Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
File: uY0fbjNqfIE1GUG8C53qOdfXZNs.mft (raw, json)
Hash identifier: QMjH9o+X43G1qAGTRmryMdqT66RGzIRxyUXX2V9L7Gg=
Subject key identifier: 13:BD:16:F3:5A:E4:DF:E0:67:71:C1:07:6C:53:3F:31:62:AD:B6:A2
Authority key identifier: B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
Certificate issuer: /CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Certificate serial: 019D98F4C9B7EB145882CEEAE05EE6D8E391
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
Manifest number: 1609
Signing time: Fri 17 Apr 2026 01:01:12 +0000
Manifest this update: Fri 17 Apr 2026 01:01:12 +0000
Manifest next update: Sat 18 Apr 2026 01:01:12 +0000
Files and hashes: 1: 6feLhGZNxoXnjxOWltLLEWo3w_w.roa (hash: WsluKnulotDxPx8j4niJ1mddplF8Z7pdwFLIc7RHFSg=)
2: jIkBln67tBEqFrddInS7FiZiLBA.roa (hash: XeN/N3RSEi8zGMX3oXezfBvkd+PC1ufTYKGx8KmK4ps=)
3: uY0fbjNqfIE1GUG8C53qOdfXZNs.crl (hash: uOhsq04AkJJbCa+w3vvC7hbroUOJuoc7T4jtibiNOKo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:c9:b7:eb:14:58:82:ce:ea:e0:5e:e6:d8:e3:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b98d1f6e336a7c81351941bc0b9dea39d7d764db
Validity
Not Before: Apr 17 01:01:12 2026 GMT
Not After : Apr 18 01:01:12 2026 GMT
Subject: CN=13bd16f35ae4dfe06771c1076c533f3162adb6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:af:b9:ae:4e:e1:4e:52:b8:84:ac:20:7c:0d:
69:8b:69:7d:a1:08:d8:ed:18:b3:a5:19:76:67:27:
07:85:35:f0:75:17:9c:bc:2c:2f:39:28:16:6f:69:
d1:cd:3b:54:2b:dc:c6:a6:6f:4c:d1:2b:59:6d:d2:
3b:84:d8:ad:49:73:9b:bd:8d:c4:3e:df:80:63:26:
8d:03:a8:63:b3:5d:83:44:bc:10:15:2f:82:8e:a8:
f3:67:d7:f5:84:d5:c4:30:27:d3:e6:90:6a:e8:17:
03:b9:26:2f:11:a8:4f:eb:c3:24:49:19:86:d6:b7:
da:a9:a0:74:79:66:9c:63:fd:dd:62:83:77:a2:6b:
af:7b:7a:fa:23:c8:7e:1c:1e:76:61:e5:89:31:5c:
ea:68:bf:3a:56:92:8f:73:00:38:27:f1:68:35:51:
c9:79:0c:49:f8:9e:a8:f2:47:05:c5:ee:70:62:6f:
df:da:77:b1:c1:9f:72:40:3f:f5:ae:6c:4c:c4:2e:
4c:9d:44:7a:98:e2:93:de:84:cb:a9:d4:f5:60:80:
bd:8b:6e:71:d2:60:12:05:54:27:3b:b1:5e:1d:10:
bf:af:14:57:02:73:bf:be:a7:84:35:45:f3:31:fd:
5d:8d:b5:05:c7:20:9d:75:23:1b:c9:9f:7d:05:aa:
66:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BD:16:F3:5A:E4:DF:E0:67:71:C1:07:6C:53:3F:31:62:AD:B6:A2
X509v3 Authority Key Identifier:
keyid:B9:8D:1F:6E:33:6A:7C:81:35:19:41:BC:0B:9D:EA:39:D7:D7:64:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uY0fbjNqfIE1GUG8C53qOdfXZNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/9dac2f-301e-406d-b8d0-03857ef5b387/1/uY0fbjNqfIE1GUG8C53qOdfXZNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9a:46:0e:81:a7:2c:6a:9e:44:15:19:db:13:5f:ec:45:58:
5f:a6:68:69:27:94:59:b9:3c:bd:a3:46:66:59:e3:e7:24:e7:
62:b9:4e:7c:61:2e:db:2f:bc:0e:14:b8:0e:26:dc:92:83:ea:
49:ca:62:31:0b:c2:42:b9:a6:5f:01:75:e9:3f:85:33:f5:67:
fa:cf:48:e8:61:4f:01:eb:42:00:76:7e:8c:30:08:8a:20:21:
48:80:2d:53:ee:e5:0f:af:44:78:76:e9:e7:5a:e6:09:fa:95:
19:fc:6a:22:b2:a1:87:dd:ea:44:c4:b9:77:9c:99:e5:55:dc:
d6:fa:18:78:01:9a:44:0a:37:99:05:59:4d:f7:80:c0:f1:aa:
7b:bf:ad:bc:99:6e:a5:eb:25:13:ca:37:c2:8f:20:20:9f:dd:
34:ea:1d:8b:ad:2d:58:2e:16:ed:3a:d0:58:f9:17:4f:df:e1:
2a:8e:81:1c:98:a0:e9:3a:a4:d9:b5:02:da:89:24:f5:d8:40:
ad:85:6e:e7:2e:51:c3:11:a1:c0:56:36:98:02:f3:f5:ec:2d:
db:ca:f8:c7:99:99:d5:35:85:f1:b6:95:d9:2a:28:0b:9f:75:
62:65:b5:af:8b:eb:66:d5:5a:0c:74:cc:e6:a9:05:52:b2:f0:
92:58:58:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:04:49 2026 by rpki-client