Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
File: _U0cuqkAydq9Kh92gZih5VvPtQ8.mft (raw, json)
Hash identifier: nGBmhFDLZ4wJXh87MRUzpGcGnm9QULyCXlF7o0G9iXU=
Subject key identifier: 23:C6:06:0E:2F:5A:25:73:FC:EC:6B:A0:4F:8B:9E:5B:F3:9C:51:C9
Authority key identifier: FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
Certificate issuer: /CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Certificate serial: 019D9B8787F533C8E593E48AEB4F0126B708
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
Manifest number: 08A0
Signing time: Fri 17 Apr 2026 13:00:43 +0000
Manifest this update: Fri 17 Apr 2026 13:00:43 +0000
Manifest next update: Sat 18 Apr 2026 13:00:43 +0000
Files and hashes: 1: _U0cuqkAydq9Kh92gZih5VvPtQ8.crl (hash: uOj6zY0PDWeIooaJOlnQjLNfamIOFGOXQBoA0jXSBi4=)
2: w6o_mFdaC1iE9HreLWZZW7CeetE.roa (hash: ULCFerhBb+X2OLMdFVdyDjPTSfhj+p+sqvjNiKXZOJw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:87:f5:33:c8:e5:93:e4:8a:eb:4f:01:26:b7:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd4d1cbaa900c9dabd2a1f768198a1e55bcfb50f
Validity
Not Before: Apr 17 13:00:43 2026 GMT
Not After : Apr 18 13:00:43 2026 GMT
Subject: CN=23c6060e2f5a2573fcec6ba04f8b9e5bf39c51c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:da:cd:2f:45:af:7b:21:11:8a:ee:7e:17:fe:
ee:10:72:c8:6b:5a:2c:07:8c:74:3e:77:b1:24:d5:
ff:0d:fc:e6:7d:45:21:ba:9c:b2:d3:0f:fe:e5:24:
37:71:3f:5a:cc:dd:94:8f:23:3a:f5:99:46:78:44:
68:ce:85:c6:3a:8d:d1:94:da:c2:70:6e:d9:34:04:
39:18:c6:ce:db:0f:08:f2:11:e3:97:68:db:e9:7f:
17:af:7d:d0:20:6e:fe:ac:91:7c:1e:eb:ff:f0:53:
70:a8:52:69:1b:42:94:ea:5c:83:69:2a:31:74:f5:
82:b1:d2:49:57:fe:57:8d:c6:ea:97:77:27:e4:63:
d6:8f:96:68:91:f7:b5:f6:ae:b7:c7:68:2a:e7:63:
38:e3:92:a6:46:02:94:3e:04:5e:ba:05:b6:2a:5d:
ad:56:3f:8a:0e:f6:78:c1:8f:f5:25:e4:c0:13:a1:
39:d8:1b:de:07:46:df:c3:1c:a4:3b:11:da:b6:c0:
a2:76:78:b4:7e:bd:ab:ef:cd:5f:0c:55:6a:2c:aa:
09:a0:c0:07:5a:98:80:07:3b:f0:b6:d4:c9:d1:c4:
20:0b:93:80:0b:fb:ee:61:b8:3a:e1:39:27:b5:8c:
a5:03:db:63:29:30:2a:cd:b7:b9:73:90:6b:81:66:
40:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:C6:06:0E:2F:5A:25:73:FC:EC:6B:A0:4F:8B:9E:5B:F3:9C:51:C9
X509v3 Authority Key Identifier:
keyid:FD:4D:1C:BA:A9:00:C9:DA:BD:2A:1F:76:81:98:A1:E5:5B:CF:B5:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_U0cuqkAydq9Kh92gZih5VvPtQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/8903ca-fb67-4ee7-a23a-db7690e45765/1/_U0cuqkAydq9Kh92gZih5VvPtQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:96:47:28:53:4a:79:de:d5:38:56:41:c2:17:7b:e3:cb:b4:
91:98:83:51:00:a9:e5:bc:da:8e:f1:af:15:0b:91:4e:db:5a:
da:b3:4a:95:31:70:52:2a:33:27:b8:15:03:5b:76:d8:c4:08:
5b:ee:48:5b:20:48:92:33:68:08:c9:24:91:6a:f7:72:80:a0:
f7:64:52:3d:b3:23:5d:c5:01:af:e2:77:9e:93:af:29:b6:b2:
86:54:86:2b:ab:2e:d5:1d:ea:e4:30:82:15:18:b2:d4:b2:db:
0e:97:79:19:7b:ec:ca:34:2a:e9:ca:c6:0a:40:6d:f4:32:fa:
f0:3c:f1:56:45:1d:05:62:74:91:79:c8:e2:15:cc:d5:8f:3b:
e1:2d:e6:a5:81:bf:22:18:08:ec:ec:d5:29:cb:d4:9a:1f:c1:
c1:0f:ba:6a:4c:ed:5d:16:ac:cd:45:e1:e5:10:d2:0d:de:9c:
45:f0:85:a9:ed:02:3e:06:43:8f:76:0b:1a:10:d2:67:3c:93:
af:6c:7b:f9:d6:d8:2a:0e:58:b8:00:27:73:cc:74:57:d1:72:
84:49:c8:a7:aa:be:08:d9:7d:f9:32:e4:11:b8:35:de:5c:da:
3f:68:11:90:d1:11:f5:76:a9:21:d5:8c:aa:9a:dc:c1:7f:3a:
be:a2:d1:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:56 2026 by rpki-client