Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
File: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft (raw, json)
Hash identifier: Sjenp9jJHfX46dQeE+sF2ZrUUZl2gqN9lxW9alnOLmM=
Subject key identifier: E3:67:57:C2:10:EC:AC:8C:DB:B5:28:CB:26:AF:AC:D3:4E:0F:9D:6C
Authority key identifier: AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
Certificate issuer: /CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Certificate serial: 019D9A751B79EEBD4375D0F98EFBCFD45152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
Manifest number: 04E8
Signing time: Fri 17 Apr 2026 08:00:59 +0000
Manifest this update: Fri 17 Apr 2026 08:00:59 +0000
Manifest next update: Sat 18 Apr 2026 08:00:59 +0000
Files and hashes: 1: 5bBSbPRJU7MitFpRgPerCchom28.roa (hash: QAwUl9Lhrh1n1EXirxYX4rz+UIQVZLyQirDHc9Fe4Ek=)
2: rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl (hash: gqMWWy0SHuNidyudRQjXXADoIYNesrwl6OQ3GQ9SJ3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:1b:79:ee:bd:43:75:d0:f9:8e:fb:cf:d4:51:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad4f879f3f97ad8cd73193d8069e49b01b6baddd
Validity
Not Before: Apr 17 08:00:59 2026 GMT
Not After : Apr 18 08:00:59 2026 GMT
Subject: CN=e36757c210ecac8cdbb528cb26afacd34e0f9d6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:5d:9e:76:56:a3:7b:80:33:92:6b:a0:cf:85:
a8:8a:1f:63:eb:17:59:c5:fb:d3:13:b3:f4:72:d6:
81:08:79:72:84:4d:d7:6e:f6:9b:c3:32:05:e6:85:
27:96:0f:f2:a2:a7:29:10:03:dd:59:94:ee:35:56:
4c:77:79:43:a4:10:98:97:e7:c1:67:4c:43:d6:b8:
68:47:10:25:34:17:23:7a:c2:97:e3:6f:db:15:45:
a4:8d:a0:d5:cd:31:39:12:45:5d:0c:31:2e:2e:d5:
f9:12:6e:36:e7:cc:d4:d6:d8:09:f1:78:a4:40:ab:
9d:c4:2e:7d:6b:d1:f4:4a:64:ed:4b:13:f3:ad:8e:
f9:38:54:bc:bb:ac:d2:df:06:d1:10:db:2c:b3:65:
ca:0e:d3:ab:41:25:cd:83:1f:1c:1c:7e:82:10:90:
c8:83:80:64:f8:b8:da:fd:ba:5c:6b:f1:8c:19:a1:
34:b6:02:19:7d:96:eb:dc:49:ba:e9:57:69:62:3a:
39:00:64:aa:c6:3b:be:88:da:02:ac:5c:15:21:89:
d6:be:57:6f:7a:9b:2b:9a:71:d3:78:10:80:bb:52:
58:c3:d7:f7:17:52:41:3d:6d:3b:46:71:ac:db:6a:
e1:37:bf:d8:8c:68:7c:45:01:6c:e0:80:33:9c:d2:
b0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:67:57:C2:10:EC:AC:8C:DB:B5:28:CB:26:AF:AC:D3:4E:0F:9D:6C
X509v3 Authority Key Identifier:
keyid:AD:4F:87:9F:3F:97:AD:8C:D7:31:93:D8:06:9E:49:B0:1B:6B:AD:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/2f1207-ea0a-4507-9a54-94ef19707382/1/rU-Hnz-XrYzXMZPYBp5JsBtrrd0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:a1:28:42:12:5a:7d:85:35:35:2b:80:8a:d0:ea:66:20:59:
62:d4:60:db:4d:17:a2:07:27:99:97:69:b7:09:fb:ff:43:48:
38:b4:e0:48:66:4a:82:e1:17:e1:fb:54:f7:7c:44:ea:de:da:
c8:e0:04:58:ae:98:88:75:7f:3d:bf:8c:4e:4f:20:2b:79:6a:
30:90:29:85:92:cd:c8:ef:2b:6d:cf:64:6a:6d:c0:2a:90:0a:
3e:67:24:c4:0b:c0:68:ee:a9:04:31:5a:29:12:82:05:3b:a0:
c2:ee:e5:4d:22:6c:52:c7:af:74:d3:62:b8:25:ca:99:04:1f:
3c:26:91:6d:a5:44:c4:4c:56:24:32:54:0a:82:1c:a1:2c:0d:
2a:1a:d4:17:7c:c3:73:50:a4:24:80:ef:48:58:84:c0:19:7b:
e4:f2:c1:a6:6d:90:3a:c2:d1:62:41:0d:dc:ac:83:04:67:c0:
d3:70:ed:83:1f:e2:91:6b:ff:bb:af:3f:65:ab:cd:c6:56:72:
5c:35:25:2d:1d:a2:19:cd:21:88:80:9b:8b:6b:14:e6:38:b9:
34:44:14:16:a8:63:38:0a:53:3f:c2:11:d3:8d:73:39:14:18:
a4:d7:d9:cc:ac:e4:87:9d:04:87:53:62:a1:d0:08:de:ed:19:
96:f9:84:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:02:14 2026 by rpki-client