Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
File: UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft (raw, json)
Hash identifier: Tmyjrp3BAAthA8+LhigPUz7VIOVl6rQS02TT8oFuDfc=
Subject key identifier: 13:53:57:FE:76:CB:5D:52:65:E0:E2:D2:9A:FE:22:20:18:CA:A3:47
Authority key identifier: 52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
Certificate issuer: /CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Certificate serial: 019D9A3E9CA7D32C81DD7A79F369196FAF06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
Manifest number: 1122
Signing time: Fri 17 Apr 2026 07:01:27 +0000
Manifest this update: Fri 17 Apr 2026 07:01:27 +0000
Manifest next update: Sat 18 Apr 2026 07:01:27 +0000
Files and hashes: 1: GTNj1uopxhcFHlYEIMNdLURp3bo.roa (hash: sNXrtC73S3XHslCegvtHnqUIQVTOhSUYsSYlbuOfH4o=)
2: UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl (hash: pypWUdtASPIG2t4V8vBY717PyT6qERJClkpQzlu3lGE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:9c:a7:d3:2c:81:dd:7a:79:f3:69:19:6f:af:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=529343235581cf4104190da7a0ca174b9c0d0bd5
Validity
Not Before: Apr 17 07:01:27 2026 GMT
Not After : Apr 18 07:01:27 2026 GMT
Subject: CN=135357fe76cb5d5265e0e2d29afe222018caa347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:bb:ca:06:64:b6:ca:64:26:7c:f3:56:7e:86:
92:46:79:14:2e:93:7c:db:4e:12:a7:65:28:ae:4c:
a2:f7:ca:61:ed:77:1e:a1:ff:f5:12:c5:7d:28:f9:
ae:c4:62:c9:e6:a4:b2:f4:d8:62:2e:55:29:0b:56:
29:5b:2b:9b:3c:cf:c9:15:ab:1e:47:1a:9f:9a:00:
10:f6:ae:7d:5a:2c:4e:83:e1:07:c9:29:dc:0b:1e:
ed:f2:8a:27:08:a5:49:10:b6:6e:29:68:35:3a:10:
02:95:15:e0:58:47:b0:a7:7e:1b:94:ed:25:30:19:
22:00:8a:59:7e:c4:5f:64:93:1a:33:c3:1e:e2:a2:
89:97:e2:c3:d1:cb:45:cc:ff:2e:de:fe:1a:57:d9:
17:21:e2:b0:cd:2a:6c:b7:6a:44:cf:67:e5:53:b6:
f5:88:14:6e:c5:47:9e:42:48:63:ef:ca:ad:cf:99:
ed:50:c1:af:31:ed:f5:4b:69:8d:92:e1:d8:18:96:
08:27:fd:66:61:17:88:9b:96:b7:92:de:70:d1:15:
dd:02:7f:f4:b6:f4:58:2f:9b:5b:37:58:5b:33:3d:
31:36:50:2d:e8:50:07:16:73:c3:f7:00:0f:94:bc:
e4:dc:8c:2a:17:db:c6:8e:cb:e0:83:76:24:9f:15:
1a:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:53:57:FE:76:CB:5D:52:65:E0:E2:D2:9A:FE:22:20:18:CA:A3:47
X509v3 Authority Key Identifier:
keyid:52:93:43:23:55:81:CF:41:04:19:0D:A7:A0:CA:17:4B:9C:0D:0B:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpNDI1WBz0EEGQ2noMoXS5wNC9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/fbbf8d-2c43-429d-b5cd-fcc220644558/1/UpNDI1WBz0EEGQ2noMoXS5wNC9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:80:b5:3a:1e:5e:18:df:d8:a4:67:4e:8b:44:53:dd:5e:12:
e5:4f:40:84:8b:ec:5b:09:41:9e:45:5f:dd:a8:cb:b8:a0:45:
bf:5d:52:ee:f9:1f:dd:ee:f3:d3:57:23:dc:d2:68:e4:18:06:
c1:f9:08:dc:95:63:b1:e5:23:3c:7d:6e:26:0e:85:a7:14:d4:
7a:80:d8:ae:95:ac:86:24:3a:51:5b:55:e8:bc:aa:2c:f5:21:
34:b5:f0:5f:56:a1:14:65:99:ec:67:85:09:c2:c6:13:db:83:
2d:08:8b:a9:e1:60:d0:81:fc:0c:22:a1:4b:aa:33:ab:94:fd:
d5:81:65:8b:d6:1d:13:56:b4:59:3a:fd:2a:fd:4e:95:c8:b0:
1b:2e:56:08:da:a1:c0:ab:66:e7:b5:94:4b:d1:64:1a:4d:00:
27:7c:66:79:1e:c0:34:43:bb:68:22:6e:46:03:69:dd:7f:2b:
b8:06:02:da:36:08:16:50:4d:a7:70:09:ef:23:fe:e4:ad:76:
53:d0:6a:e1:33:9d:29:14:32:ff:cf:e8:75:f4:5f:3c:2a:c4:
db:34:d1:ec:2a:7c:5d:90:94:da:b1:58:af:ae:27:55:f0:33:
8a:20:da:ea:da:9a:0b:8c:89:92:1f:61:b0:0b:cd:fe:50:9a:
fa:11:83:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:06:26 2026 by rpki-client