Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
File: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft (raw, json)
Hash identifier: 3Yw3jXQ3KaLfj0FvIFV2E/5zDizqd4LNIBlplWPTAKQ=
Subject key identifier: 16:E6:B5:A1:D5:6F:E1:0C:3D:A1:93:F3:BE:E9:BC:1A:F1:80:1A:D4
Authority key identifier: 50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
Certificate issuer: /CN=50480549481968d43406127653f780abbf9a117b
Certificate serial: 019DA30A336E99382FEF4E32C4919B161F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
Manifest number: 1611
Signing time: Sun 19 Apr 2026 00:00:47 +0000
Manifest this update: Sun 19 Apr 2026 00:00:47 +0000
Manifest next update: Mon 20 Apr 2026 00:00:47 +0000
Files and hashes: 1: 4vRrFfHEC3GgT1183FGac5Crjjs.roa (hash: ZrwSZSbeJqZyB/UsX8E/gauKcYuf9yaAKmeIWSckNBg=)
2: UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl (hash: wYPza+u4UiS1X1jwqkBSXl+QKuvzRQ7fMk36UGVZMx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:33:6e:99:38:2f:ef:4e:32:c4:91:9b:16:1f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50480549481968d43406127653f780abbf9a117b
Validity
Not Before: Apr 19 00:00:47 2026 GMT
Not After : Apr 20 00:00:47 2026 GMT
Subject: CN=16e6b5a1d56fe10c3da193f3bee9bc1af1801ad4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:7e:0c:24:47:ec:09:40:2a:e1:bb:6b:28:ad:
62:9d:30:fe:38:85:6a:d5:62:68:59:22:47:d5:fd:
60:bb:fc:4b:da:06:ef:c1:6d:f1:9e:c7:ea:88:aa:
6e:60:d2:86:63:40:fa:28:9c:a4:1f:a0:4b:6c:3e:
85:89:d1:63:a4:fb:ef:b0:a0:cf:f1:1b:68:a6:c4:
39:a3:e6:c4:e0:09:b8:7f:3f:c7:71:2e:12:46:83:
c8:44:e5:e1:43:d1:23:58:08:9f:2a:37:f6:45:97:
78:08:c0:e7:55:4d:5d:0e:8b:04:73:e8:3a:c5:b8:
0c:b5:5d:13:f5:77:7b:86:05:28:2a:bc:37:6e:e6:
5f:ef:01:f2:3c:34:d4:56:1b:8c:1c:fc:c2:b9:8d:
c4:c1:42:0f:06:b9:af:7c:23:8f:03:06:73:23:88:
7f:6d:4b:c2:52:e2:28:26:93:42:1c:ea:4b:bd:7b:
3b:4e:10:df:6f:de:77:e8:ab:cf:bc:bb:54:fe:d8:
bc:82:08:49:78:05:00:f3:1a:93:48:30:a4:0a:96:
70:a0:43:d6:fb:96:5a:f9:ea:ed:77:57:1f:ea:14:
54:b6:cc:10:e8:69:63:bb:e8:85:82:62:8b:76:f2:
29:bf:54:1a:5f:0c:f4:6f:3b:77:63:1e:12:cd:80:
00:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E6:B5:A1:D5:6F:E1:0C:3D:A1:93:F3:BE:E9:BC:1A:F1:80:1A:D4
X509v3 Authority Key Identifier:
keyid:50:48:05:49:48:19:68:D4:34:06:12:76:53:F7:80:AB:BF:9A:11:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/d38767-2fc5-4c50-a27f-7429b22772c3/1/UEgFSUgZaNQ0BhJ2U_eAq7-aEXs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:3c:c2:64:24:c1:8f:ea:4d:a9:81:69:b9:c4:8b:84:d1:f2:
c5:86:97:dd:fd:34:1b:1a:53:45:a8:5c:97:5b:60:b4:32:eb:
93:c1:05:70:c1:8e:f8:53:0e:af:17:39:ce:8d:95:d3:19:c7:
a1:62:99:bd:ee:45:01:81:26:d9:55:d9:17:ff:b0:62:b3:41:
dc:40:b4:e5:e1:9b:b1:51:ec:30:db:4a:74:51:b5:ba:0e:10:
0a:38:4b:96:c6:aa:b3:3f:a8:a6:a8:90:47:5b:b9:65:90:f6:
7d:4e:d5:cf:88:e0:4f:8f:44:55:6f:3c:2b:e1:7e:7b:7f:14:
16:4b:8f:3d:46:82:dd:d1:43:13:af:69:78:08:cf:8a:71:a3:
80:92:5a:ee:d6:54:0b:f5:81:dd:b9:6d:71:1a:fe:70:c7:83:
bd:5a:c5:ed:fe:e5:e7:43:1a:ea:71:db:d0:a6:cb:24:f1:e4:
5d:98:e1:55:ce:18:32:b4:56:15:3c:87:cd:35:46:f1:6e:9a:
37:ca:93:2f:2e:a7:46:34:7c:51:bd:d7:06:a6:88:d4:c4:a2:
a5:00:e9:4c:99:69:33:8a:43:93:51:04:e9:26:bd:9f:48:c4:
06:be:a1:da:fa:9d:fb:1e:82:31:55:f4:a7:e8:f9:3e:3e:84:
f2:94:b0:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:37 2026 by rpki-client