Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
File: U6EliQpK8JJFWrx7tav-SM2FLAY.mft (raw, json)
Hash identifier: m896mbIr+A++LO6/XioA94rOzSDYgOGQ3vYRojDJsvc=
Subject key identifier: CF:67:6E:C2:9D:80:74:3B:BA:E6:0B:69:0D:04:CC:D0:B1:77:10:A4
Authority key identifier: 53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
Certificate issuer: /CN=53a125890a4af092455abc7bb5abfe48cd852c06
Certificate serial: 019DA453EB927046BBB002A8B949ACB20BE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
Manifest number: 0904
Signing time: Sun 19 Apr 2026 06:00:56 +0000
Manifest this update: Sun 19 Apr 2026 06:00:56 +0000
Manifest next update: Mon 20 Apr 2026 06:00:56 +0000
Files and hashes: 1: 8otHkib5_3i41JyAw70LeXUh0QU.roa (hash: 0qAK41CxT/RWAwJIryforayLl8dembnwnfhhCABuNu8=)
2: U6EliQpK8JJFWrx7tav-SM2FLAY.crl (hash: HtedXz2UbNfwKKNVIJMvKzVtkua5ryM5yj/D5C5XTpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:eb:92:70:46:bb:b0:02:a8:b9:49:ac:b2:0b:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a125890a4af092455abc7bb5abfe48cd852c06
Validity
Not Before: Apr 19 06:00:56 2026 GMT
Not After : Apr 20 06:00:56 2026 GMT
Subject: CN=cf676ec29d80743bbae60b690d04ccd0b17710a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:21:76:3c:fe:e4:07:f3:a2:e5:78:eb:c8:24:
90:2d:f8:02:9f:7b:c4:bd:58:68:6a:92:2f:d0:30:
81:f2:35:db:23:e7:fd:40:6c:55:a8:67:cd:79:19:
71:41:7b:88:6e:dd:29:db:2d:70:fe:f5:9e:b3:c1:
76:ff:17:a8:a3:1a:16:83:d6:82:11:06:90:6f:03:
7b:ed:33:ee:0d:23:fd:e2:0f:e2:ea:95:11:f1:43:
c0:1d:78:17:8f:26:d7:b3:fd:46:24:36:b8:8d:a0:
ff:d9:70:10:68:6f:6b:ac:fc:7f:40:ac:af:36:a8:
ce:77:f0:a1:29:d6:ef:e0:ff:84:dc:9b:94:7e:92:
e7:ac:2e:2b:ac:ba:8b:1c:fb:67:ac:e0:c9:1c:9d:
a0:ee:30:d2:29:85:2f:30:e7:d2:dd:9d:ea:06:06:
37:42:e3:cd:2d:89:4e:09:f1:6e:16:b9:3b:19:04:
dd:10:4c:28:5c:37:09:80:4f:7f:bc:52:62:84:f5:
21:6d:8a:b4:f2:87:d5:20:e4:29:d5:78:b5:6f:de:
d3:17:39:14:84:40:41:7e:73:4e:bc:a5:a2:64:c4:
3b:1f:e4:73:b5:ca:c6:d1:c6:fe:58:e3:89:aa:93:
16:ab:e2:49:fe:b0:b5:f0:0b:90:38:97:07:32:4f:
1c:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:67:6E:C2:9D:80:74:3B:BA:E6:0B:69:0D:04:CC:D0:B1:77:10:A4
X509v3 Authority Key Identifier:
keyid:53:A1:25:89:0A:4A:F0:92:45:5A:BC:7B:B5:AB:FE:48:CD:85:2C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6EliQpK8JJFWrx7tav-SM2FLAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/62ff71-c4f2-4929-8899-c38330cbd965/1/U6EliQpK8JJFWrx7tav-SM2FLAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:f1:f3:e6:5c:db:90:2c:d3:bd:38:69:e5:cd:b1:8b:86:9b:
fc:21:b4:25:6f:50:62:b7:2a:f6:5c:cc:cf:fa:04:95:77:49:
55:88:89:97:5d:55:2c:a6:63:ef:aa:96:53:2b:83:b0:81:b3:
3b:ae:6f:df:79:4b:73:e5:51:68:ee:a6:33:28:fd:ae:00:49:
b1:49:00:04:bc:6b:9f:8a:19:70:c3:9e:3a:a7:3f:30:6f:ca:
46:37:06:47:08:23:ea:76:12:16:db:12:46:50:a7:e2:ac:3b:
54:34:35:62:fb:b5:29:7d:29:ae:39:fd:74:f5:4e:1a:67:20:
3f:3a:bf:76:d5:00:54:a0:be:3d:cc:2f:9b:29:c6:90:43:cd:
dd:f6:67:b5:47:5b:45:e8:da:08:51:d6:2c:38:25:fe:22:bc:
f4:b5:6d:1f:1b:8f:7e:56:b3:9c:b7:0c:2a:15:4b:37:f7:8d:
1e:da:9a:88:53:40:a2:96:1c:10:5b:ed:fe:7d:85:53:dc:14:
ce:5d:e9:36:56:69:8e:f7:99:dc:14:d2:bd:3a:2b:cb:a1:b7:
f7:61:09:06:9a:a8:19:1c:45:df:5a:7d:ae:96:1a:18:0d:6f:
8c:20:8d:f9:b6:0c:b5:e4:29:7d:bf:c8:e6:d6:34:8c:6b:c2:
1b:b4:23:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:47 2026 by rpki-client