Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
File: xUUK-nPwuHpCACjCsqSMzg_pKwo.mft (raw, json)
Hash identifier: Ktbm8CMzARPy2eIgv9Udn98/iDg/hYoj5fIS/g3PBYA=
Subject key identifier: 54:1A:09:71:2D:AE:4F:29:52:2A:8E:B5:53:9A:56:7B:A1:17:FF:CA
Authority key identifier: C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
Certificate issuer: /CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Certificate serial: 019D9E88D92D7BDBB8EE949854A16EFEE8DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
Manifest number: 18C4
Signing time: Sat 18 Apr 2026 03:01:01 +0000
Manifest this update: Sat 18 Apr 2026 03:01:01 +0000
Manifest next update: Sun 19 Apr 2026 03:01:01 +0000
Files and hashes: 1: SU9PYRAM665DV-tMHEvPHcVEgsI.roa (hash: jeXeTXBC5h2fT2fI75NdT9H4uSbQgepZnNzAOw/Te8I=)
2: rXw-nLWuLOJA5VYfraArb8rhBxg.roa (hash: aX5SC+qo7NJeSmp0QxRgYljkusSGS9FEUNCHyn6SxQM=)
3: xUUK-nPwuHpCACjCsqSMzg_pKwo.crl (hash: 3cOBhWtxqoaSww0oUAylXXUiBeCeo1POvKZguFfTgws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:88:d9:2d:7b:db:b8:ee:94:98:54:a1:6e:fe:e8:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c5450afa73f0b87a420028c2b2a48cce0fe92b0a
Validity
Not Before: Apr 18 03:01:01 2026 GMT
Not After : Apr 19 03:01:01 2026 GMT
Subject: CN=541a09712dae4f29522a8eb5539a567ba117ffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:79:2f:f4:41:c9:4e:82:03:ed:b1:de:40:e3:
e5:53:75:27:be:a0:01:8d:9f:ad:18:28:a1:68:a2:
48:9e:c5:3f:52:ed:bb:3a:b4:95:20:03:24:af:b1:
70:ff:b3:ca:be:07:0a:37:e5:86:7b:32:39:90:79:
a9:f9:f5:ab:12:c5:e7:02:18:ad:86:1a:c2:fe:9f:
dd:34:88:a1:e6:2d:b5:88:ca:e1:c6:bd:6e:8f:5d:
ab:39:ff:f4:8f:5f:d9:ec:f5:ae:73:6b:8e:b9:b1:
7f:11:e5:dd:79:49:98:36:98:13:ae:98:69:7d:7e:
60:a6:1e:c9:be:34:ab:dc:ee:f3:40:4d:8c:aa:03:
2b:f3:24:11:f5:1c:8b:6e:b6:89:14:a1:f1:1f:83:
7d:98:c4:f1:93:02:08:ce:88:fd:50:92:1c:83:68:
58:9d:ae:af:f0:bc:5c:18:3f:d1:82:46:56:49:86:
aa:8e:4c:83:06:4d:b9:0b:51:65:d3:68:bf:53:68:
53:ff:d2:14:44:b5:20:0f:a9:c2:f9:ee:15:d5:b0:
ec:8d:99:97:ab:35:8c:2f:b0:48:67:53:ba:be:30:
1c:7a:44:09:f1:c6:9c:88:e5:d2:4a:94:39:47:11:
62:2e:20:f1:6b:ba:3d:95:c6:4e:f2:be:cb:cb:9a:
d5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:1A:09:71:2D:AE:4F:29:52:2A:8E:B5:53:9A:56:7B:A1:17:FF:CA
X509v3 Authority Key Identifier:
keyid:C5:45:0A:FA:73:F0:B8:7A:42:00:28:C2:B2:A4:8C:CE:0F:E9:2B:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xUUK-nPwuHpCACjCsqSMzg_pKwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/a2a6ad-b15f-4734-b59e-664a9926f333/1/xUUK-nPwuHpCACjCsqSMzg_pKwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:42:38:e7:5d:9f:2e:de:d7:af:f1:92:c0:fe:f0:d0:ad:39:
ba:27:45:68:10:c6:4a:81:49:e1:ba:6b:37:73:af:ba:44:58:
93:7e:18:78:2d:5c:ab:75:3c:a9:34:d8:69:07:e0:58:66:b9:
24:93:8d:80:a3:d5:6a:17:fd:9c:f0:a0:14:cb:0e:b4:b3:6e:
15:d3:7e:44:34:34:6e:f4:5c:64:1e:12:77:54:57:32:d4:4d:
c2:cd:77:d4:d0:b3:d8:99:9f:f8:08:c7:91:57:23:1a:87:37:
03:ed:e6:66:75:91:ef:4b:c5:54:12:c9:d8:06:36:b0:29:fe:
c8:c8:10:f0:0c:3f:f1:85:2f:41:e2:48:ea:e9:8b:5b:1b:95:
29:63:02:b2:b9:02:6e:f7:e9:41:91:a3:54:c5:42:30:11:1d:
44:3f:32:3a:62:0d:b7:fc:9d:5c:59:62:1e:be:88:a3:bb:32:
b8:c0:0b:81:ff:ad:0e:ff:bd:94:28:9d:25:53:c0:89:2e:cf:
50:34:f6:c7:0c:00:90:fd:44:55:50:f6:bd:67:8b:e7:1e:dc:
50:e7:6a:cf:2b:44:56:87:f7:b1:ec:94:d2:35:b0:3d:8c:0a:
fd:57:33:85:14:0a:ce:1d:e0:fa:be:58:c9:5e:25:b3:30:97:
d1:28:58:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:34:51 2026 by rpki-client