Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: GIFF9HmA9TOyVThIkKchv7A/MiCWlQiFr0BwVl1hqWU=
Subject key identifier: F0:30:AD:22:CE:87:24:12:CA:C3:B7:5B:AA:A9:62:64:64:41:A5:A3
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 019DA3E5D1AAE48093EAAD41E91B27285BBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0CCD
Signing time: Sun 19 Apr 2026 04:00:40 +0000
Manifest this update: Sun 19 Apr 2026 04:00:40 +0000
Manifest next update: Mon 20 Apr 2026 04:00:40 +0000
Files and hashes: 1: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (hash: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw=)
2: Bryd42xc20l8yGYzsCePWUyIRpQ.roa (hash: SfEAMcqg1lAI6lIUE6EnsEoR1LWkzVlNk7fPcXSOd1o=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: /AtvTBLJYFpTGIChmSsX9+dhW681Y2dxwxGg9PN6I0w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:d1:aa:e4:80:93:ea:ad:41:e9:1b:27:28:5b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: Apr 19 04:00:40 2026 GMT
Not After : Apr 20 04:00:40 2026 GMT
Subject: CN=f030ad22ce872412cac3b75baaa962646441a5a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e4:65:d1:89:dd:d8:b8:7c:be:18:f3:43:67:
87:ef:55:08:01:15:e5:8b:33:61:57:0f:ce:42:d3:
1f:6b:85:49:88:85:e4:9b:03:70:b7:66:51:9a:d5:
11:f5:74:85:59:0e:a7:2e:88:9f:45:69:22:9f:f0:
b5:c3:7e:1a:66:7e:8b:67:a4:90:e7:0f:64:c8:71:
fd:76:0b:8f:7a:08:bb:dd:a4:1e:56:98:9f:8f:6f:
79:ce:3d:c8:9c:64:d7:ff:67:87:95:ef:55:34:30:
77:09:76:40:b9:bc:aa:f8:87:5d:25:f7:33:70:2b:
ba:57:a3:6f:e4:ce:ad:31:03:af:e8:31:bd:90:d6:
c2:a6:05:e4:1b:a0:27:4f:12:5d:b1:6c:b9:f2:8d:
85:aa:74:ca:81:21:68:f1:11:50:30:55:ca:67:8a:
3c:5d:64:4d:0c:76:6b:ec:5d:d8:60:82:01:e3:4c:
33:ab:50:30:c7:cb:96:51:57:23:aa:82:51:3e:18:
d5:7c:ff:b3:16:ec:33:86:09:e4:13:56:cf:5a:be:
1b:f4:7b:64:77:8a:fb:4a:71:93:df:4e:8f:3b:33:
da:2b:ef:7a:50:cc:88:d1:19:e9:a1:6e:fa:59:41:
0e:64:d4:3b:b8:68:4a:21:b6:cb:03:db:d4:f9:93:
ce:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:30:AD:22:CE:87:24:12:CA:C3:B7:5B:AA:A9:62:64:64:41:A5:A3
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:7d:31:32:a7:a4:99:39:8a:de:0a:17:d5:00:7e:8d:0e:a0:
bc:d8:58:f5:c3:f7:f1:7c:95:48:5a:51:25:a3:c1:da:50:04:
3e:fa:30:8b:34:cb:85:bf:03:0e:a8:42:6f:8d:f3:c3:7f:e0:
ce:85:62:a8:9b:7c:7a:d5:57:3b:81:51:1e:19:57:3a:cf:5c:
60:cd:16:b8:ed:1c:40:8f:bc:b7:b1:f0:48:b3:0d:15:6d:05:
39:52:83:f9:c3:19:01:92:d7:98:fc:bf:d2:fc:1b:c8:ce:e4:
73:09:55:9a:bb:cc:47:49:a4:fe:26:70:f5:7d:08:2f:18:a6:
7d:d5:98:22:75:64:44:92:73:be:3c:b9:24:8e:f7:6c:c2:a4:
2c:ba:10:d3:02:60:67:5b:c3:7d:e7:ea:fc:55:62:47:33:a6:
da:29:16:58:e2:35:84:e3:e1:23:96:e4:91:6c:5a:f1:4e:8f:
2e:8f:b4:b8:ec:e7:9e:17:57:09:e6:72:a1:fe:c9:32:46:41:
e5:09:99:1c:de:f6:c7:58:80:c2:1b:ce:99:ee:de:98:51:4f:
19:62:cd:14:99:e3:bd:f0:a8:a9:8a:37:93:a5:6d:d6:0d:92:
c1:34:ae:7a:88:66:ac:3a:2c:0d:d9:9d:71:09:a8:87:43:1c:
3d:85:3e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:07:07 2026 by rpki-client