Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
File: uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft (raw, json)
Hash identifier: PGeuS2pdI90hbuDYskLGEGpo/jYOvfZVwyKBxZEkdFs=
Subject key identifier: 2C:9E:29:8A:24:7C:0F:EE:AC:81:06:B6:A9:F1:67:8D:3E:8A:53:17
Authority key identifier: B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
Certificate issuer: /CN=b9930359b5469112e6e2bfae8595b05485551d37
Certificate serial: 019D9A3E646DB70A2478308615B6DED7F435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
Manifest number: 058F
Signing time: Fri 17 Apr 2026 07:01:13 +0000
Manifest this update: Fri 17 Apr 2026 07:01:13 +0000
Manifest next update: Sat 18 Apr 2026 07:01:13 +0000
Files and hashes: 1: q9QiwiBtUXaeGzcn9qnTTXCRaYI.roa (hash: /RSQuO4wSBepnb5WctoxBJfzvDfZfmxsmBSRIpoN6ic=)
2: uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl (hash: ip8UfOd9tWoEmn8q/M23EUjtBX9G9i/Rwumjvn4WCCY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:64:6d:b7:0a:24:78:30:86:15:b6:de:d7:f4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9930359b5469112e6e2bfae8595b05485551d37
Validity
Not Before: Apr 17 07:01:13 2026 GMT
Not After : Apr 18 07:01:13 2026 GMT
Subject: CN=2c9e298a247c0feeac8106b6a9f1678d3e8a5317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:3b:0c:28:1a:22:94:06:f9:ec:55:95:1e:69:
0d:80:55:85:21:0b:cf:12:6c:b1:1f:8f:8d:c8:86:
1c:7a:bd:80:8c:f7:27:a6:8c:8f:ce:ed:98:0c:ec:
60:61:9b:a2:18:f9:0b:ed:e7:2b:09:d4:79:c0:ac:
33:51:d7:22:14:a5:e6:bc:b9:bf:d6:0b:25:3a:29:
32:3b:2e:5a:e4:9a:46:de:03:67:de:a2:3d:a8:a1:
e3:64:a7:28:09:b1:a2:3f:a9:49:84:c2:fe:46:b6:
94:a7:b5:46:00:6b:4a:e9:a2:f1:8f:40:4f:e3:98:
ac:fa:f2:b8:b9:f8:a3:6a:66:64:61:4b:a7:19:bb:
60:2c:ee:90:53:7f:a9:05:3a:df:68:cb:a8:c9:45:
a5:70:22:40:2b:5c:6b:6b:ae:6d:4a:34:a0:ac:95:
ce:b4:d1:47:42:fa:a7:c1:19:57:c6:0e:a7:1c:22:
5a:f3:36:36:85:9f:5f:ce:78:17:78:b7:02:c3:24:
b2:ef:c2:c7:6a:9a:aa:9b:d8:ee:e2:1e:63:d2:53:
67:e7:63:79:00:9b:f4:18:3e:9c:eb:92:49:3d:f2:
a8:60:e8:73:98:2f:63:93:7c:d4:f7:e2:60:d9:80:
e1:91:c2:5f:f1:95:a2:d4:ec:42:35:7b:2b:e3:f9:
f8:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:9E:29:8A:24:7C:0F:EE:AC:81:06:B6:A9:F1:67:8D:3E:8A:53:17
X509v3 Authority Key Identifier:
keyid:B9:93:03:59:B5:46:91:12:E6:E2:BF:AE:85:95:B0:54:85:55:1D:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZMDWbVGkRLm4r-uhZWwVIVVHTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/152ee7-8d7a-4e11-b592-be5f129ea81a/1/uZMDWbVGkRLm4r-uhZWwVIVVHTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:98:47:06:90:cb:ad:b9:a1:2b:01:06:b3:53:4f:c8:73:be:
85:36:f7:83:8e:a7:cc:8c:07:18:f1:25:4a:bd:c1:b6:19:a6:
2e:c2:48:74:5c:07:fa:75:11:c1:19:e4:83:9b:96:fd:c7:54:
b4:da:2c:22:c5:0e:24:12:ce:21:b2:56:4e:13:da:74:8a:ac:
57:37:0f:a3:89:ff:60:f0:db:13:8b:aa:ee:fc:2a:18:12:e7:
90:93:d0:6d:03:d3:d8:1f:0a:5b:e0:e3:84:ab:8c:a0:bf:58:
d5:64:f7:c6:2a:7f:2a:ea:2a:2d:ea:b5:1a:14:4e:4e:3d:70:
7c:d4:66:d4:f9:45:0c:23:42:26:f9:48:cb:66:03:03:33:2f:
cd:0b:f5:56:c4:41:3a:1d:1a:c8:db:f5:ec:74:54:90:09:e6:
ed:11:e5:1e:da:ad:82:df:e2:f9:1d:8c:91:4f:dd:ff:7a:56:
9a:b9:f1:9f:d3:21:fd:33:b3:fc:fa:b9:b4:ef:2f:21:ad:95:
40:21:da:a3:7a:bc:38:ec:39:ce:ba:d6:85:02:80:05:88:51:
19:f1:19:5d:73:b7:32:43:35:8f:6c:0e:d4:e7:a0:5b:0d:4c:
bf:44:ee:14:e6:30:2f:a0:a7:46:73:e2:53:3c:3f:06:96:1c:
03:9e:c7:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:37:57 2026 by rpki-client