Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: os80bTCvtMObH9LV3cYYi2+vOE8/Tdwb/31eCL6t+Yk=
Subject key identifier: EF:64:3C:59:F1:53:ED:5D:99:3B:4A:53:30:7B:A3:8A:72:87:65:4A
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 019D9AE2C947A0598CA2F029732268279D6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 1717
Signing time: Fri 17 Apr 2026 10:00:47 +0000
Manifest this update: Fri 17 Apr 2026 10:00:47 +0000
Manifest next update: Sat 18 Apr 2026 10:00:47 +0000
Files and hashes: 1: e9599L9ny9UV4AthdrySgjWWRfY.roa (hash: w2tYDeATkvXbeHWaWyKizc90tHXCmX/rUf5tN2rCNto=)
2: jaE8nn1rO58pvqUua1UrZ-d0dAA.roa (hash: Sx5Ur+2c1QVItDTXbKf1TR4pTl+o+P/WqOx/ljx3+2U=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: J2Vga696+jo9xbLjBGV6Ys6QatuRpzf/H1i5p2u5Ibk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:c9:47:a0:59:8c:a2:f0:29:73:22:68:27:9d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Apr 17 10:00:47 2026 GMT
Not After : Apr 18 10:00:47 2026 GMT
Subject: CN=ef643c59f153ed5d993b4a53307ba38a7287654a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:b6:d2:5a:42:23:b7:c2:28:8b:d2:e9:26:80:
52:5d:75:d2:5a:0f:78:f4:4e:8a:1f:22:b4:29:8f:
fc:c2:c7:61:96:b7:f5:4c:d9:de:b5:78:1f:9b:99:
36:09:ef:a7:55:36:f1:4f:92:76:76:e1:61:7c:91:
ef:e9:77:83:eb:da:86:18:ba:92:f9:95:05:4a:74:
43:49:51:1a:4d:62:e0:a7:96:a8:cc:c1:79:35:d3:
d7:28:b0:de:63:7a:ff:eb:f3:c8:f9:f4:f8:9a:28:
8b:b3:d3:4a:86:c1:68:ea:25:ac:c2:a0:8f:1e:4f:
05:fd:b8:ef:16:ce:33:1d:86:46:83:13:2e:86:38:
88:aa:ed:f1:cd:d5:63:0b:41:d2:11:db:14:66:bc:
2a:fe:c4:87:af:ba:f7:6a:04:2d:c0:71:52:00:57:
88:fe:01:cc:b8:6c:51:88:09:20:01:ba:21:5d:80:
03:77:07:bd:76:69:9e:47:df:af:47:d4:b2:ca:03:
a5:cd:81:3e:92:70:29:2b:7e:8b:65:d0:63:04:4f:
06:82:f8:ac:c0:e9:7a:11:6a:58:01:00:a5:7f:ef:
19:eb:0c:dc:cf:e5:30:fd:62:f6:3f:8f:c2:23:9d:
61:75:ca:38:86:b3:64:4d:8a:60:46:e0:98:22:e4:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:64:3C:59:F1:53:ED:5D:99:3B:4A:53:30:7B:A3:8A:72:87:65:4A
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:28:7e:81:57:0d:94:f2:b6:fe:b1:36:ab:00:9b:03:7f:cb:
c7:d5:21:7e:b5:f2:da:27:b5:6a:8d:93:5f:29:8d:3f:80:36:
26:df:fb:87:65:92:41:d5:c1:3d:9b:93:1d:24:49:0d:af:34:
7b:3c:7c:36:41:14:dd:13:97:be:c7:15:d0:1e:bb:26:27:38:
8c:a4:11:d6:75:19:26:2e:d1:62:e0:3c:57:46:48:d1:62:e0:
84:51:42:45:62:7a:87:b3:87:75:b4:6b:52:e1:86:8f:68:69:
b5:b1:ff:3e:89:ae:2b:b4:a8:24:2a:b0:98:89:4b:3a:e0:c8:
bb:ce:12:a4:1b:9e:04:25:9a:8f:78:36:e4:16:0e:c7:5d:a6:
6f:ed:42:c3:6b:f5:8a:65:38:3d:7d:81:33:cb:0e:11:99:4d:
5a:ae:77:e4:44:31:73:71:57:f0:c2:93:5c:bb:c2:c9:81:ed:
14:f6:23:e2:02:41:55:4e:f6:ee:88:f9:38:05:e6:25:1b:e7:
fc:50:21:60:fe:c1:48:2c:40:a2:41:87:dd:bf:e7:2b:3a:c3:
c2:f9:11:12:c4:60:17:7d:a8:9b:5d:2c:d1:1f:5a:f3:95:2c:
7d:da:69:e3:51:aa:bc:b1:dd:d6:6d:2c:ee:2b:fe:8f:6b:3a:
c2:5c:27:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:14:40 2026 by rpki-client