Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File: UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier: zDGUknT2otHjYple5SUDXYTMZsva8znhgvNu4OsFho4=
Subject key identifier: 59:3A:1F:30:AE:D2:0D:4C:DA:15:7D:E6:DF:03:A9:83:A7:D7:95:48
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer: /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial: 019D9B198D67085870249AF949A2F32BF766
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number: 08
Signing time: Fri 17 Apr 2026 11:00:36 +0000
Manifest this update: Fri 17 Apr 2026 11:00:36 +0000
Manifest next update: Sat 18 Apr 2026 11:00:36 +0000
Files and hashes: 1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: QeKRmoB1XT4IHkIiR7C2xz7EYyBwnjPGxIm1IfD3QaE=)
2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:8d:67:08:58:70:24:9a:f9:49:a2:f3:2b:f7:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
Validity
Not Before: Apr 17 11:00:36 2026 GMT
Not After : Apr 18 11:00:36 2026 GMT
Subject: CN=593a1f30aed20d4cda157de6df03a983a7d79548
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:f7:45:8f:05:65:38:64:43:7f:13:70:ac:8f:
a2:5f:49:2c:27:c0:c9:67:99:69:da:54:86:28:62:
bc:63:61:cd:59:a6:1a:08:7a:c3:45:ee:60:c5:8e:
6a:09:db:cd:f1:3b:8e:bc:04:fa:6b:c8:ac:8b:b4:
6e:d5:a2:8a:6c:64:64:7e:a7:7a:dd:09:38:3f:0a:
e0:ae:69:07:a7:02:cd:93:d6:7b:c8:8e:f5:3e:57:
9c:bd:8e:7d:2e:7f:d2:1e:e6:9a:aa:49:59:82:c7:
a6:4e:ed:8b:1f:39:f7:68:b3:c6:31:e0:51:d6:e2:
34:50:f1:a3:fb:44:32:ee:ed:da:21:55:8d:27:8c:
3a:93:e1:f6:8b:15:c8:d5:5c:b3:4d:16:e3:e4:c0:
50:97:de:fb:2d:88:c8:05:99:50:bb:31:83:d9:a2:
e2:5b:c6:91:80:96:3e:d1:8e:9b:80:71:03:f3:d9:
1e:1c:11:a0:bd:91:72:81:e5:ed:ff:b4:07:7a:e9:
27:54:2a:84:48:39:6a:96:82:af:d8:b8:52:52:63:
c7:32:db:4e:19:68:71:b4:8f:5a:5b:cb:cb:65:7e:
da:4a:bd:fe:5a:c0:b9:1c:6d:65:c9:cf:c4:c6:0f:
43:e7:bb:7f:bb:6c:70:60:40:36:64:1e:fe:5c:75:
e1:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:3A:1F:30:AE:D2:0D:4C:DA:15:7D:E6:DF:03:A9:83:A7:D7:95:48
X509v3 Authority Key Identifier:
keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:d3:e1:89:e7:b5:51:d7:6e:cc:53:ba:4c:85:9a:af:18:37:
59:12:ed:3f:fc:4f:21:76:c2:90:c1:6a:88:f5:b2:f1:b8:04:
26:8f:fd:ff:bc:95:9e:10:3f:27:cd:4d:69:10:00:cb:61:48:
50:14:42:99:5f:b4:20:9d:0f:f5:78:62:9d:b4:50:da:e8:4a:
a9:65:44:8b:96:7b:92:15:a8:0a:db:4d:80:b1:f3:59:0c:b7:
31:40:4f:5d:c2:db:65:59:b5:b3:be:04:00:ac:4f:e8:5c:67:
da:55:c9:80:81:42:55:36:7b:4e:c2:9f:ec:5f:96:21:1c:af:
0b:be:ea:86:6b:3c:db:b6:ae:c3:2b:98:30:9c:a1:cb:c9:6f:
40:cc:27:f2:b6:a7:87:bc:81:84:fb:00:48:2b:9a:90:2e:27:
a8:95:ac:93:42:9e:98:d0:c0:bd:4f:19:1d:6a:94:5e:9b:7a:
63:ad:47:84:61:ae:38:0f:b6:73:45:51:22:b8:15:5a:bb:d8:
86:66:50:87:a8:16:b3:93:7f:4e:db:54:15:1c:b8:39:7a:64:
91:59:5c:a4:07:19:d8:06:4e:b7:57:86:2f:39:f8:9e:98:2f:
42:b1:17:70:d9:58:ce:2c:8a:fd:99:fc:ef:c2:ec:38:03:55:
11:06:bb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:51:32 2026 by rpki-client