Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
File: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft (raw, json)
Hash identifier: nlbv4AnihQGCssXps9zFkuYtUFVMcEVQBVhMjEEwxO0=
Subject key identifier: 28:9A:A0:4E:6B:B2:17:05:19:9D:25:B7:F2:AB:33:01:4A:1F:A9:62
Authority key identifier: 50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
Certificate issuer: /CN=509c8f32a1f4281f71463895d543c7179cf7f959
Certificate serial: 019D9818A903A3EF202B23100FA9572D36E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
Manifest number: 18B6
Signing time: Thu 16 Apr 2026 21:00:46 +0000
Manifest this update: Thu 16 Apr 2026 21:00:46 +0000
Manifest next update: Fri 17 Apr 2026 21:00:46 +0000
Files and hashes: 1: UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl (hash: mp9C79VY5UkG+j7igHwe8Y6sjynwNAJs9OFQdidPRs4=)
2: hEpkfnbvGtcIxWjUlVdPllfE-cY.roa (hash: QTunkkr+hN3fQscxIyK1dz5yS0xr1F0v7DcnxHiOT/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:a9:03:a3:ef:20:2b:23:10:0f:a9:57:2d:36:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509c8f32a1f4281f71463895d543c7179cf7f959
Validity
Not Before: Apr 16 21:00:46 2026 GMT
Not After : Apr 17 21:00:46 2026 GMT
Subject: CN=289aa04e6bb21705199d25b7f2ab33014a1fa962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4c:ec:47:fc:18:d8:1e:23:44:eb:92:dd:10:
04:e1:af:71:d4:c2:f5:8e:e8:9c:9f:bd:c3:79:ab:
34:98:3b:10:1c:b0:68:b8:1b:d8:52:bb:32:68:8b:
d7:e6:d9:4e:a7:1e:28:e6:31:f2:9a:f6:37:d4:86:
14:5a:6a:40:52:5e:3a:84:20:cc:bd:50:ef:26:24:
b6:9e:59:ec:24:2c:0a:cc:05:9c:32:bc:b0:a4:59:
a3:d0:27:81:44:2d:39:6a:22:3f:c1:ac:17:13:c6:
0d:74:80:a6:5e:25:f9:57:c2:01:86:79:b8:85:71:
77:82:fd:1e:97:c2:0b:c4:6b:1b:92:8d:ec:d7:04:
62:ef:25:51:a3:e2:4e:74:8e:64:de:03:12:a0:83:
d6:4a:49:ce:3f:22:db:ca:ac:26:76:c0:df:c0:1c:
43:18:6f:39:fb:91:9a:fb:95:da:5c:6c:bd:ad:ec:
63:22:95:8f:5d:b6:68:76:95:bc:85:4a:42:78:fb:
61:61:48:e5:3b:41:07:12:9d:dd:60:60:4b:24:de:
ed:d5:c1:d5:02:90:2b:01:a1:22:7f:ed:16:b3:7e:
97:52:0b:84:6a:6d:b1:0b:a2:f5:93:85:07:b0:b4:
44:1f:53:7d:4f:bc:bf:32:77:a8:c9:78:13:a5:53:
01:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:9A:A0:4E:6B:B2:17:05:19:9D:25:B7:F2:AB:33:01:4A:1F:A9:62
X509v3 Authority Key Identifier:
keyid:50:9C:8F:32:A1:F4:28:1F:71:46:38:95:D5:43:C7:17:9C:F7:F9:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/ff0a7d-dccd-47ce-b21d-14809c938b76/1/UJyPMqH0KB9xRjiV1UPHF5z3-Vk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:98:89:c2:33:f7:06:c1:a1:39:b7:72:62:8f:d9:26:ed:c3:
f5:55:d7:d2:c0:87:7c:f0:1d:ce:41:eb:11:13:f0:a1:cc:cf:
ae:7d:23:13:27:91:1e:78:fc:65:e8:86:44:3c:b4:c9:97:92:
33:e2:9c:60:73:32:c9:76:08:fb:e5:36:29:f7:ed:59:78:7c:
6e:0b:e6:cd:10:51:3b:13:53:2e:92:ad:b6:3e:b5:b5:db:fc:
82:c9:ba:67:f1:73:d1:b2:62:76:aa:1e:9b:8c:49:08:2a:cd:
0d:ec:ed:c6:a5:7a:f3:95:8e:f3:e8:09:c4:90:e5:1f:b1:e4:
25:b8:9d:ba:d4:16:0e:c0:d1:b9:04:cc:ca:e0:57:e1:be:6d:
ec:6e:8f:ae:c2:e7:40:ff:a7:a4:bc:97:7d:ed:3d:cb:1e:75:
f6:ec:50:a0:29:7b:46:d1:7f:d3:aa:cc:78:02:f0:76:e3:70:
c4:6a:3c:4f:0b:81:6b:2f:7f:0c:85:20:de:48:2d:b1:66:6d:
b4:a0:ca:2b:17:20:71:0d:77:dc:36:f2:6c:8c:f4:a8:21:bf:
2f:df:4d:c7:83:97:a8:f9:ec:0a:7a:50:20:e4:0f:51:e1:6f:
e4:07:fa:67:f9:20:ab:5d:0c:bc:2f:6b:0b:77:a5:17:41:3f:
e6:cb:e0:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:52:13 2026 by rpki-client