Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
File: Ul7JPXynN0Sywfu23aZEk8KklcE.mft (raw, json)
Hash identifier: Q28f9SXRAgSri6L+nQcAs7nTNX9/MKRQcRQX1M17f0E=
Subject key identifier: C7:03:A2:2C:FC:0B:5D:02:64:96:2E:76:22:C5:08:E9:30:B9:1F:38
Authority key identifier: 52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
Certificate issuer: /CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Certificate serial: 019D99992B007987DC2352FE3022FB743022
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
Manifest number: 0720
Signing time: Fri 17 Apr 2026 04:00:45 +0000
Manifest this update: Fri 17 Apr 2026 04:00:45 +0000
Manifest next update: Sat 18 Apr 2026 04:00:45 +0000
Files and hashes: 1: 9JqZryS5V90sfPbzDmWbNHdWDz4.roa (hash: xRoJI+4gTPgSbGis5y17EtT/awD7P4de01zDNxO2DGg=)
2: UULqMalT8q1TQ-6O1Hqoa0ij9jk.roa (hash: bcQyF2LcXE36rOCQDWSu5hq1GX9yM6Wmo0ZcgXJHSfw=)
3: Ul7JPXynN0Sywfu23aZEk8KklcE.crl (hash: vUH8eoocAvFb7w+GqvxSWNPoKPn+H75AuihfSdPwUdE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:2b:00:79:87:dc:23:52:fe:30:22:fb:74:30:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525ec93d7ca73744b2c1fbb6dda64493c2a495c1
Validity
Not Before: Apr 17 04:00:45 2026 GMT
Not After : Apr 18 04:00:45 2026 GMT
Subject: CN=c703a22cfc0b5d0264962e7622c508e930b91f38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:0e:fe:43:67:7c:e5:db:aa:c2:6b:33:a0:0c:
54:92:e2:91:c9:49:de:e7:d1:a3:73:7c:f0:da:89:
28:8d:e4:3e:37:8f:15:d7:c4:c1:ac:a0:4c:1a:1d:
55:8a:9d:c8:7a:81:0d:ee:3b:9d:34:96:30:b4:2a:
92:ca:73:de:b9:7c:91:01:89:ec:84:0b:41:c6:5b:
cb:b6:de:71:29:8f:e5:d9:df:d7:33:fb:40:04:e7:
35:53:31:9c:20:c8:45:ca:c2:5b:ad:f0:91:77:f3:
17:80:19:6a:23:66:97:a5:53:b8:8d:d5:1a:38:4a:
b8:9b:62:2c:b3:2a:ef:8d:d3:75:ed:d9:66:26:1f:
d0:be:ac:be:e1:e8:0f:10:d0:fd:39:d5:24:70:59:
4d:53:42:d4:0a:4f:a5:94:f9:e2:d2:2a:a6:4f:d9:
44:47:11:31:a4:5e:85:21:19:9a:03:67:e8:f5:45:
ff:92:34:c5:1c:4e:da:3c:96:2e:36:a8:53:2f:24:
dd:b6:8c:6c:13:97:4b:0e:f8:ae:47:76:f1:29:04:
01:a0:ec:b3:41:fe:e8:a2:1c:c0:6a:95:cf:6c:02:
4c:57:10:65:ca:28:eb:23:2a:b3:f7:0c:88:81:85:
c2:00:77:c0:bb:5b:22:98:43:15:f4:b2:09:52:32:
2a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:03:A2:2C:FC:0B:5D:02:64:96:2E:76:22:C5:08:E9:30:B9:1F:38
X509v3 Authority Key Identifier:
keyid:52:5E:C9:3D:7C:A7:37:44:B2:C1:FB:B6:DD:A6:44:93:C2:A4:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul7JPXynN0Sywfu23aZEk8KklcE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/6558ec-d568-4cb9-a03a-8366b164dd66/1/Ul7JPXynN0Sywfu23aZEk8KklcE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:a9:c2:5b:cf:27:4c:77:9d:19:9f:76:65:d7:9c:06:4e:9c:
29:b2:0d:c9:40:14:4d:9a:4b:fa:4b:d7:7c:06:c7:78:03:3c:
58:42:28:10:42:57:07:29:6b:7a:82:46:89:07:b5:21:3a:a1:
a3:d7:d0:a3:11:1f:ac:e6:bf:94:4d:22:b0:82:61:f2:26:22:
49:b7:6e:24:2a:eb:d7:01:e0:62:c9:e5:0f:bb:6d:ae:35:ef:
14:52:a7:03:66:dc:c2:3b:2e:15:0d:72:e9:c6:df:5f:96:c9:
5b:fc:6a:db:54:bd:0a:c2:33:02:bd:27:f9:88:57:5d:08:d8:
39:b7:e0:c9:51:87:1b:39:c9:f0:65:a9:90:52:4e:06:53:ba:
3a:39:5f:2a:7e:de:7e:c4:a9:85:ee:ed:ae:03:56:15:91:82:
26:ef:49:30:60:c0:fa:ec:9f:a0:cb:62:20:41:e7:66:19:73:
e7:99:6f:26:81:c9:d6:49:b2:a8:f1:f2:e2:7e:30:a9:53:34:
3c:d9:ce:b2:f2:ae:83:c6:3b:b8:b6:da:be:1e:38:df:84:e9:
89:9e:47:03:45:3b:1a:4e:03:ae:e4:08:4b:85:51:3c:7f:99:
a3:84:d9:ac:8f:1d:cd:4c:43:78:4f:28:15:4c:f1:f9:d2:1e:
54:77:56:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:22:23 2026 by rpki-client