Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
File: cUKDDu7SiwS83QP6P9pIxUha_P4.mft (raw, json)
Hash identifier: lPI+tGiehpSXGbNRoCy5KKP5mKc0o+FMMkX619h+x00=
Subject key identifier: E3:E1:DF:93:35:29:AE:74:AA:9C:2E:C4:54:9C:E9:28:06:2F:30:85
Authority key identifier: 71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
Certificate issuer: /CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Certificate serial: 019D98F403E0AC374BBCDE6AB2712E140483
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
Manifest number: 1194
Signing time: Fri 17 Apr 2026 01:00:21 +0000
Manifest this update: Fri 17 Apr 2026 01:00:21 +0000
Manifest next update: Sat 18 Apr 2026 01:00:21 +0000
Files and hashes: 1: cUKDDu7SiwS83QP6P9pIxUha_P4.crl (hash: bZgt1ajXPIXnuXIOL8LW7sR2VALm82Bzp13e1DFuSbE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:03:e0:ac:37:4b:bc:de:6a:b2:71:2e:14:04:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7142830eeed28b04bcdd03fa3fda48c5485afcfe
Validity
Not Before: Apr 17 01:00:21 2026 GMT
Not After : Apr 18 01:00:21 2026 GMT
Subject: CN=e3e1df933529ae74aa9c2ec4549ce928062f3085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:db:23:b4:1f:5c:ef:35:48:08:df:e6:29:5d:
ba:a5:7f:de:6a:3e:48:22:cf:94:d9:ad:39:43:1b:
6e:8e:af:01:fd:49:3b:e5:7e:c9:8f:0e:27:49:a9:
f6:e5:2f:eb:9c:ef:9c:ab:e2:9e:24:06:1d:d7:b5:
28:60:1d:67:57:93:9c:da:20:54:ec:8b:84:20:d4:
a1:f6:8b:34:59:22:44:3f:24:1c:23:37:bc:8a:10:
c3:20:5f:fe:23:de:1e:85:0f:41:f7:7d:f7:b3:08:
af:37:f6:88:36:1a:fb:af:39:64:9a:cf:76:10:25:
6a:ff:d9:b9:a5:a7:b1:c0:2a:9b:b6:0a:84:83:0b:
5f:22:ce:81:fe:20:b3:47:95:4e:07:37:ca:f5:50:
7b:1b:e1:60:59:72:2f:1f:4b:47:08:31:40:fb:2f:
89:89:ad:40:40:3b:a2:69:8c:bf:b6:d9:74:f1:4b:
63:fc:43:08:97:ba:19:a6:50:9f:ab:d2:25:94:38:
77:f2:f6:5f:97:ae:ee:d9:3e:44:11:88:16:15:92:
76:b9:26:e8:0c:bf:4e:b4:6e:e2:fc:ca:dc:7a:d4:
db:7e:30:95:cd:44:b8:23:97:0a:b2:3f:3e:6c:ad:
2a:2e:38:93:da:34:35:72:09:3a:aa:32:33:9e:c9:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E1:DF:93:35:29:AE:74:AA:9C:2E:C4:54:9C:E9:28:06:2F:30:85
X509v3 Authority Key Identifier:
keyid:71:42:83:0E:EE:D2:8B:04:BC:DD:03:FA:3F:DA:48:C5:48:5A:FC:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cUKDDu7SiwS83QP6P9pIxUha_P4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/afd118-e8a5-4ea4-9895-eb133a0af5fc/1/cUKDDu7SiwS83QP6P9pIxUha_P4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:b6:bf:20:44:45:b7:fc:58:41:50:1e:1a:9f:78:e5:62:45:
25:61:fc:06:91:f0:cd:b9:78:03:c5:7a:c5:37:2f:56:a9:95:
c2:6b:45:f7:fa:36:4d:e5:5e:e4:9c:9e:3c:55:10:7d:59:2c:
b6:95:0b:fc:c4:25:e0:e5:d0:0f:4c:05:fb:2c:c9:0d:3c:64:
ad:6f:06:aa:51:83:7f:01:23:f6:3f:27:62:3b:05:6f:6d:92:
e5:a1:bf:58:a8:b1:c9:e6:fa:75:2a:cf:93:46:31:54:42:79:
dd:41:f1:7c:dd:7f:0b:7c:72:38:e1:0e:30:a1:64:e6:8e:7d:
a9:be:2b:d2:c9:a9:78:b1:1d:da:56:a4:42:1c:ee:48:fb:d3:
06:84:a9:a1:4a:f8:e8:7e:cb:76:6d:52:a8:78:cc:eb:d5:75:
f0:03:21:18:45:e3:c1:36:04:17:ce:dd:0c:a6:7a:d4:58:1b:
80:b2:0f:9f:27:be:81:22:aa:d6:48:d0:b7:bf:d2:cb:76:2c:
d9:fb:8e:28:e5:b7:cd:61:65:5c:fc:e9:65:58:64:8c:c6:e4:
cd:6f:c8:5d:10:ff:00:c9:a5:8f:78:37:ac:78:d9:9a:23:88:
f6:7d:76:56:12:2b:11:b2:7e:a5:93:d6:53:9d:2e:c7:fe:8b:
e3:a0:16:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:27:44 2026 by rpki-client