Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
File: u5tW2NluvLX8-H3i7CtSwZTM-fk.mft (raw, json)
Hash identifier: nN2nfqofPj1Qk45KT/R3A0uCQ4f4ZjRBy+f8xOb6nAo=
Subject key identifier: 54:0B:72:20:E9:29:71:CB:17:81:4D:26:62:60:FF:8E:50:FC:3D:92
Authority key identifier: BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
Certificate issuer: /CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Certificate serial: 019D999909C51A829F7000E90D5161CDC965
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
Manifest number: 18D7
Signing time: Fri 17 Apr 2026 04:00:36 +0000
Manifest this update: Fri 17 Apr 2026 04:00:36 +0000
Manifest next update: Sat 18 Apr 2026 04:00:36 +0000
Files and hashes: 1: GvsNXqyPm3O1muA1KhzUZIC7rvw.roa (hash: GH+TiXaBiyInStL5LqF861L8DM/DPBqkW/47ALTzmZE=)
2: OSKY092K7Rd69JqqbL4WMk5Xd4U.roa (hash: NVRC2Db3R3ftV/bNbwEakNLpneFf6ZR1jTLt2dsBXng=)
3: SztDQUTdgK2SUjFi9wkDzBiBMLc.roa (hash: a/GE3Z5i97PSSD8tZRN4CE8oTOTKNEOJuyhCdmF0QKE=)
4: u5tW2NluvLX8-H3i7CtSwZTM-fk.crl (hash: S1SWtJkrAEq1i2slMZIMCJFgJOBAacMhNeKsMPhRm0s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:09:c5:1a:82:9f:70:00:e9:0d:51:61:cd:c9:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb9b56d8d96ebcb5fcf87de2ec2b52c194ccf9f9
Validity
Not Before: Apr 17 04:00:36 2026 GMT
Not After : Apr 18 04:00:36 2026 GMT
Subject: CN=540b7220e92971cb17814d266260ff8e50fc3d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b8:f0:19:9c:8d:7d:5f:de:83:4a:36:91:ef:
7a:30:03:3d:3b:ff:78:fa:c7:bb:64:a2:4e:27:37:
5e:b3:1a:ec:64:2e:7b:75:98:4e:0c:f0:bf:e9:a1:
5f:d0:9c:71:f3:ec:71:ce:4f:43:92:d4:5c:32:80:
71:5f:f3:9e:16:4c:83:af:6a:41:d6:4e:ef:7e:07:
37:37:1b:d0:9b:70:b5:5a:e2:81:e9:d3:00:63:4a:
3f:a3:c9:94:89:60:f3:68:35:a0:7a:6e:f9:d6:5c:
7c:3c:fe:2b:e1:27:85:c1:74:ba:bd:9d:2d:b2:2a:
4e:13:e6:d8:e3:38:7c:8c:3c:14:ae:fd:b1:6a:ef:
b7:d7:63:fd:f0:bb:04:00:ea:1c:6c:e1:51:9c:0a:
90:a0:45:9f:62:7d:33:8e:1a:b4:41:88:7f:96:8f:
74:08:c6:96:41:12:b6:b7:01:37:9e:46:21:dc:20:
00:14:bb:44:88:3b:c0:04:11:2b:f7:34:a0:be:ec:
dd:a8:ee:07:f1:b2:be:f9:19:f6:3e:43:55:5f:d0:
64:e1:db:2f:54:d5:c4:24:bf:24:9b:b4:a8:35:35:
25:29:ab:5a:6a:62:8b:6e:17:16:6a:55:be:10:41:
0f:0d:44:46:e7:12:6d:a9:88:a6:09:d9:e5:32:78:
77:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:0B:72:20:E9:29:71:CB:17:81:4D:26:62:60:FF:8E:50:FC:3D:92
X509v3 Authority Key Identifier:
keyid:BB:9B:56:D8:D9:6E:BC:B5:FC:F8:7D:E2:EC:2B:52:C1:94:CC:F9:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u5tW2NluvLX8-H3i7CtSwZTM-fk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/8f3942-17f7-493c-bc6b-4f4fe803b015/1/u5tW2NluvLX8-H3i7CtSwZTM-fk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c3:c3:6f:87:58:05:68:ca:6e:bb:93:5d:9c:97:bd:2a:ca:46:
0b:a9:70:bf:b4:b1:0b:cd:06:9e:54:36:f4:98:41:71:df:1e:
91:34:a6:59:df:73:a5:fb:6e:18:7a:87:16:3e:b8:6d:97:bc:
95:60:44:a1:9b:8f:59:dd:20:d6:5f:28:83:a8:e6:ca:ce:1f:
33:1b:3d:4d:52:ab:80:c7:09:94:67:4b:06:d0:11:a0:9c:ba:
d9:8c:55:45:52:01:cc:36:ff:d3:73:0a:d3:7a:8f:d6:79:b5:
91:33:8f:a8:0f:fd:7b:f2:be:10:6d:74:5c:a8:5d:fc:ce:32:
30:12:12:1f:41:62:8c:47:83:53:89:84:71:06:cf:bb:da:c6:
1f:ac:40:bb:2c:99:a8:e7:08:1c:39:2b:99:d4:c4:54:7c:10:
2d:90:f5:b5:01:a5:2b:0a:76:64:3d:7a:4e:1a:a5:db:f8:9c:
20:0c:e6:8a:c6:96:0b:95:a9:4b:cb:28:75:da:dd:d0:a7:fe:
39:bc:07:56:32:40:df:06:51:d4:1a:22:0d:14:58:07:dc:cd:
15:ea:d7:1e:8e:76:c1:d6:2b:a1:fe:cd:47:b0:29:77:8f:99:
cb:cf:99:03:5a:2c:8c:54:e6:bd:d9:86:74:bb:71:79:85:3d:
a7:54:bf:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:11 2026 by rpki-client