Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
File: Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft (raw, json)
Hash identifier: 8ijma9l8evCp7iyGADYmAtAtgH/ir5ox1k3AGpTmOPU=
Subject key identifier: 28:08:46:F0:8B:FA:7F:F5:1C:78:96:16:62:3A:3D:BA:1B:CF:8E:23
Authority key identifier: 52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
Certificate issuer: /CN=521d2c07c28ac7b726a825d3693afe2397209de6
Certificate serial: 019D996206E18AFCE42DA8973AB123E37AF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 03:00:31 +0000
Manifest this update: Fri 17 Apr 2026 03:00:31 +0000
Manifest next update: Sat 18 Apr 2026 03:00:31 +0000
Files and hashes: 1: Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl (hash: R854LXnoScMjRisyGCXlsL9HBwpA2AK5fRERvSJ53Cs=)
2: pxKFkqc9aiCNK5hGdZE8P6_v8l8.roa (hash: UleN7udW9nm6GoIks0+gA75pmdznZCROwYpJMoJdnLI=)
3: rI_3cqL3-KdjQJLD5JNVYZ0PC7I.roa (hash: IMvnqVI7Pxn9M/xoV7ucEgQIFBZmeqaGx6nvvxRV2JI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:06:e1:8a:fc:e4:2d:a8:97:3a:b1:23:e3:7a:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=521d2c07c28ac7b726a825d3693afe2397209de6
Validity
Not Before: Apr 17 03:00:31 2026 GMT
Not After : Apr 18 03:00:31 2026 GMT
Subject: CN=280846f08bfa7ff51c789616623a3dba1bcf8e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b2:fc:73:2a:a4:51:dc:94:46:22:6a:12:0a:
c1:dc:15:8a:b7:46:63:bc:f3:1b:f5:8c:c4:de:60:
0a:a4:02:b2:a5:54:ee:20:ac:84:d2:b8:23:ad:b9:
e9:3a:e6:e9:41:d6:ba:46:05:b7:a4:2c:68:d0:cd:
57:ae:ef:49:74:3c:bb:55:27:61:66:15:27:eb:43:
54:ca:77:93:ae:13:97:bd:bc:ef:74:8b:75:83:de:
dc:9f:3e:09:28:df:8f:36:9e:38:09:e5:a7:42:5e:
4d:af:00:fe:b1:f1:24:b3:5f:16:0a:05:7b:d3:ef:
24:77:c9:96:d2:09:71:19:1e:87:b2:9a:bd:1e:52:
d9:70:16:88:a3:62:41:8a:42:df:49:64:d4:25:9f:
6c:54:42:03:06:ca:2a:65:40:84:66:f8:59:20:59:
99:5a:0e:91:2d:91:a4:f9:c9:cf:72:c7:ec:10:a5:
6f:30:08:88:1d:21:b8:9a:09:1a:bb:76:58:70:5f:
fe:db:40:1c:70:a5:9c:8c:b0:38:34:d5:e9:4f:11:
cd:07:eb:f1:81:ca:24:ac:88:b4:b0:be:c2:ae:36:
45:38:26:f9:9c:2b:e0:d1:c9:70:e2:18:d0:81:8f:
7f:2a:2d:61:a1:ee:fa:15:a8:83:de:56:df:eb:6f:
f4:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:08:46:F0:8B:FA:7F:F5:1C:78:96:16:62:3A:3D:BA:1B:CF:8E:23
X509v3 Authority Key Identifier:
keyid:52:1D:2C:07:C2:8A:C7:B7:26:A8:25:D3:69:3A:FE:23:97:20:9D:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uh0sB8KKx7cmqCXTaTr-I5cgneY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/17ac67-2d5f-439a-8ff9-cacfb67bff9d/1/Uh0sB8KKx7cmqCXTaTr-I5cgneY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bc:68:42:6a:01:18:df:2b:c2:f0:a5:46:67:34:c1:af:45:
48:91:86:7d:eb:e2:b0:f3:11:6c:ad:2a:b7:85:70:29:28:c9:
28:b6:bb:98:fc:c5:68:5e:bd:85:2e:aa:8a:ee:c7:66:e2:76:
c6:8e:49:b0:c3:5f:ae:9a:16:af:6f:64:1b:95:58:55:2b:5f:
d0:c4:ed:28:66:4d:5a:b2:f3:3e:d6:99:b2:a4:a0:02:1e:c3:
69:66:ed:02:cb:0f:f3:ad:49:b8:ae:ca:83:39:2f:91:b1:d6:
d7:03:6b:2a:e6:0f:29:62:dc:46:8f:57:a1:04:59:f8:69:08:
71:cb:e4:e6:23:92:4f:f2:44:69:b8:ba:2c:51:3b:4b:e6:8e:
c9:68:a9:32:4c:28:6f:2b:08:d1:ba:66:0d:0a:29:6d:03:94:
e4:03:2c:71:6b:1e:71:dd:21:ac:70:2c:5f:12:af:dd:4d:43:
1e:ce:fa:5f:78:46:d7:73:b2:c8:4f:69:06:d1:37:d1:70:61:
71:84:c2:fc:53:ba:45:17:25:6c:58:5f:c8:ad:43:14:03:65:
ef:f6:fb:6b:58:14:1f:5a:a5:44:a2:48:3b:1f:76:4b:eb:8e:
35:44:09:67:58:be:87:2d:c7:26:54:7c:56:d8:dc:d1:de:ff:
f6:b0:66:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:15:09 2026 by rpki-client