9d:
73:c3:2e:d4:8f:db:de:28:52:f9:a9:3b:3e:a7:b9:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E9:34:D6:98:F7:4F:41:B7:A5:F7:4E:01:CF:E5:02:E7:94:83:3E
X509v3 Authority Key Identifier:
keyid:BB:52:8C:12:6A:ED:0D:7F:5A:06:95:0E:B2:C2:03:34:86:85:6A:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u1KMEmrtDX9aBpUOssIDNIaFahU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/73e1e0-3d46-428c-ab3b-2159efee6a07/1/u1KMEmrtDX9aBpUOssIDNIaFahU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:53:e6:20:81:50:ad:3e:c0:24:eb:1c:ab:64:98:72:b8:3d:
d5:20:44:28:4d:b3:4d:ce:da:5d:c7:66:dd:29:5c:67:96:ab:
b5:14:e2:26:fe:23:d6:8d:a5:82:d4:6d:b6:66:05:84:ed:60:
72:6d:77:ae:b9:f0:1f:5f:a8:55:96:93:09:f8:1e:61:ae:43:
a6:58:ac:f3:8f:9a:31:25:7e:36:f9:e1:e7:6a:5e:94:94:92:
96:19:87:6a:7a:fb:30:0d:db:15:a2:d7:fa:3f:a7:c8:d8:94:
31:70:50:3a:6f:73:1f:b6:78:a7:8f:d1:5e:b4:04:ef:c6:da:
d7:58:c8:4e:bb:14:31:d0:0d:3d:f7:2b:e6:74:fe:8f:3a:95:
15:eb:19:00:59:03:06:fa:75:d5:47:00:35:0f:a0:e8:37:5e:
ee:ba:f9:9c:d7:b9:a8:ac:54:36:ea:53:c4:ec:e5:85:43:4f:
33:ce:b9:19:52:23:4c:2c:e4:e1:58:d1:5d:3c:4b:ab:98:09:
d6:6d:41:45:9a:2e:21:bb:26:ef:1c:1d:05:83:6d:96:21:d1:
38:b4:74:b1:1e:78:e2:58:0b:f0:62:5f:d6:a9:8e:4d:35:3a:
c6:41:d0:7b:c2:07:cc:fd:14:57:ad:41:ac:e1:19:77:d3:46:
46:03:79:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:39:13 2026 by rpki-client