Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
File: UZhWegOeXM4j7pN0CW7tV7u6KY4.mft (raw, json)
Hash identifier: QkquHXyQJKCidoPxs+YvRk/CGtMJtYssSXL0SeG8jbg=
Subject key identifier: 2B:27:4E:20:58:A2:77:A9:18:DE:3F:8F:B8:AF:F8:2B:3B:33:0C:8B
Authority key identifier: 51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
Certificate issuer: /CN=5198567a039e5cce23ee9374096eed57bbba298e
Certificate serial: 019D9AE2EA66B8EB35F302D1530BA4134C61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
Manifest number: 18BC
Signing time: Fri 17 Apr 2026 10:00:55 +0000
Manifest this update: Fri 17 Apr 2026 10:00:55 +0000
Manifest next update: Sat 18 Apr 2026 10:00:55 +0000
Files and hashes: 1: UZhWegOeXM4j7pN0CW7tV7u6KY4.crl (hash: JWYHLj9YrZKM5fi4DMIJF3lrrtNMqkcEqiqec1t5oec=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:ea:66:b8:eb:35:f3:02:d1:53:0b:a4:13:4c:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5198567a039e5cce23ee9374096eed57bbba298e
Validity
Not Before: Apr 17 10:00:55 2026 GMT
Not After : Apr 18 10:00:55 2026 GMT
Subject: CN=2b274e2058a277a918de3f8fb8aff82b3b330c8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:90:61:cb:b3:fe:35:93:81:49:b9:af:37:5a:
f3:75:b5:88:d2:9b:d2:55:8b:2a:06:7e:9d:33:fd:
84:8f:34:dc:65:58:84:f4:b1:e0:57:03:24:b2:ad:
f9:cd:1f:3a:cf:c8:84:4b:0d:b9:50:43:2f:ef:22:
a8:0f:f2:8b:c2:25:dc:44:e3:d1:db:3f:a7:48:d3:
ac:7d:3f:a9:1a:3b:de:38:94:88:1b:e4:eb:7e:54:
36:5b:ec:0d:a0:b7:af:cd:d9:e4:9f:5d:97:17:11:
88:44:8e:d3:1c:a4:95:a4:d6:36:47:55:78:aa:fa:
95:56:5d:99:c5:f3:dd:e9:51:69:e9:ec:11:ef:15:
40:55:36:1f:38:00:df:2f:6a:3c:56:a7:71:38:c5:
b3:7d:a9:cf:19:23:ae:a7:ac:7b:4c:41:52:a9:c9:
b8:29:6b:22:32:74:5c:11:53:5a:71:b6:a7:6f:73:
37:5a:03:35:8e:6a:31:71:2a:40:b6:4f:82:70:80:
9e:2e:5b:5e:4b:91:a3:2a:83:9f:df:01:f9:ed:59:
95:4e:02:30:3a:0b:e9:66:bf:94:05:fc:be:c8:3d:
53:23:dd:1c:06:94:fe:d1:3d:55:73:ab:d9:d3:67:
89:2e:69:19:a7:b6:1d:99:a1:43:ef:d9:e9:1f:3c:
7c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:27:4E:20:58:A2:77:A9:18:DE:3F:8F:B8:AF:F8:2B:3B:33:0C:8B
X509v3 Authority Key Identifier:
keyid:51:98:56:7A:03:9E:5C:CE:23:EE:93:74:09:6E:ED:57:BB:BA:29:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UZhWegOeXM4j7pN0CW7tV7u6KY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6679a9-093f-4bc3-a3d4-88aa81486783/1/UZhWegOeXM4j7pN0CW7tV7u6KY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:d2:7b:32:30:17:c2:c2:47:af:4e:ab:b0:7b:67:97:3d:
dc:a6:5d:4d:08:a3:a8:35:9b:da:43:cb:f7:75:9b:89:4a:9a:
78:24:f9:23:27:f7:6c:89:7b:f2:13:c5:e9:42:c6:a0:08:d2:
50:ab:01:e7:23:d9:0d:23:4b:71:0a:64:0d:97:73:89:35:3b:
98:22:48:1e:a1:59:7f:aa:53:57:3a:67:4a:3e:28:69:63:bf:
17:51:a0:3f:df:15:ea:98:67:c2:b8:a3:df:20:4f:52:23:75:
6f:3c:22:92:8a:99:4c:1b:2a:16:b8:d0:96:a3:a0:c2:46:27:
26:fb:76:9d:83:bf:60:47:64:2c:7f:f0:29:53:b9:9f:be:ee:
ea:ab:c1:81:6e:a4:a2:0b:a9:3f:1d:5b:c1:ee:ec:78:e8:b6:
74:cd:3c:df:dd:15:97:3f:89:24:22:03:b1:ae:54:2e:90:49:
6e:50:9b:6b:f2:e9:22:5f:33:5a:2e:b4:ea:61:74:3a:2c:ff:
ff:5a:60:50:5b:f1:52:e2:7c:07:c2:8e:64:34:5e:8c:21:59:
16:be:07:47:74:42:31:ae:2b:50:c9:eb:6e:92:c7:a6:52:88:
4b:1e:18:fa:18:27:08:fa:7b:9d:a3:b7:c8:0f:c5:36:8a:49:
01:37:a4:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:56 2026 by rpki-client