Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
File: U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft (raw, json)
Hash identifier: Vvj2VSWgimV0S3HnyChPxL9u/0GymQqZWo7t4HVpKUE=
Subject key identifier: 2C:57:83:A1:51:98:41:22:3A:F9:F1:34:B6:EA:1A:DC:FF:14:8C:86
Authority key identifier: 53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
Certificate issuer: /CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Certificate serial: 019D9C2D0C0049D87C434DF32A637D508E4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 16:01:30 +0000
Manifest this update: Fri 17 Apr 2026 16:01:30 +0000
Manifest next update: Sat 18 Apr 2026 16:01:30 +0000
Files and hashes: 1: I14lG_8KuHU0CqYJHc9FqXObhcQ.roa (hash: ZF+DnhO3hjJF0AK61h8lfYEMUXQ/Nib4VTQFMRZ8378=)
2: U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl (hash: cz8cr9R5IxfLZt+8OGJR02ecBOtRqWzjbvFe/ZV7oVQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2d:0c:00:49:d8:7c:43:4d:f3:2a:63:7d:50:8e:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5346c4d200fe5035c61b0c894b9454e72d27c91f
Validity
Not Before: Apr 17 16:01:30 2026 GMT
Not After : Apr 18 16:01:30 2026 GMT
Subject: CN=2c5783a1519841223af9f134b6ea1adcff148c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:94:26:77:c5:3f:f4:81:d0:37:65:df:3a:1f:
b9:3e:42:56:bb:9c:1e:97:ca:08:78:23:f9:ea:74:
46:8f:53:bd:44:5d:7b:44:7d:ae:95:b6:95:a2:ec:
19:3f:2f:98:34:52:88:3d:04:20:dc:1c:50:ac:00:
29:24:91:36:11:0a:ef:b3:de:a4:e7:32:f6:10:74:
e3:ca:37:03:7c:6d:7e:1d:f5:90:b0:03:63:10:91:
f0:49:85:e4:39:b4:a6:00:ca:15:fb:3b:be:8d:ec:
37:b2:89:5e:30:ca:f6:c3:e9:23:08:ed:bb:70:ef:
12:93:10:fa:c7:cd:63:2f:28:72:ab:58:3b:4d:78:
62:ac:f1:5d:2c:f0:0d:89:c0:da:29:8a:37:61:0b:
98:be:cb:86:60:09:95:7f:e6:7c:e3:62:81:52:01:
38:79:95:50:5e:54:90:17:f8:53:9d:e7:f6:b5:9c:
28:7e:06:1b:c5:11:84:bb:8f:d0:d8:d9:6e:65:94:
21:53:82:c1:90:dd:4f:01:f7:b1:1b:cd:b6:54:ff:
ff:ad:64:00:34:80:35:63:a4:bc:88:a6:44:86:37:
1a:07:88:65:cd:e2:6a:2b:e8:39:81:04:ba:4e:a1:
eb:48:71:7c:cc:ca:23:13:80:4c:10:0f:f7:ae:33:
a8:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:57:83:A1:51:98:41:22:3A:F9:F1:34:B6:EA:1A:DC:FF:14:8C:86
X509v3 Authority Key Identifier:
keyid:53:46:C4:D2:00:FE:50:35:C6:1B:0C:89:4B:94:54:E7:2D:27:C9:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0bE0gD-UDXGGwyJS5RU5y0nyR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/587a79-1b6c-4c2a-b139-24aab44f2539/1/U0bE0gD-UDXGGwyJS5RU5y0nyR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:e0:8e:ba:34:47:58:9f:61:b6:cb:e4:a0:3b:93:55:ca:ca:
d3:a0:5e:91:07:9c:41:cc:fd:17:cc:48:0d:ca:d6:33:39:b2:
30:68:d1:98:96:33:6b:bc:a8:de:03:e2:80:52:0d:c6:8e:df:
e1:f2:a4:de:72:a6:8f:2b:b9:35:51:87:53:cc:b7:67:53:1f:
84:11:71:07:e8:fc:54:4a:ad:a9:56:72:99:15:34:47:b2:05:
44:0e:a4:03:a3:ff:05:3c:e1:4b:16:4c:be:e2:bb:12:c0:43:
73:ed:ad:b0:e6:c3:75:14:70:5e:dc:06:cf:2c:19:22:a4:74:
9d:a2:bb:82:8c:33:78:02:bc:78:8e:8c:76:17:9f:45:05:aa:
30:a6:98:03:62:4c:97:c2:fe:7f:78:1d:4d:64:03:c2:0a:2b:
88:c6:a0:1d:28:6e:10:f1:e7:ba:a1:b6:8c:a6:a8:f6:46:9a:
74:d4:d7:76:06:0c:64:89:7b:16:87:bc:54:54:88:0c:3a:cf:
94:10:d1:da:59:72:42:7a:8c:10:58:95:f3:4f:ff:62:ad:87:
3e:c3:01:11:0e:9d:96:bc:9d:ae:46:7e:4a:30:ce:4e:fe:66:
63:6f:56:1c:24:d3:b1:a9:b8:32:c7:92:7e:b7:bd:93:c1:ca:
44:07:8f:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:26 2026 by rpki-client