Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
File: uRvis2eZBLYKL8OZt4CByGsDjZk.mft (raw, json)
Hash identifier: NQjfH/pzsJA2YEoeFK8CkUb4ESAM0W5LjiUiK7W3sok=
Subject key identifier: 6F:A7:D8:31:CE:8F:39:A0:31:16:EA:2C:F1:3D:12:77:BF:91:45:87
Authority key identifier: B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
Certificate issuer: /CN=b91be2b3679904b60a2fc399b78081c86b038d99
Certificate serial: 019D98F4CB7A35A667D83B46A2D4049CD657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
Manifest number: 0AFF
Signing time: Fri 17 Apr 2026 01:01:12 +0000
Manifest this update: Fri 17 Apr 2026 01:01:12 +0000
Manifest next update: Sat 18 Apr 2026 01:01:12 +0000
Files and hashes: 1: E--NdyO753FcMlbJimLkhuZlt1Y.roa (hash: 6iRAUFzJTZeczBRYhd57dFCMl+xN+qP3SGXmpRERH8Y=)
2: uRvis2eZBLYKL8OZt4CByGsDjZk.crl (hash: JNDbzNKOK85ceuvdAO8l6HW4HP6+Lf2BsVbmurtiof8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:cb:7a:35:a6:67:d8:3b:46:a2:d4:04:9c:d6:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b91be2b3679904b60a2fc399b78081c86b038d99
Validity
Not Before: Apr 17 01:01:12 2026 GMT
Not After : Apr 18 01:01:12 2026 GMT
Subject: CN=6fa7d831ce8f39a03116ea2cf13d1277bf914587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bb:57:04:b7:87:93:24:0f:4d:50:20:e0:74:
b1:61:b0:1a:57:2e:e7:5e:6b:a0:cb:7e:84:35:09:
a0:2e:f4:39:3c:c2:46:5c:3d:ea:7e:cf:20:64:41:
29:14:fa:ac:a4:64:e3:0e:6a:69:e3:ac:d3:50:3f:
23:c8:9e:66:ac:26:f4:fd:41:09:84:8b:a8:65:ae:
68:b0:3f:56:d8:3b:98:98:a1:13:d0:9a:dd:dc:5e:
8c:ad:35:bc:5f:97:56:ee:94:f7:e3:8d:6a:84:c1:
99:bd:28:17:37:18:50:65:eb:69:b6:8a:43:7d:5d:
1e:5f:42:3b:13:e9:b1:c5:60:6d:7c:2d:3e:0f:4f:
d7:55:8f:fa:7f:b4:5d:c6:78:41:da:8f:fb:16:1a:
c1:65:83:c0:a4:83:01:8c:3b:4a:1f:ea:32:79:be:
9d:8d:62:e1:0e:bb:a6:a1:04:21:3a:41:73:75:52:
90:6e:0f:0d:f8:67:c1:e5:af:0d:9d:00:2c:b4:54:
d2:35:55:40:bd:e5:13:e7:5b:a0:3f:a3:75:b5:bd:
c2:5d:3c:43:11:f2:35:c2:01:5c:47:dc:38:5d:4d:
03:e8:59:0a:ad:ff:46:e2:39:64:cd:d5:49:eb:df:
d9:b4:b0:e1:60:da:af:45:4f:1d:29:47:8f:d8:3c:
1d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:A7:D8:31:CE:8F:39:A0:31:16:EA:2C:F1:3D:12:77:BF:91:45:87
X509v3 Authority Key Identifier:
keyid:B9:1B:E2:B3:67:99:04:B6:0A:2F:C3:99:B7:80:81:C8:6B:03:8D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRvis2eZBLYKL8OZt4CByGsDjZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/42d3db-e0c3-4a41-b7e9-2b9bf8051c8b/1/uRvis2eZBLYKL8OZt4CByGsDjZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:3a:7e:7e:ca:1e:de:ad:e6:c5:8e:19:0b:05:17:41:13:66:
18:40:b1:70:7a:a2:b4:9f:82:96:1b:3d:37:0e:6a:df:55:b8:
f1:fb:65:df:19:cc:63:de:7c:a2:8f:25:ce:2a:c7:58:4b:a0:
5f:6c:8a:ae:b4:d1:5b:d5:48:4d:73:f9:5b:ab:09:98:07:4b:
b3:0e:cf:74:7a:95:3f:fe:78:47:15:0a:74:be:cd:77:56:c2:
8d:39:9d:74:d7:b2:fe:21:6d:9a:05:80:0d:36:43:3c:35:58:
f2:c9:5c:b4:5f:38:0f:51:c6:23:71:a8:17:3f:8e:31:7d:98:
a6:5b:ad:91:a3:c7:2c:05:c8:d7:e8:02:35:94:0a:95:c8:ee:
15:c9:1e:5d:3a:60:d7:6b:d0:18:e4:9b:01:07:ad:d0:e4:e2:
5d:d9:4e:88:3b:40:23:56:f6:dd:87:32:d1:d2:73:67:9a:c8:
f2:47:12:0e:0f:dc:9e:50:e6:d4:86:2e:e1:29:93:1e:89:0b:
ae:51:57:3b:6c:6e:1d:55:08:7a:37:0b:a4:24:8c:c3:04:d6:
18:ec:ee:ce:57:db:43:82:c6:e4:9e:49:9a:75:59:91:8e:ed:
c7:5a:33:97:6f:32:af:1d:32:64:f6:bd:39:05:9f:cb:fd:40:
c3:98:36:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:53:14 2026 by rpki-client