Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
File: UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft (raw, json)
Hash identifier: mpqIQrTvNDE8HRXUPaaTuFZS7x47QT7adRkhX+0qtPY=
Subject key identifier: DB:68:98:BF:6C:21:0F:57:5E:59:54:26:4E:C4:ED:43:E6:DC:A2:54
Authority key identifier: 52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
Certificate issuer: /CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Certificate serial: 019D9998F0EC1D3B2A64DC13AA5D0633F826
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
Manifest number: 1611
Signing time: Fri 17 Apr 2026 04:00:30 +0000
Manifest this update: Fri 17 Apr 2026 04:00:30 +0000
Manifest next update: Sat 18 Apr 2026 04:00:30 +0000
Files and hashes: 1: FOg3Av7qAneoLCl9RE4sk42f7HM.roa (hash: s+X5qOD9V08ETG17KaGYFEzqR9Vxxzzwy/ShTxoaD6o=)
2: UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl (hash: AjwkGjkmhMte8gt+GM6+VyxaU0XHdRNn0TDw1ZJE7wU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:f0:ec:1d:3b:2a:64:dc:13:aa:5d:06:33:f8:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=522107ed07b5ac0d8269d7229d9fd2ca0e32658b
Validity
Not Before: Apr 17 04:00:30 2026 GMT
Not After : Apr 18 04:00:30 2026 GMT
Subject: CN=db6898bf6c210f575e5954264ec4ed43e6dca254
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:5e:6b:c5:1a:c9:94:bb:e3:05:97:74:37:ed:
de:c8:46:e7:5d:4d:4c:3c:67:3a:f7:5e:1d:ef:29:
a0:52:41:b9:74:e9:66:c0:fe:67:7e:3c:77:30:99:
27:42:21:4d:47:b1:f4:db:3e:52:36:fc:f1:58:b0:
88:18:60:a3:28:70:c3:c2:63:05:f2:ca:5f:a9:0f:
74:f7:57:d0:1f:65:07:39:08:11:83:21:00:b3:f8:
ab:05:34:10:80:d3:de:c6:d5:af:6f:22:ea:46:11:
b2:ce:06:e2:fe:a4:23:21:0a:57:5a:e8:cd:62:cd:
c0:0d:f5:b5:0b:22:9f:91:05:ec:c1:c4:93:50:92:
20:57:30:87:23:5c:dc:cd:96:5d:64:04:48:aa:81:
74:67:15:bd:95:d1:e6:9e:97:9e:74:ba:ba:b2:bd:
e2:04:91:f9:8a:e2:0f:22:09:6b:8a:67:70:3a:0d:
95:ca:12:d8:24:d7:f0:2e:86:e5:77:7b:a8:2d:e4:
df:d4:ec:72:a4:b6:7a:f0:5d:72:27:dd:f4:a2:24:
c0:33:53:2f:98:d8:52:97:39:b5:5b:83:2f:9c:07:
7f:51:5f:cf:3b:88:32:12:4f:76:b0:d0:6d:9f:37:
ca:17:0d:12:17:a5:de:6e:c8:73:37:3e:74:e3:d7:
b0:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:68:98:BF:6C:21:0F:57:5E:59:54:26:4E:C4:ED:43:E6:DC:A2:54
X509v3 Authority Key Identifier:
keyid:52:21:07:ED:07:B5:AC:0D:82:69:D7:22:9D:9F:D2:CA:0E:32:65:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiEH7Qe1rA2CadcinZ_Syg4yZYs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/02c568-91ee-485d-99a2-59bce319c1cb/1/UiEH7Qe1rA2CadcinZ_Syg4yZYs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:65:45:79:ad:9a:3b:ea:9c:96:f9:89:a1:f1:03:0c:31:21:
59:eb:13:a8:ff:22:c7:02:81:4c:60:fc:12:92:c9:bc:ee:3f:
9b:7f:93:2f:b6:cc:00:eb:fb:02:df:da:2f:f3:ba:3f:37:2c:
0e:d9:fe:bf:66:81:6e:73:a2:26:9e:db:36:c5:bc:a5:37:7a:
ce:9e:aa:e7:2f:a9:93:1c:43:c8:58:e6:df:3f:0d:e5:e0:38:
3f:f8:a6:9a:e7:d4:33:4f:31:fd:2c:de:ee:3e:eb:0f:32:87:
31:b7:3e:e8:83:d0:7f:d9:27:61:55:65:1a:8c:72:a2:66:00:
d0:e0:f5:01:31:ae:0a:20:e6:8f:9e:bc:c5:87:41:d2:6f:05:
bb:58:fc:78:9c:ea:47:6b:df:4c:79:8c:95:eb:09:0f:e0:59:
a8:93:73:3b:8e:a2:3a:63:5b:3e:a0:08:8f:d9:7e:a0:ed:85:
98:00:0b:d2:fa:f4:04:b3:39:94:d1:f5:ca:43:32:41:2d:39:
c9:5e:84:b9:c1:24:3f:fa:5f:5e:9e:12:22:2d:9d:1a:80:7f:
12:5e:33:6e:0e:4c:cb:b3:1c:c0:8a:1a:59:57:5c:1d:72:38:
db:50:da:b2:0a:f3:8a:fd:46:dd:25:e8:68:8f:08:34:58:ae:
83:3f:e3:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:38:56 2026 by rpki-client