Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
File: UuQfSAbOSPw5iEI4Hy_74EspSBg.mft (raw, json)
Hash identifier: r52wUwEu+qJVHxgbjU32MUTtxsmq44hO7bAbGDYXPoY=
Subject key identifier: C1:D8:E0:9D:B3:48:1E:CB:57:50:77:11:BE:EA:6F:88:28:7D:0E:C6
Authority key identifier: 52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
Certificate issuer: /CN=52e41f4806ce48fc398842381f2ffbe04b294818
Certificate serial: 019D99D020777FB79A0F1E9C1062A1C99840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
Manifest number: 10C9
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: RkGch-hV1Hk4TzhQfRNcoDp8aQ4.roa (hash: ArSk8FNvQG5dEX1fm0nCfGPhiKh2s1aLul9gIYaDXF8=)
2: UuQfSAbOSPw5iEI4Hy_74EspSBg.crl (hash: pF1lOyWYlV5b/zlYEOBq2kjAFdQvQFMOYsi0SIItDeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:20:77:7f:b7:9a:0f:1e:9c:10:62:a1:c9:98:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e41f4806ce48fc398842381f2ffbe04b294818
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=c1d8e09db3481ecb57507711beea6f88287d0ec6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f8:e8:5d:8a:6a:89:f9:87:34:1f:6d:dd:f1:
44:cd:c5:70:9e:75:19:87:7a:b5:3f:78:22:84:05:
1f:c8:1a:47:31:d4:02:27:07:3c:85:3f:df:66:37:
64:1f:01:16:98:b4:4a:7a:37:b9:61:8e:5b:67:89:
04:4d:4d:7a:41:aa:9e:07:72:c4:0b:0b:58:c4:ec:
36:c1:26:a6:19:3e:54:82:c1:9f:06:af:a0:a3:90:
4e:f4:80:9a:63:1c:f7:57:3f:29:38:1f:af:a6:dd:
f5:f8:bf:4d:62:1a:d0:67:0e:79:96:84:46:73:2d:
11:1d:d4:ac:48:c4:53:84:b5:a4:ee:41:8e:8f:34:
4e:a7:4a:b5:48:d7:d7:55:53:0a:99:0d:21:71:d0:
b4:da:5c:0a:98:88:da:05:22:0b:cd:0d:cf:9b:ab:
98:85:1b:a8:81:e4:a1:42:cc:df:a9:86:f3:69:41:
23:03:a0:00:e7:11:ec:6f:60:c5:23:a6:4b:ee:7f:
08:2a:f9:73:a4:cf:23:e6:5c:ea:40:a6:fa:63:4b:
6d:15:9c:bc:1c:07:45:8f:f6:aa:af:64:83:14:66:
5b:03:76:0d:8d:8c:37:65:a6:8f:ad:85:20:60:d0:
d2:7c:29:18:87:8c:27:de:cd:01:78:3e:23:38:2c:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:D8:E0:9D:B3:48:1E:CB:57:50:77:11:BE:EA:6F:88:28:7D:0E:C6
X509v3 Authority Key Identifier:
keyid:52:E4:1F:48:06:CE:48:FC:39:88:42:38:1F:2F:FB:E0:4B:29:48:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuQfSAbOSPw5iEI4Hy_74EspSBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/0408f7-76a2-49c7-a022-deb44b869d19/1/UuQfSAbOSPw5iEI4Hy_74EspSBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3f:b8:01:e1:20:d9:ac:ac:e5:ae:85:d8:a8:e9:87:49:ce:
56:d5:a6:53:16:2f:7f:d0:c4:84:8c:26:4a:a2:cd:99:22:bd:
ff:2f:56:a4:cb:44:1c:df:3c:3f:45:9c:6b:0a:90:23:d0:a1:
58:1c:bd:17:4f:d0:91:36:4f:f5:a9:3f:1a:ea:64:2f:8c:ff:
57:fe:dd:d1:dc:27:98:33:27:b8:d6:e1:d2:b0:97:88:1c:c5:
e0:f9:d4:95:95:c4:11:ea:d5:b3:91:16:da:a9:ce:e9:02:3e:
6d:b1:f1:c4:05:76:28:d8:e9:92:73:f7:14:b8:0b:00:c8:4b:
fe:56:cb:0f:7a:82:e2:41:65:1b:46:9f:d8:07:8d:7a:75:43:
82:5d:0e:a8:b9:22:be:4e:af:62:30:70:09:1a:9f:17:68:da:
d9:09:6e:c7:6f:6e:a8:cb:e8:3a:40:ad:9d:e0:ef:2a:41:7a:
42:94:87:9a:c7:cc:aa:dc:8a:82:9e:93:c6:e2:a6:1b:5d:c6:
b5:aa:2b:6a:37:60:34:7a:a3:59:2c:d4:ba:8f:ac:ea:53:b4:
d0:2b:e2:0b:2e:4d:57:81:b4:80:10:aa:65:49:92:23:c3:34:
85:66:d6:4d:13:17:2f:b8:f9:61:f5:a9:14:ea:b1:48:3d:a3:
e4:a9:bb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:58:07 2026 by rpki-client