Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
File: UusD0hGZbpmknjw_nOSz8qFXI8U.mft (raw, json)
Hash identifier: wXKgZQsCpjoSCsfeRxzDsLjbrxk9XFTyS+7nPGMmr0g=
Subject key identifier: 8E:FD:00:FA:DF:9F:60:64:17:5A:05:FE:0A:FC:A1:20:F2:36:7C:A6
Authority key identifier: 52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
Certificate issuer: /CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Certificate serial: 019D99D020A96267A9488D3A55176A94EDAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
Manifest number: 1844
Signing time: Fri 17 Apr 2026 05:00:46 +0000
Manifest this update: Fri 17 Apr 2026 05:00:46 +0000
Manifest next update: Sat 18 Apr 2026 05:00:46 +0000
Files and hashes: 1: OzTQl093nPuHgvb4uJ0q61uAdgo.roa (hash: hmpXzU1F+pG+U/TeV3XVItayY49E8Q1T8eDs1027tKg=)
2: UusD0hGZbpmknjw_nOSz8qFXI8U.crl (hash: 4RrAZaKj0dwYTHfuWEA3+e5BHHo9PoYHmdSnqG0Ox48=)
3: jpJhO1X3Fr9hUb-DG-MGkaYcksw.roa (hash: qr2NzVnl1VJwrzaYNmZtgYoQsTO097Vnonun3IEMl60=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:20:a9:62:67:a9:48:8d:3a:55:17:6a:94:ed:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52eb03d211996e99a49e3c3f9ce4b3f2a15723c5
Validity
Not Before: Apr 17 05:00:46 2026 GMT
Not After : Apr 18 05:00:46 2026 GMT
Subject: CN=8efd00fadf9f6064175a05fe0afca120f2367ca6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:33:da:1a:6e:43:16:6b:01:e9:83:6e:a2:fe:
b8:97:20:ba:3e:09:2d:d0:f5:69:34:8c:82:b1:bc:
84:6a:9f:48:20:0f:0d:1f:3e:5b:2f:c0:66:63:c1:
90:fe:e8:1c:14:ad:8f:75:f7:14:a2:77:6d:62:e3:
86:67:28:54:f2:b6:85:53:20:a6:e0:0f:0b:e5:ac:
45:78:52:06:29:f1:41:39:5a:db:9e:f7:03:aa:f3:
9a:6c:a6:ef:00:3f:39:fd:c4:e8:e4:6f:66:95:3a:
b2:48:32:b6:5d:dd:17:82:a1:51:80:b9:d9:45:f3:
b0:9f:1e:d9:d0:a5:bc:f5:bf:b8:02:31:c5:c9:fd:
7c:4c:81:f3:64:0a:b7:38:f0:42:cf:fc:34:89:42:
22:03:87:9d:f4:1d:b5:00:f7:65:61:81:55:68:3b:
e5:8a:20:88:68:d9:99:03:46:a0:64:96:26:12:43:
68:e0:e7:9e:47:b8:f7:7e:c8:b9:ab:a5:c1:cb:ba:
d3:ee:51:7e:54:f8:38:45:5a:d6:be:ef:77:d4:0e:
f0:ac:bf:ba:1d:87:a0:a1:27:67:18:20:55:02:aa:
f3:8e:dd:8d:94:01:da:70:70:a2:f0:ee:4c:75:95:
7e:21:a6:1c:08:a5:c9:5c:df:9e:99:72:d4:be:94:
6a:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:FD:00:FA:DF:9F:60:64:17:5A:05:FE:0A:FC:A1:20:F2:36:7C:A6
X509v3 Authority Key Identifier:
keyid:52:EB:03:D2:11:99:6E:99:A4:9E:3C:3F:9C:E4:B3:F2:A1:57:23:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UusD0hGZbpmknjw_nOSz8qFXI8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/66676a-3bac-4b6d-a638-96cd42f0f95b/1/UusD0hGZbpmknjw_nOSz8qFXI8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:a4:80:b3:a5:c5:4a:91:fe:17:93:7c:7f:9a:0b:cb:b5:fa:
3a:cb:20:41:0e:c7:94:4f:c4:25:04:cd:eb:9b:9a:cc:7f:1d:
67:e5:ea:c6:b7:8c:29:f8:99:85:47:33:44:6f:e3:7c:3a:11:
0d:e3:55:43:b8:0d:d5:4c:8a:3a:14:ca:c8:db:c8:dc:de:fc:
ff:b7:9e:c0:b4:e7:90:e3:ac:68:5a:59:01:ec:e2:1f:ea:90:
d4:f3:12:17:ca:8b:10:83:40:4f:aa:b7:e4:21:4f:92:91:b1:
4a:75:fd:00:bb:cb:59:14:b4:8a:a7:94:45:30:ff:f8:bc:51:
60:2c:d4:23:72:e8:00:d0:ed:34:77:ce:68:aa:30:a6:2a:e5:
93:a8:17:87:3d:56:e8:42:00:7a:1c:46:91:6f:80:f2:e1:99:
ab:85:a3:6f:a4:82:ab:47:cd:6c:45:c1:92:6d:4f:a1:06:0f:
ee:d6:29:93:87:2f:2f:69:cc:7c:f6:d1:7c:46:3f:ec:46:8f:
71:95:de:cc:2b:7f:2f:48:08:55:9b:7c:f3:37:92:47:de:6c:
43:ec:a1:42:db:aa:21:11:91:60:2f:e1:67:9a:c5:c3:85:1f:
9b:7b:de:b8:a5:fd:55:c1:45:c9:41:c2:1c:a4:6d:54:8a:ed:
cb:67:db:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:54:05 2026 by rpki-client