Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
File: pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft (raw, json)
Hash identifier: Mx1i/CUxXFIQKXun1vj8Q2sdG52hwCwK6KdPGYa3SA8=
Subject key identifier: B6:3D:A0:46:3E:05:01:C0:16:69:62:CF:60:AD:86:FC:78:81:6A:35
Authority key identifier: A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
Certificate issuer: /CN=a5472b1473bc781b70440315c83d119c8abc86fc
Certificate serial: 019D984FFB9983BDE4E331DCBAFF2F366F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
Manifest number: 161C
Signing time: Thu 16 Apr 2026 22:01:11 +0000
Manifest this update: Thu 16 Apr 2026 22:01:11 +0000
Manifest next update: Fri 17 Apr 2026 22:01:11 +0000
Files and hashes: 1: icGxSXDSLuf3bxPbnWFtv-JBVbs.roa (hash: J8P/ZDEioxw2f81tNOKgfIU5hZS6uHNCJdz89yqe1hg=)
2: pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl (hash: /XlktGtRtc26BgHfyCxxH7WR+AYrliywI0OCEKTOYpc=)
3: vjXtRIEiyB7erWPIwLI15XGZ10k.roa (hash: gnrNiqSgWNnIJJPCLHVFh0qVACCw6Qa1Bcb38Wxj/po=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:fb:99:83:bd:e4:e3:31:dc:ba:ff:2f:36:6f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5472b1473bc781b70440315c83d119c8abc86fc
Validity
Not Before: Apr 16 22:01:11 2026 GMT
Not After : Apr 17 22:01:11 2026 GMT
Subject: CN=b63da0463e0501c0166962cf60ad86fc78816a35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:aa:65:60:a7:5c:ca:2a:0e:6a:78:ea:61:b1:
27:77:19:c4:fb:bb:21:7e:95:ce:d0:05:10:13:cb:
8c:bf:3b:7d:33:34:5f:7b:2a:13:81:33:cb:32:5b:
58:29:6e:f0:06:34:db:7f:7d:44:0e:3f:40:5d:2c:
e2:30:25:bc:89:1a:18:5d:31:c8:0a:47:8e:60:f4:
e2:f6:80:81:19:a6:3b:0f:19:57:87:8b:2e:f5:11:
6a:76:c6:61:2f:a4:33:43:46:31:cd:67:a9:19:fa:
46:35:09:7e:14:db:23:cd:e2:61:03:04:56:31:36:
ff:c0:3b:71:cf:03:9e:e2:5e:93:b1:b8:70:e7:10:
14:ac:b3:42:8e:88:1e:49:98:85:f6:4f:50:f1:bc:
21:1a:ce:c9:4e:ba:a9:14:40:d0:82:c4:5e:bf:b1:
c7:1c:5c:9f:3c:23:30:01:1d:79:90:13:41:cd:29:
bf:28:d5:3f:97:81:12:bc:1e:3f:d2:9b:84:0b:d8:
ee:69:99:7d:bc:03:45:9b:d9:46:22:9c:1d:4c:ed:
9e:71:00:be:c1:3c:23:ec:65:89:7d:b8:7c:73:44:
f2:70:a0:94:47:89:99:ad:ca:80:26:6a:ac:e0:29:
69:82:f3:9d:18:20:d1:e7:00:81:be:30:99:f7:a4:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:A0:46:3E:05:01:C0:16:69:62:CF:60:AD:86:FC:78:81:6A:35
X509v3 Authority Key Identifier:
keyid:A5:47:2B:14:73:BC:78:1B:70:44:03:15:C8:3D:11:9C:8A:BC:86:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pUcrFHO8eBtwRAMVyD0RnIq8hvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/30112f-0e9d-4fc8-b854-b1565b255854/1/pUcrFHO8eBtwRAMVyD0RnIq8hvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:cc:d5:9c:4d:99:e7:22:e8:ca:38:ff:f0:8a:dc:98:d8:b3:
70:ef:62:0a:ca:b5:e9:e4:eb:9c:4e:b8:ff:68:f7:b4:59:47:
f2:d4:3f:1e:ad:e9:7e:19:ac:fc:5f:78:e8:93:b7:e7:dd:28:
52:3d:8e:19:51:c7:f7:67:d9:f5:c6:3a:99:57:e7:bc:52:f9:
1e:29:ec:b2:4a:80:b2:2f:39:8f:cd:46:1d:72:aa:c8:09:d4:
b4:64:8b:99:95:47:a3:3b:35:a0:f3:ca:31:c6:aa:08:36:ed:
6d:47:52:a4:81:5d:d6:9b:2d:dd:05:e7:62:5f:d8:8f:15:28:
17:e0:ef:92:23:90:e8:3a:d9:dc:99:06:db:66:ae:3e:6b:96:
be:15:60:35:44:b5:7d:ce:d1:db:ef:bd:b2:e5:f2:f9:b5:d3:
61:0d:9d:49:a0:e9:2d:37:70:32:a2:94:fb:28:e7:10:93:4e:
62:e4:78:ad:05:dd:d0:53:cb:cb:b8:36:2c:53:5b:b2:fc:6d:
79:b1:52:0a:c6:63:d7:b2:a6:81:30:4f:1d:de:ad:7a:31:69:
ee:09:9b:0d:03:e5:cf:06:7e:3b:6b:b8:f3:34:96:ee:e3:83:
67:92:aa:e6:bb:71:39:23:58:4e:c9:85:25:09:cf:a5:84:fb:
db:a8:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:01 2026 by rpki-client