Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
File: uTDaIVGBhBRfbXYhtaE71UA1rIM.mft (raw, json)
Hash identifier: eDMFTHMBzQwrAc/ukBwU5m1H3qc1kQ/2p6EF+gMhgPw=
Subject key identifier: F1:CE:B0:9A:B5:08:B9:F4:E7:D1:40:07:2D:40:83:6E:07:EE:71:13
Authority key identifier: B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
Certificate issuer: /CN=b930da21518184145f6d7621b5a13bd54035ac83
Certificate serial: 019D9AAC3131AB501A40609C5DA6A5A4FBF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 09:01:09 +0000
Manifest this update: Fri 17 Apr 2026 09:01:09 +0000
Manifest next update: Sat 18 Apr 2026 09:01:09 +0000
Files and hashes: 1: Be8LblN_WsFoFsGu_QkIYbsLZMI.roa (hash: 4P/iotN6FmCSgpC5Liy5/5RLiOPYgv+FOHKRLXysJwc=)
2: OulomjatgU8B25dvFpqGURlBgcU.roa (hash: cQm9KuIWCCDGGQfAHCVTwYW3k+71Z7DZyQnTjaIdRSA=)
3: oRx6EJhqzaqgG0amciWL3M5KR-E.roa (hash: OiolxTV+7ThPd+hCMKxyTyX6crUMp94Obmmo4AolkqE=)
4: uTDaIVGBhBRfbXYhtaE71UA1rIM.crl (hash: MaG1qSB6p6BJpfpL87xivdZdCJNgr+LswmFzOwVbxtA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:31:31:ab:50:1a:40:60:9c:5d:a6:a5:a4:fb:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b930da21518184145f6d7621b5a13bd54035ac83
Validity
Not Before: Apr 17 09:01:09 2026 GMT
Not After : Apr 18 09:01:09 2026 GMT
Subject: CN=f1ceb09ab508b9f4e7d140072d40836e07ee7113
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:6b:70:00:38:ce:5f:77:cc:78:e2:5a:87:89:
44:66:93:9c:5f:88:04:58:ef:f8:2f:dc:8a:b6:2c:
ed:9b:d3:98:a1:b8:2b:0a:09:61:45:73:dd:45:cc:
66:c3:b4:e0:66:53:1e:ef:9f:46:01:82:7b:aa:b5:
ac:02:4f:7d:2b:fa:d8:6b:5c:39:30:42:a5:26:25:
f1:89:17:d7:af:c9:0d:df:ca:9a:9f:b0:db:4a:17:
93:28:b2:4b:c0:a9:00:b8:bf:4d:4a:67:58:46:c4:
9f:7a:ac:d7:82:ba:48:21:0d:a7:36:2c:eb:fc:df:
13:f7:42:95:dc:d0:76:99:c1:61:14:b1:56:dd:28:
6f:e5:19:2d:55:54:84:6e:9f:2d:c6:89:53:13:50:
9d:2d:e5:2e:62:c8:51:56:5a:ba:c3:39:01:c7:12:
f9:5a:f3:66:f5:91:94:e3:94:16:26:87:a7:87:4e:
31:6e:af:e3:4c:88:3b:f6:77:10:32:67:8a:fc:e1:
44:d0:93:b4:0e:f9:54:90:20:35:3e:e6:97:8a:29:
b6:22:8c:0e:89:23:c5:df:69:3b:36:c2:a3:25:d0:
44:ec:d2:ee:88:07:bb:09:d1:a9:31:95:80:3f:5f:
f2:77:9b:b9:bc:ab:3a:02:70:f9:ca:68:a2:47:5c:
6f:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:CE:B0:9A:B5:08:B9:F4:E7:D1:40:07:2D:40:83:6E:07:EE:71:13
X509v3 Authority Key Identifier:
keyid:B9:30:DA:21:51:81:84:14:5F:6D:76:21:B5:A1:3B:D5:40:35:AC:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTDaIVGBhBRfbXYhtaE71UA1rIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/470cda-d0ec-4323-ae9b-994af5c34402/1/uTDaIVGBhBRfbXYhtaE71UA1rIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:39:b3:cd:4d:56:e3:e0:24:ae:c5:aa:41:33:e6:6e:09:e0:
51:ca:a0:0c:bf:be:d7:d0:86:fc:6a:d5:0c:c1:19:1a:1d:6b:
54:86:93:d1:b5:12:98:02:b8:43:fa:48:2b:1d:12:ec:96:ed:
5d:65:c4:e1:f7:d8:54:b0:c8:ec:c4:c6:20:7e:28:b3:f5:e1:
8c:48:77:73:fa:41:1b:33:cc:aa:f4:8f:9e:03:eb:39:11:36:
a6:d6:fa:32:31:eb:c0:cd:aa:3f:fb:a9:08:d6:75:0c:47:95:
bd:a6:db:30:86:4b:62:c7:e9:8a:12:58:e1:ce:93:3c:17:a2:
d6:67:86:75:eb:2a:d6:58:80:6a:69:1c:c5:37:9c:51:72:57:
49:e5:6b:75:b8:bc:75:1b:00:96:6c:c8:00:38:c0:9d:95:83:
e7:6f:79:7b:49:9d:25:b8:74:92:69:4c:c0:1d:fa:00:f4:23:
ed:55:19:ed:cb:7e:70:2d:f6:8f:72:0f:dd:09:97:21:82:97:
82:6a:17:f7:ec:6b:8b:e2:db:25:e5:bc:e1:47:8c:79:05:ee:
42:9d:20:89:de:7e:53:93:05:ea:42:56:7d:51:52:f0:56:d5:
a2:ed:56:31:7b:ac:a5:cf:ab:fd:f1:a7:47:09:21:b1:1b:0c:
bf:66:5c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:09 2026 by rpki-client