Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
File: UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft (raw, json)
Hash identifier: RDK/lJPQVuVY4VtxYFYcAhwVUf7Z+TIeRxJ872s/9Og=
Subject key identifier: 25:25:F5:7F:C3:20:BA:22:48:D1:C0:10:3D:54:D5:F8:F9:29:9A:AD
Authority key identifier: 51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
Certificate issuer: /CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Certificate serial: 019DA2D375DE5517C3A7F4FBFDFF5277CF61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
Manifest number: 18C7
Signing time: Sat 18 Apr 2026 23:01:00 +0000
Manifest this update: Sat 18 Apr 2026 23:01:00 +0000
Manifest next update: Sun 19 Apr 2026 23:01:00 +0000
Files and hashes: 1: 1C87-YoMU3E-DWxYQ0HoaaKkai4.roa (hash: D7kY1Dcux9TiG7PKR2Pb7es9yDu4CucVa5I7EWiBNZU=)
2: UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl (hash: q49vwPudzUchEc3bo88BiulRhclGIKKdUJUXC24BF5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:75:de:55:17:c3:a7:f4:fb:fd:ff:52:77:cf:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51b2cf749af6967078c04bd0c70b5141f4e5a60a
Validity
Not Before: Apr 18 23:01:00 2026 GMT
Not After : Apr 19 23:01:00 2026 GMT
Subject: CN=2525f57fc320ba2248d1c0103d54d5f8f9299aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:0d:c8:34:c1:87:7c:09:0b:a8:77:bc:22:43:
cf:6a:99:f8:b2:7f:b7:1c:ec:8c:8e:c6:df:8a:b0:
cb:40:fe:7d:aa:b4:9e:a0:ff:7b:54:07:e5:c2:fd:
ef:fc:0b:99:44:31:53:8e:6d:bd:c7:93:b9:d4:31:
0f:78:54:ff:79:51:db:bb:da:97:8f:d8:33:95:2d:
c1:82:6b:69:c5:55:64:28:64:cb:8c:3e:f0:15:21:
e6:f9:fc:63:e3:06:f4:95:20:41:0b:72:61:a8:59:
7a:4e:cc:2b:40:ba:28:3f:d0:47:8b:32:d6:b9:c9:
1c:29:bd:5c:c6:77:bc:85:55:2b:60:14:09:a2:ea:
2e:26:03:a8:65:6d:4b:6d:08:55:2f:18:4b:ed:0f:
92:a7:da:b6:d7:f0:56:af:b6:54:63:f5:5e:9d:7a:
a0:73:ba:61:53:a1:93:8d:e4:ae:cb:17:1b:8d:1a:
93:7f:3f:58:bf:b0:ba:1f:95:65:02:1b:33:91:33:
a8:25:ce:e0:44:5c:66:a0:38:c4:33:05:e4:47:5f:
8d:7a:5a:18:13:5a:82:1f:02:45:aa:58:7d:cb:f0:
76:e5:5c:60:db:19:3d:27:e3:e0:ab:b3:97:c4:33:
02:ca:67:8f:2d:a9:ab:54:bb:4e:77:40:ca:8d:56:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:25:F5:7F:C3:20:BA:22:48:D1:C0:10:3D:54:D5:F8:F9:29:9A:AD
X509v3 Authority Key Identifier:
keyid:51:B2:CF:74:9A:F6:96:70:78:C0:4B:D0:C7:0B:51:41:F4:E5:A6:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbLPdJr2lnB4wEvQxwtRQfTlpgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/44aa17-2d36-49c3-ba4f-cd14fe2d9571/1/UbLPdJr2lnB4wEvQxwtRQfTlpgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:65:ab:a8:09:c6:a6:b5:64:55:74:21:2e:76:0f:e2:3e:94:
44:f2:b5:54:fc:28:61:1e:1c:4c:8b:de:22:9e:f4:f9:5f:5c:
a7:b8:ad:41:5f:cc:4d:15:64:86:f5:63:1a:05:d8:4a:30:7a:
f6:bd:f3:0a:b7:65:ae:16:0b:c4:a7:12:8e:0e:3e:aa:dd:19:
0e:e5:2a:98:af:41:00:7d:09:de:df:05:8a:23:f6:89:c7:3f:
9d:77:4b:c8:15:5a:99:59:19:68:10:6e:b3:e1:3c:ff:1d:fb:
40:2b:35:c2:a0:c0:cd:69:42:2e:e1:1d:a3:3d:fe:e8:4e:e8:
8f:6a:d1:09:74:1a:9a:6c:fb:90:94:18:4a:71:85:ce:f4:12:
87:07:26:97:73:f1:a2:37:4f:5b:a8:6e:f3:54:ca:49:e9:6b:
7c:bf:29:83:02:1d:29:60:01:e9:90:02:75:f3:e9:51:4c:65:
8e:fd:4b:3f:1b:de:2f:c1:16:49:3f:91:31:9e:3e:9c:87:c4:
07:b4:b2:f3:79:7b:6f:54:6e:13:e8:c6:17:6b:bf:ee:81:f2:
7a:ad:fc:47:3d:6a:1d:c4:12:ec:e4:f3:39:34:a6:fd:30:ed:
3a:f6:a3:97:21:e8:af:ad:c7:e8:db:2a:e3:51:5a:ec:02:ea:
50:81:6a:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2i03XeVRfDp/T7/f9Sd89hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYjJjZjc0OWFmNjk2NzA3OGMwNGJkMGM3MGI1MTQxZjRl
NWE2MGEwHhcNMjYwNDE4MjMwMTAwWhcNMjYwNDE5MjMwMTAwWjAzMTEwLwYDVQQD
EygyNTI1ZjU3ZmMzMjBiYTIyNDhkMWMwMTAzZDU0ZDVmOGY5Mjk5YWFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyQ3INMGHfAkLqHe8IkPPapn4sn+3
HOyMjsbfirDLQP59qrSeoP97VAflwv3v/AuZRDFTjm29x5O51DEPeFT/eVHbu9qX
j9gzlS3BgmtpxVVkKGTLjD7wFSHm+fxj4wb0lSBBC3JhqFl6TswrQLooP9BHizLW
uckcKb1cxne8hVUrYBQJououJgOoZW1LbQhVLxhL7Q+Sp9q21/BWr7ZUY/VenXqg
c7phU6GTjeSuyxcbjRqTfz9Yv7C6H5VlAhszkTOoJc7gRFxmoDjEMwXkR1+NeloY
E1qCHwJFqlh9y/B25Vxg2xk9J+Pgq7OXxDMCymePLamrVLtOd0DKjVYRuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCUl9X/DILoiSNHAED1U1fj5KZqtMB8GA1UdIwQY
MBaAFFGyz3Sa9pZweMBL0McLUUH05aYKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYt
Y2QxNGZlMmQ5NTcxLzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80NGFhMTctMmQzNi00OWMzLWJhNGYtY2QxNGZlMmQ5NTcx
LzEvVWJMUGRKcjJsbkI0d0V2UXh3dFJRZlRscGdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGWrqAnG
prVkVXQhLnYP4j6URPK1VPwoYR4cTIveIp70+V9cp7itQV/MTRVkhvVjGgXYSjB6
9r3zCrdlrhYLxKcSjg4+qt0ZDuUqmK9BAH0J3t8FiiP2icc/nXdLyBVamVkZaBBu
s+E8/x37QCs1wqDAzWlCLuEdoz3+6E7oj2rRCXQammz7kJQYSnGFzvQShwcml3Px
ojdPW6hu81TKSelrfL8pgwIdKWAB6ZACdfPpUUxljv1LPxveL8EWST+RMZ4+nIfE
B7Sy83l7b1RuE+jGF2u/7oHyeq38Rz1qHcQS7OTzOTSm/TDtOvajlyHor63H6Nsq
41Fa7ALqUIFqng==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:42:45 2026 by rpki-client