Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: 0wLbvTRwRsDOFU3Lfp68e4/Tt4iQbtczJ/w+OWyy/lg=
Subject key identifier: F9:E7:59:FA:C0:20:31:CC:89:85:C4:1B:34:B9:7F:2C:FE:7F:7D:55
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019D98184A19BAD8FC6BDA48AD002E38E188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 18C0
Signing time: Thu 16 Apr 2026 21:00:21 +0000
Manifest this update: Thu 16 Apr 2026 21:00:21 +0000
Manifest next update: Fri 17 Apr 2026 21:00:21 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: rAruJUhZPNaCvuRO/uKt7TLHutgmgr0T/ABLrqbX1pE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:4a:19:ba:d8:fc:6b:da:48:ad:00:2e:38:e1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Apr 16 21:00:21 2026 GMT
Not After : Apr 17 21:00:21 2026 GMT
Subject: CN=f9e759fac02031cc8985c41b34b97f2cfe7f7d55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:32:f0:15:74:77:ec:0e:0b:cb:d5:e0:60:fd:
45:8c:a6:41:fe:7c:89:07:76:d7:4f:4e:52:e3:75:
d9:b8:a8:bd:54:48:36:fd:5f:1f:08:87:de:08:81:
8f:3f:4d:86:82:ca:dc:f7:02:a7:f3:e5:67:ec:43:
4d:f7:c1:30:e6:36:cf:c2:50:45:1c:c3:33:e9:7e:
18:e5:28:1d:b1:63:a4:84:c7:07:0f:53:9f:6f:e3:
2b:85:0a:a9:b0:b4:c4:1f:d1:9c:3a:18:ed:07:c0:
2f:53:e2:b7:bd:d8:2c:14:71:dd:20:01:d2:c1:ae:
2d:9a:28:3b:b2:99:90:b2:48:e0:c3:09:6c:f0:f1:
22:c6:66:d6:6d:9c:a0:86:a1:3e:c8:6c:1f:2e:4b:
5c:78:fd:ce:66:18:e9:45:cf:a3:1b:d6:4b:62:58:
b5:68:91:54:c4:40:e2:e1:ed:5f:15:15:fa:0e:c4:
25:f0:8a:32:76:ff:f8:29:4b:d9:fb:eb:b1:85:d6:
75:5e:8c:b4:a9:c5:68:49:5e:1d:6e:7e:47:8a:03:
8b:38:14:07:93:5f:63:4c:20:eb:a8:1c:74:1a:ea:
f9:c4:8e:6a:cc:fd:a5:f9:6e:ae:56:88:49:d0:8f:
cd:a1:76:fe:fb:00:be:63:00:71:9a:bb:1a:f5:0a:
e9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E7:59:FA:C0:20:31:CC:89:85:C4:1B:34:B9:7F:2C:FE:7F:7D:55
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e8:60:72:a7:63:bf:ec:06:d4:2e:92:23:63:aa:38:80:b3:
28:dd:88:4d:f6:cf:50:37:51:9f:a9:87:19:df:d1:52:6f:bb:
84:fb:fd:3e:77:46:0c:2a:f8:a5:4f:68:8b:ba:24:53:83:78:
92:4a:4a:5b:d4:4b:f4:2a:4f:24:5c:06:c7:eb:33:95:8f:4c:
b0:91:5a:57:ef:d8:3c:30:49:9e:f7:bc:45:f7:d6:a2:56:68:
e5:4b:2c:77:e5:16:b7:5e:55:fa:d0:1d:a0:08:57:61:f0:b0:
2e:85:5d:d1:9a:fb:a5:ef:e6:df:f7:b6:73:b9:67:2e:eb:84:
61:9e:92:7c:27:82:71:1c:88:0f:25:6f:0b:8b:d0:1b:62:9c:
a6:2e:3d:18:4b:f3:35:e9:93:b1:b1:11:3e:36:d3:89:85:05:
f7:48:f7:d2:34:a0:cc:c2:af:40:d8:c9:25:16:c3:5a:5d:fd:
a6:e1:d7:40:7d:21:f5:42:87:3a:61:5a:10:b1:38:a0:9a:3c:
0d:1e:c4:4a:11:be:cc:4a:50:d5:b0:4b:d6:31:42:0d:ad:9b:
1d:db:d4:1e:97:e9:14:8c:3e:1a:a6:88:66:78:37:86:d7:ad:
8c:00:ff:d7:80:2d:55:fe:00:b6:6c:7d:d0:9f:39:69:33:97:
21:9f:2e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:36:41 2026 by rpki-client