Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
File: UnFDjiPOkl5mwlmYEiG1toOi8I8.mft (raw, json)
Hash identifier: AjKApXLBISu0uo4oaG1zmiQscHXbRVzSaoUDqyMisZY=
Subject key identifier: 10:44:32:87:FD:24:AB:EA:B1:52:3D:EB:77:78:B7:44:C2:7D:A1:08
Authority key identifier: 52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
Certificate issuer: /CN=5271438e23ce925e66c259981221b5b683a2f08f
Certificate serial: 019D99D025375F9AB2D9F0C5F238406575E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
Manifest number: 0E26
Signing time: Fri 17 Apr 2026 05:00:48 +0000
Manifest this update: Fri 17 Apr 2026 05:00:48 +0000
Manifest next update: Sat 18 Apr 2026 05:00:48 +0000
Files and hashes: 1: UnFDjiPOkl5mwlmYEiG1toOi8I8.crl (hash: OAPIIhQhTDb1v86K2IG6J0vejugBnf/mJqztUkZ6aj0=)
2: o-iJD6qSKBcMDFIpOFvRxAvVB68.roa (hash: h1nVK1njqo5/GGkuCAVn8ZtCHKNzAogi9mgaa3QkB+Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:25:37:5f:9a:b2:d9:f0:c5:f2:38:40:65:75:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5271438e23ce925e66c259981221b5b683a2f08f
Validity
Not Before: Apr 17 05:00:48 2026 GMT
Not After : Apr 18 05:00:48 2026 GMT
Subject: CN=10443287fd24abeab1523deb7778b744c27da108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:99:e7:e3:46:b3:7f:df:c5:c9:ed:a2:a9:90:
00:6b:4d:48:d7:1a:75:57:2d:e5:9a:f4:cf:b7:d1:
a9:b5:58:3a:d0:8b:5b:a5:1f:86:98:b6:94:e6:1d:
b3:7a:b1:2f:3b:1f:58:b1:7d:5b:57:56:7d:2b:53:
28:a5:81:9b:d6:72:ab:14:d6:f7:12:bb:65:97:80:
29:99:fc:21:eb:88:80:ab:81:8e:7f:95:3e:4d:14:
4e:dc:5c:84:c3:9f:50:62:df:97:28:9b:a1:9b:ea:
69:52:45:7c:ac:6b:51:db:07:0b:7f:68:9c:1f:ba:
7b:fb:ec:01:17:f1:31:aa:ed:df:a6:a3:8d:ae:74:
12:8e:21:ce:68:0c:df:8a:35:5c:9e:cb:a9:ea:3a:
c3:65:e1:01:1f:ad:ec:c6:e3:40:1c:61:e3:7f:11:
38:1c:43:b5:dd:9b:86:4e:a2:07:c1:93:45:e7:30:
33:78:e8:ed:5c:6d:51:c5:ed:91:48:f0:5d:c4:26:
20:21:f1:ad:5c:24:90:a5:c0:d9:c4:ae:47:4b:94:
b3:14:ce:74:27:d8:97:8f:bf:46:cc:6e:6d:d2:a5:
97:4a:17:31:b7:1c:75:03:bb:a9:3e:bf:50:ca:c5:
12:10:5d:a7:b1:09:7c:92:70:56:bd:d3:3f:92:1e:
14:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:44:32:87:FD:24:AB:EA:B1:52:3D:EB:77:78:B7:44:C2:7D:A1:08
X509v3 Authority Key Identifier:
keyid:52:71:43:8E:23:CE:92:5E:66:C2:59:98:12:21:B5:B6:83:A2:F0:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnFDjiPOkl5mwlmYEiG1toOi8I8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/806917-af6b-4e1e-8773-9ad035474114/1/UnFDjiPOkl5mwlmYEiG1toOi8I8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:f8:f0:1d:68:ab:11:f2:72:42:b3:ec:a9:76:73:b0:aa:0c:
cc:bc:c8:fb:ea:5e:5b:51:a4:97:ea:c1:96:31:58:a3:e0:42:
17:8b:fe:8b:c3:04:6b:db:d1:98:85:73:5d:a6:ab:49:64:0e:
55:26:cd:6b:69:b4:ce:8b:e3:1a:e7:f6:dd:c2:43:87:c0:20:
2e:7a:0a:9f:47:31:f5:a8:68:11:ec:39:2f:f9:50:c0:c7:8d:
fb:c9:7f:97:c9:e5:23:14:d1:d7:a2:f9:87:11:33:cd:e8:b5:
61:7c:af:24:25:ed:70:7e:af:88:c8:65:b2:a6:12:2f:46:35:
35:ad:58:9c:dd:69:ea:1b:af:b4:60:f2:bc:55:12:f4:b7:c9:
d0:75:fa:52:9c:e2:13:1b:96:eb:f0:e9:58:27:b4:7e:39:fe:
fa:be:f1:7a:b9:a9:d9:43:1f:a8:a6:b8:1c:17:c5:ef:e5:e8:
fe:ba:57:d4:63:1d:1e:65:0e:65:91:ba:38:57:24:2b:84:41:
fd:c1:c0:fd:03:f2:c3:ee:ce:d1:26:87:d2:4f:b3:45:a2:bc:
84:fb:36:df:5c:b6:b4:2f:5f:b3:98:b4:8a:ca:05:62:da:66:
93:87:90:f5:c0:c7:73:1a:1a:de:08:e1:89:e3:47:d1:ca:20:
3e:b3:5a:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:08:40 2026 by rpki-client