Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
File: ufdp1EM7dwTfcD0WRbf-qO-_km4.mft (raw, json)
Hash identifier: 9pKyUWqa4uG/3SRKvdyUfmednxyxbzwFvS4uXfWQlNA=
Subject key identifier: BD:04:98:9A:05:B7:EA:38:78:54:B8:E9:F1:07:EB:76:AC:B3:97:BA
Authority key identifier: B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
Certificate issuer: /CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Certificate serial: 019D9850677F73A02C8B36AC1A4F1AF4DF15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:01:39 +0000
Manifest this update: Thu 16 Apr 2026 22:01:39 +0000
Manifest next update: Fri 17 Apr 2026 22:01:39 +0000
Files and hashes: 1: F9fOaYPqb4gxUHFeWSAIKisXq8Q.roa (hash: PHpRDYyGYnqjTmjt3ejWEskYaaVTFLnfQhZUlCEYSpg=)
2: ufdp1EM7dwTfcD0WRbf-qO-_km4.crl (hash: 6hLbxd36xyjMfcnF4gY1aNDnEe2u/bM7HqhB/7jhmrM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:67:7f:73:a0:2c:8b:36:ac:1a:4f:1a:f4:df:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9f769d4433b7704df703d1645b7fea8efbf926e
Validity
Not Before: Apr 16 22:01:39 2026 GMT
Not After : Apr 17 22:01:39 2026 GMT
Subject: CN=bd04989a05b7ea387854b8e9f107eb76acb397ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:d4:6f:87:7f:80:5c:37:81:fa:7b:b2:2a:
fa:cc:85:ae:6d:48:fd:64:22:6c:27:f5:9b:30:bf:
72:d5:f0:3c:75:f1:83:40:cb:08:9a:2d:b4:ba:49:
61:2f:f5:9d:69:b8:a0:99:1f:91:11:77:2c:20:ba:
fe:1b:0f:ae:f9:ae:98:08:a0:40:c0:b2:f6:47:d2:
c9:da:6e:35:e3:e3:2a:8a:95:79:ff:c4:36:36:57:
a4:43:f6:cb:d4:74:89:94:be:15:f3:43:d6:c0:1f:
cc:9f:5c:63:44:b6:d2:f9:a1:f3:05:13:f1:c7:ce:
bb:60:8a:b9:7c:51:a8:85:56:42:70:b9:55:7d:70:
7b:5b:ba:6b:ee:7d:a4:18:8d:b3:3c:8c:cc:54:e5:
42:4d:1f:17:07:d4:31:5c:53:66:8b:5d:dd:36:cb:
fa:59:be:f5:2a:ab:51:fd:c9:60:bd:4a:8f:70:14:
2d:ef:b8:27:14:7d:ef:aa:f1:78:c7:68:a8:d3:a2:
3b:e3:32:d8:d8:7c:be:52:57:8a:aa:71:79:7b:c6:
4c:44:ed:d1:09:06:f6:b1:25:b5:ce:86:c8:2e:4f:
0f:c9:b8:1b:00:87:49:cb:7f:fd:af:97:19:1b:42:
e8:88:60:a1:3c:cc:65:91:f9:f3:d5:77:5b:fa:55:
2b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:04:98:9A:05:B7:EA:38:78:54:B8:E9:F1:07:EB:76:AC:B3:97:BA
X509v3 Authority Key Identifier:
keyid:B9:F7:69:D4:43:3B:77:04:DF:70:3D:16:45:B7:FE:A8:EF:BF:92:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ufdp1EM7dwTfcD0WRbf-qO-_km4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/4dfbd4-8ed7-45f2-950d-3aeb7cde036c/1/ufdp1EM7dwTfcD0WRbf-qO-_km4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:a2:39:03:f0:0f:d4:00:3d:fc:44:e4:c9:8c:45:04:14:cb:
b0:8c:16:7f:8a:b7:97:05:69:ee:8d:1a:f4:28:22:64:1e:4c:
ca:c8:a4:35:e9:a8:f9:5c:20:78:86:78:52:58:e9:d6:96:e2:
09:e5:57:9c:50:76:0e:5b:be:43:12:95:ee:bf:2b:4e:c5:e5:
c9:5a:72:d1:e7:0f:0f:64:5e:cf:d5:5c:6d:33:e5:54:16:8a:
bc:22:4f:53:2c:9a:79:55:e1:01:a6:78:f9:e4:5d:46:c3:43:
17:ce:14:c1:3d:d9:10:0d:06:c4:06:de:59:6b:3e:80:4c:46:
5f:b6:0e:4e:a6:a7:fe:97:7e:16:f0:b2:65:39:1d:60:a9:8b:
35:43:d0:d2:ea:3c:c9:dd:e1:0b:86:29:da:6d:1d:ec:57:a0:
04:82:d7:11:8f:35:c8:55:f5:f3:38:6e:71:9e:ae:35:7a:ca:
76:80:f4:c8:c9:d1:64:b2:7f:6a:78:d2:d0:d9:0f:e9:92:b8:
09:9e:11:b6:59:95:ed:80:e0:4f:d8:86:d2:e1:ce:56:1d:79:
26:a0:72:22:ee:4e:eb:3a:c8:a5:06:d3:b3:8b:78:e4:9f:4f:
78:b2:82:15:d6:bd:77:bd:59:2b:63:7d:1f:27:74:75:c5:70:
38:be:e9:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:39 2026 by rpki-client