Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
File: uP5lGLdAqxQFS-d0iZKLuffa8O4.mft (raw, json)
Hash identifier: 8MImDOxCraPgQfwB+FyqfzrjA4BxTf6UM8unm2DdbGM=
Subject key identifier: 8C:9A:38:40:18:7E:83:2E:A2:0B:1C:5B:F8:D9:EC:4D:7E:00:80:65
Authority key identifier: B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
Certificate issuer: /CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Certificate serial: 019D9B1A020FF6C2B349AE5A423190983596
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
Manifest number: F2
Signing time: Fri 17 Apr 2026 11:01:06 +0000
Manifest this update: Fri 17 Apr 2026 11:01:06 +0000
Manifest next update: Sat 18 Apr 2026 11:01:06 +0000
Files and hashes: 1: dHcfbZH7Z1zN39zAGSaPQDZCQeY.roa (hash: cqmuHZPjL4XCoT6u5gjSCm4ZP/CSi/q+3ENIMNnmOs4=)
2: uP5lGLdAqxQFS-d0iZKLuffa8O4.crl (hash: Ytlmje5RCggtvP56WSBpBNsBvh/UEE/7YK0Mg864oK0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:1a:02:0f:f6:c2:b3:49:ae:5a:42:31:90:98:35:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fe6518b740ab14054be77489928bb9f7daf0ee
Validity
Not Before: Apr 17 11:01:06 2026 GMT
Not After : Apr 18 11:01:06 2026 GMT
Subject: CN=8c9a3840187e832ea20b1c5bf8d9ec4d7e008065
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ae:8c:c7:b2:38:f9:fb:f2:7d:d2:43:82:d9:
ef:95:58:a3:23:46:74:46:3e:08:81:1d:43:b4:af:
79:7b:84:12:ff:c0:b7:61:24:77:c6:f4:5d:c1:1a:
df:94:12:e1:2c:99:81:6d:c8:f3:f4:9f:c1:17:5e:
f9:f0:a6:dc:e0:51:b7:fd:a2:0d:13:4a:71:4d:f4:
07:c7:c1:51:97:72:56:ba:59:b3:b5:f0:06:78:e3:
ad:2a:62:c7:57:7c:75:06:a9:82:85:af:5c:9f:13:
71:28:6b:f6:26:b0:10:84:cb:55:e0:c5:e0:99:2b:
08:c1:b4:27:e7:21:12:92:4e:b0:52:3c:cd:fb:71:
bc:ab:a8:a6:43:69:71:06:15:ce:63:c3:fe:14:4c:
92:c1:0c:a7:f0:ba:71:47:41:00:03:2d:6c:97:ee:
2c:c5:fb:e8:2f:15:82:13:4a:ee:9a:05:21:07:10:
39:8c:09:b3:e4:e4:9a:a5:52:1d:83:f2:f8:80:29:
22:fb:f3:33:bd:82:8c:99:9d:05:3d:38:f3:fa:23:
27:fe:56:9b:5b:73:78:5e:17:c3:9e:39:b2:13:c9:
93:42:35:84:b0:54:9d:41:ec:86:10:75:56:3d:61:
42:1b:d5:0b:3c:f6:c2:25:bb:d1:6d:85:bd:5c:a8:
9c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:9A:38:40:18:7E:83:2E:A2:0B:1C:5B:F8:D9:EC:4D:7E:00:80:65
X509v3 Authority Key Identifier:
keyid:B8:FE:65:18:B7:40:AB:14:05:4B:E7:74:89:92:8B:B9:F7:DA:F0:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uP5lGLdAqxQFS-d0iZKLuffa8O4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8969e7-ca4f-4e31-afb2-47383dc8cd0e/1/uP5lGLdAqxQFS-d0iZKLuffa8O4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:11:98:06:7c:37:59:74:f1:70:39:ec:d1:8d:6e:a9:35:01:
76:31:aa:71:28:bc:dc:5e:fc:95:87:94:df:fc:00:fb:00:2b:
5a:55:cd:51:3d:76:a9:1e:c3:9c:97:34:c7:92:cc:27:f9:9f:
03:fc:af:37:56:04:65:05:7a:a8:4d:cf:aa:dc:89:23:05:bf:
be:87:7f:66:07:77:21:dd:b9:9d:00:13:bf:ba:6c:47:47:27:
18:3c:b5:2a:7d:f4:87:bb:dc:7e:76:1d:01:e9:59:1e:93:24:
b3:5e:aa:be:dc:6d:f9:33:b4:35:71:f4:b2:b7:d7:52:38:3b:
fc:45:4c:17:bb:e2:ff:3f:d6:39:b3:25:8f:af:c3:a2:de:bf:
49:10:09:6b:8a:f1:a6:09:59:de:a1:a3:89:68:b4:ac:fa:57:
2c:fa:3a:26:93:c2:76:38:24:ea:60:68:91:7b:34:26:c5:db:
7c:bd:b4:11:42:09:60:08:61:9a:3f:17:fb:3c:3f:9e:56:c6:
fe:d7:9b:cc:8c:ef:c3:5a:d9:2d:e7:8c:b2:2a:8c:4c:1b:0b:
6d:37:c0:40:3c:23:5a:8f:ab:be:70:6d:54:f1:be:9d:98:b0:
06:1b:0e:bf:a2:db:8b:f9:02:cd:e1:7a:27:ff:1a:59:68:86:
d0:6c:c0:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:54:16 2026 by rpki-client