Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
File: uFh0CVxMlCK5NZdacVZPB3HNKS4.mft (raw, json)
Hash identifier: yqFIzq2j6IMmJdAQWldPpDIPoiuE4gk/LRTfF/kquJE=
Subject key identifier: DE:D6:A7:DF:B2:43:DA:F0:23:4D:8A:F8:0B:D6:1F:5B:FD:69:93:EC
Authority key identifier: B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
Certificate issuer: /CN=b85874095c4c9422b935975a71564f0771cd292e
Certificate serial: 019D9AE37D9DD01097B2AF52CF20B9ABC197
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
Manifest number: 085B
Signing time: Fri 17 Apr 2026 10:01:33 +0000
Manifest this update: Fri 17 Apr 2026 10:01:33 +0000
Manifest next update: Sat 18 Apr 2026 10:01:33 +0000
Files and hashes: 1: onylvAnaX1xJT4oQ_18209fUiQo.roa (hash: uJ5yGGvZ7mIQiDhU+Wu/R2iMU5zPKWhZCJOHY75uE3g=)
2: uFh0CVxMlCK5NZdacVZPB3HNKS4.crl (hash: 75adpxUAfq/FhDwjmRIp7MVSqfnq/JPNGVsW7GU85AA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:7d:9d:d0:10:97:b2:af:52:cf:20:b9:ab:c1:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b85874095c4c9422b935975a71564f0771cd292e
Validity
Not Before: Apr 17 10:01:33 2026 GMT
Not After : Apr 18 10:01:33 2026 GMT
Subject: CN=ded6a7dfb243daf0234d8af80bd61f5bfd6993ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:49:ce:6b:47:06:84:d9:59:34:eb:4e:1b:6c:
1b:50:75:62:f0:6a:d1:27:e6:fb:fa:c7:47:20:65:
6c:29:e9:a4:19:e4:e8:6a:1a:d1:32:b0:ca:75:e8:
4f:ea:a3:ac:4e:65:f7:35:25:d6:da:cb:52:56:a7:
bc:17:cb:53:14:1d:8f:f1:a9:4c:27:15:ac:d6:ed:
4c:8e:2d:f6:85:86:35:99:83:0e:4a:41:17:71:10:
49:d4:20:45:6d:5e:11:90:a2:96:ce:5e:90:78:d4:
35:4f:08:46:33:3d:3b:8b:26:ff:ad:85:85:03:56:
ee:af:fb:dc:b4:51:ad:f9:0c:8b:a7:98:f1:4b:a8:
1a:aa:86:f9:3b:88:f1:98:cf:34:81:81:ae:b1:6d:
0e:0d:9e:96:bb:d3:d7:a2:ad:db:ef:74:d9:00:7e:
e1:ea:39:01:c4:7f:d6:8b:4d:b0:51:da:ff:33:b3:
c2:89:05:d6:e2:3f:91:e9:ab:e5:1d:78:49:15:8c:
d4:f8:d0:35:7e:ac:d4:28:fa:7e:ce:72:33:ad:51:
dc:06:c2:88:dc:1d:be:c3:c1:3d:e9:45:f2:af:c1:
33:c0:89:c0:22:8d:f9:72:c9:d7:9f:a1:40:79:2e:
5f:dd:e5:bd:61:2e:64:4b:f0:b5:1d:1d:cc:8e:d0:
3b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:D6:A7:DF:B2:43:DA:F0:23:4D:8A:F8:0B:D6:1F:5B:FD:69:93:EC
X509v3 Authority Key Identifier:
keyid:B8:58:74:09:5C:4C:94:22:B9:35:97:5A:71:56:4F:07:71:CD:29:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFh0CVxMlCK5NZdacVZPB3HNKS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/d80877-7f1e-4a50-9957-070a1f71885e/1/uFh0CVxMlCK5NZdacVZPB3HNKS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:7f:8f:df:c0:8a:15:f7:83:e1:b1:4d:30:f4:92:da:d4:ad:
24:83:58:4f:e0:e4:fd:1d:c7:33:b9:ef:b0:f3:e1:ff:9f:a0:
9f:ee:83:2f:20:f8:bd:4f:6e:8a:e8:63:88:ed:87:1b:1d:36:
aa:b2:03:7d:88:74:2d:ee:62:06:5a:38:1d:a1:df:59:a2:f0:
0c:ce:58:ba:c3:31:f8:83:4d:e4:72:8d:c7:e4:65:2f:b9:2c:
0c:2a:48:45:5e:67:13:f8:b1:02:40:c7:7c:ae:10:de:dc:9b:
6d:e0:4d:e1:1a:0e:e5:e7:0a:86:2c:5a:48:90:68:69:4c:08:
21:93:76:cd:24:93:91:06:65:74:d3:b6:c4:e2:10:1a:cb:cc:
5c:1b:55:79:f4:64:d2:ee:cb:29:c6:2f:db:d3:39:ec:28:02:
94:63:1a:98:90:22:15:cc:d0:60:b7:77:df:b0:c6:00:e7:d0:
55:8e:ae:89:3e:68:25:42:49:ab:ae:c5:79:72:0b:71:26:37:
69:7f:9f:df:30:c4:80:29:85:8a:93:5f:41:25:cc:75:94:75:
3f:e7:00:39:20:71:3f:70:6d:63:5a:ea:75:c7:8a:cb:3d:a3:
02:16:80:4b:12:d6:12:4b:50:97:f8:01:08:3b:fa:76:a5:2a:
00:69:a1:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:09:10 2026 by rpki-client