Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
File: uas2E5RoPk8kOXz8jyPqssaCjeo.mft (raw, json)
Hash identifier: voemRU8EjlcnQiwajiwGQbfzfhfg5kIiLd5B25G6J+8=
Subject key identifier: F9:E4:41:17:8C:FF:28:2A:A3:E4:3A:D4:12:B2:4A:2B:A8:33:60:D1
Authority key identifier: B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
Certificate issuer: /CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Certificate serial: 019DA3E6E31251155A474B6D2CA8C95A5E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
Manifest number: 0F16
Signing time: Sun 19 Apr 2026 04:01:50 +0000
Manifest this update: Sun 19 Apr 2026 04:01:50 +0000
Manifest next update: Mon 20 Apr 2026 04:01:50 +0000
Files and hashes: 1: Exhf5yRzqRczvafQwCdzoLdTFoI.roa (hash: AMX3X4u+X7xjtP47ENkIYAXtvU9TYPmq9SdHmShneE0=)
2: HeSZlksbTLA8N88AjDTrmX2uk88.roa (hash: MfWlXQd6/+y+QIEgFdqX3cMg9aLFaxN2h3g3GICOFJI=)
3: uas2E5RoPk8kOXz8jyPqssaCjeo.crl (hash: NhMoYJmoNxwGkAp6roR7yzcttjIfi82VbOjE6+dLEd8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:e3:12:51:15:5a:47:4b:6d:2c:a8:c9:5a:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9ab361394683e4f24397cfc8f23eab2c6828dea
Validity
Not Before: Apr 19 04:01:50 2026 GMT
Not After : Apr 20 04:01:50 2026 GMT
Subject: CN=f9e441178cff282aa3e43ad412b24a2ba83360d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d0:42:ae:0e:73:b7:d2:08:a3:98:e1:5e:59:
2b:1c:20:c9:b0:a1:62:13:5e:c9:cb:7a:42:9f:2b:
b2:96:ed:3f:e4:79:ce:68:4e:c5:47:5b:7d:d4:e1:
c3:ab:81:03:fa:bd:f4:be:8c:f6:be:29:0e:cb:23:
54:d6:0a:ba:5c:28:08:ca:cc:ec:16:1d:fc:13:bc:
0b:e3:03:61:d4:d9:85:1d:3e:e7:52:33:84:7b:4c:
1f:83:4b:3a:9f:30:6a:45:96:25:a5:55:b6:81:fe:
07:c6:5e:e8:0c:56:61:8f:d2:af:64:25:27:46:a0:
f3:aa:92:2f:e7:fd:3e:80:7d:6b:65:31:ec:3e:0c:
30:a9:62:e9:6e:2b:30:f3:ff:cf:3e:71:46:7f:9a:
24:07:a0:b8:39:4c:ec:30:ea:b8:b7:57:18:67:62:
6b:96:20:39:0c:8c:21:3d:ea:13:57:b9:88:1c:24:
b7:5d:03:58:bf:c2:4f:97:a5:62:54:88:8b:70:ed:
28:65:ca:36:99:64:97:33:70:99:35:21:c0:14:4a:
01:45:9e:8f:b3:4f:45:a9:41:70:43:19:ae:84:86:
2a:3e:63:86:0a:41:10:8c:c7:db:dd:43:94:f7:93:
ca:39:fc:ec:15:e2:a0:87:17:b5:84:63:ea:18:18:
7a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:E4:41:17:8C:FF:28:2A:A3:E4:3A:D4:12:B2:4A:2B:A8:33:60:D1
X509v3 Authority Key Identifier:
keyid:B9:AB:36:13:94:68:3E:4F:24:39:7C:FC:8F:23:EA:B2:C6:82:8D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uas2E5RoPk8kOXz8jyPqssaCjeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/360ef9-ec20-4e13-9647-ddfeb424adf5/1/uas2E5RoPk8kOXz8jyPqssaCjeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:77:57:dd:77:68:a6:f8:ff:16:49:9e:18:df:67:5a:31:6e:
3b:27:5d:74:ea:cc:0d:0f:72:d1:9e:84:65:31:1a:c1:ac:3c:
9e:4c:79:11:90:c5:4f:2d:f8:dd:e1:73:98:d6:31:e9:63:28:
ff:ce:2f:04:f6:e9:72:17:bb:b3:c2:6b:8b:5e:5a:4d:fe:48:
c8:81:8f:ab:4b:20:56:fd:bb:47:e9:35:50:da:92:3e:01:d2:
c0:36:74:23:39:b7:ca:b8:ad:9e:6b:88:0d:55:63:59:b5:e4:
61:9d:c2:2e:5d:74:8e:3b:87:f1:5a:7f:a1:37:b9:55:a3:27:
53:b0:ef:68:3e:78:9c:d3:f3:3a:87:5a:78:41:1f:84:be:d8:
5f:ae:cb:a1:3f:58:e9:c5:11:62:3b:13:8b:51:6f:07:4a:87:
ea:96:fc:7f:86:d6:a5:b8:a6:0a:02:d8:a5:db:45:6d:10:83:
96:6b:f0:86:c5:c8:a6:15:7e:14:7c:82:b1:6d:38:e0:e6:9b:
34:19:bc:94:ac:7c:57:90:21:ad:2c:75:ba:6c:9a:25:60:42:
7e:76:17:17:27:c4:51:65:ee:25:ee:73:c6:f8:20:d0:0a:dd:
f8:d2:4b:61:7e:b0:ae:c2:bf:2d:ec:cd:fb:08:44:b6:d0:b0:
5d:1a:bf:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:57 2026 by rpki-client