Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
File: UFZxLM-od6u3YMt34nBBd0ywRzk.mft (raw, json)
Hash identifier: +Ynwlw8F2GtsDcI3lbccsxcAZcGHQUgvsLt62W6m/Z0=
Subject key identifier: 37:B4:21:14:38:C8:44:76:13:5E:B8:8E:D2:F3:F6:A7:F6:97:1D:24
Authority key identifier: 50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
Certificate issuer: /CN=5056712ccfa877abb760cb77e27041774cb04739
Certificate serial: 019D9BBF14FE06EFE00542DE0DAB6292EBFF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 14:01:24 +0000
Manifest this update: Fri 17 Apr 2026 14:01:24 +0000
Manifest next update: Sat 18 Apr 2026 14:01:24 +0000
Files and hashes: 1: L5RtN4MYgylQB2sxCXbY7rkj9cw.roa (hash: qjznCSz3UWXsKIxhvu2fQzujS0se59sICJHUHPBxLVY=)
2: UFZxLM-od6u3YMt34nBBd0ywRzk.crl (hash: JJy+SPfWo8EmHh3RshXO6lnavDlv3uLQko4oBCvPX0A=)
3: ve2xnNSznR3jgazHd-AYZFn-sds.roa (hash: 23cgt8zKs/gW5LTZzpzr40f5utV3g89KsGnqM+0cNAk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:14:fe:06:ef:e0:05:42:de:0d:ab:62:92:eb:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056712ccfa877abb760cb77e27041774cb04739
Validity
Not Before: Apr 17 14:01:24 2026 GMT
Not After : Apr 18 14:01:24 2026 GMT
Subject: CN=37b4211438c84476135eb88ed2f3f6a7f6971d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:81:59:55:59:96:1b:17:5b:0b:89:23:13:53:
d9:fc:2d:43:2c:6e:ec:d9:f9:0c:26:39:9d:41:8e:
15:0d:d2:b2:8f:06:02:bf:dd:3d:08:9a:60:80:c0:
c8:4b:df:d3:c7:d9:d7:f6:6f:f9:05:69:c1:1b:e2:
aa:a7:c7:c8:27:38:cf:c8:35:b0:fa:ed:43:df:3f:
0a:88:c1:e3:8a:c5:b8:3d:6f:2c:60:12:5e:60:a7:
d7:0e:a8:0d:8c:2d:4d:21:78:54:6a:2a:03:14:95:
eb:da:82:c9:93:2e:2e:54:95:6d:25:25:a9:7d:67:
bf:b2:75:40:ba:1b:37:1b:9b:de:8c:62:9e:4d:f1:
77:9d:f5:13:11:04:7d:25:85:0b:b6:03:79:36:e1:
08:d7:a1:1d:e8:21:99:91:d4:06:c5:12:0a:20:20:
a6:f0:63:73:58:96:f4:cb:d6:09:4d:38:1f:c4:a8:
f6:da:9c:72:a2:a6:96:f3:53:67:3b:c5:84:ae:7b:
0e:f0:3e:80:4c:cc:b3:4e:43:aa:b4:27:59:7b:86:
a6:cd:a8:90:1e:46:8c:71:fc:79:8f:6b:49:c9:e3:
9c:ba:a2:33:4d:40:f0:8c:8c:bc:47:cf:97:30:02:
73:af:52:9e:6b:b5:cd:53:72:ba:be:cc:bc:8f:af:
ac:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B4:21:14:38:C8:44:76:13:5E:B8:8E:D2:F3:F6:A7:F6:97:1D:24
X509v3 Authority Key Identifier:
keyid:50:56:71:2C:CF:A8:77:AB:B7:60:CB:77:E2:70:41:77:4C:B0:47:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFZxLM-od6u3YMt34nBBd0ywRzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8d798a-73d7-44ba-97db-f84b60521df5/1/UFZxLM-od6u3YMt34nBBd0ywRzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:b5:ff:0b:93:f8:de:4a:d0:72:ba:d3:17:47:77:c8:e9:b6:
0f:8a:81:d5:4f:34:ff:6a:e8:25:0f:74:0d:38:7d:42:8b:42:
76:a5:41:67:1f:bd:d8:42:ab:2f:53:32:1a:dc:3d:df:13:c9:
a5:26:3d:8e:b1:d3:c3:cd:b8:0c:58:c6:8e:8e:b5:00:5d:27:
61:d5:25:dd:16:b4:1b:dd:15:d2:b4:8f:1b:55:26:f1:cd:9d:
6c:bd:d3:9a:7f:80:76:bc:87:f3:ce:59:cb:fd:71:e5:f8:ae:
5b:98:b2:c7:4c:fb:0c:ff:4c:02:eb:a4:13:97:68:15:19:55:
96:38:c8:30:3d:1f:26:f0:85:7a:bb:7e:75:8f:d2:5d:2e:6b:
77:6c:2d:6f:57:4e:ea:14:bf:78:82:4c:73:cc:1b:1b:74:8f:
a1:d3:29:b9:4a:b0:cf:a9:e1:5b:98:15:81:8b:76:2a:ab:8d:
b2:e1:0b:c6:1f:f8:69:42:8f:17:e5:15:ad:d5:d1:c6:f8:41:
34:79:d2:21:83:ff:00:6a:95:91:f8:e1:2c:fe:d2:9a:22:30:
b2:34:61:f1:11:66:d5:2a:f9:d7:d1:5d:ea:f6:47:f6:2e:81:
de:31:22:93:f8:fd:af:f6:93:46:92:88:3a:7e:55:87:0f:ca:
5f:fc:bf:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:07:57 2026 by rpki-client