Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
File: UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft (raw, json)
Hash identifier: OES7yKFPD2vYUsJfgPnXMS5yarOaMn0/kONvLp9mfzs=
Subject key identifier: 4B:AC:A9:9A:FF:3F:BB:83:82:50:35:AF:B8:91:73:BA:26:AC:4B:9A
Authority key identifier: 53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
Certificate issuer: /CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Certificate serial: 019DA3E66E13E494A3587F34A9EABE13F9D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
Manifest number: 0780
Signing time: Sun 19 Apr 2026 04:01:20 +0000
Manifest this update: Sun 19 Apr 2026 04:01:20 +0000
Manifest next update: Mon 20 Apr 2026 04:01:20 +0000
Files and hashes: 1: QNgMd55aywiMLZtsj9Z58IeKCj0.roa (hash: eixq1ArtMYwW26hEsDnfya3+meCjclSqR3FpkWEnQTg=)
2: UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl (hash: McXVfrusQbTjjbrPRXELIG26s5PF0McG4QvYsMXSghE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:6e:13:e4:94:a3:58:7f:34:a9:ea:be:13:f9:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=533166e3f709fb3baca9ae79acbec6ca1d0fc503
Validity
Not Before: Apr 19 04:01:20 2026 GMT
Not After : Apr 20 04:01:20 2026 GMT
Subject: CN=4baca99aff3fbb83825035afb89173ba26ac4b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:f8:b8:aa:8e:05:93:01:b3:3b:cd:17:bc:07:
81:b8:e4:54:74:5f:e6:fc:69:3b:c1:42:41:aa:8b:
5e:cb:ae:d1:e7:a5:01:38:d0:9c:a8:b2:fc:5f:2c:
8e:15:fd:61:e0:a4:51:d0:dc:02:0b:7a:93:59:79:
0b:53:38:0f:96:be:31:f4:27:f2:c0:4b:0f:dd:db:
40:16:00:67:97:2b:5d:81:6a:c0:fd:95:d3:42:e7:
91:4d:d9:47:7a:33:48:c9:06:b2:c7:a8:d5:c8:48:
6c:25:87:49:4a:e3:9c:f3:f7:d0:95:31:8b:16:59:
4a:1b:1e:c9:f1:25:55:62:c8:08:82:cd:41:db:a1:
18:e1:83:c1:4c:80:2f:7c:28:80:55:73:fe:bd:42:
c7:1f:f9:a4:cf:13:04:19:6b:c5:d1:d5:23:e6:21:
86:74:02:00:c6:f8:d9:85:1f:d8:8a:74:e0:ac:a1:
b8:a3:2f:3c:3c:5c:2d:17:f4:ff:76:32:c6:e1:76:
4f:33:f4:fa:c9:98:24:1b:41:6d:ed:6e:62:c7:93:
51:62:82:08:dd:a4:6a:73:42:e9:d4:93:16:31:51:
ce:b8:24:2a:fe:82:24:1a:f1:8b:b7:f3:6f:91:4f:
d0:ea:fb:5c:ec:70:29:a9:e1:9e:90:95:d9:fb:db:
e8:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:AC:A9:9A:FF:3F:BB:83:82:50:35:AF:B8:91:73:BA:26:AC:4B:9A
X509v3 Authority Key Identifier:
keyid:53:31:66:E3:F7:09:FB:3B:AC:A9:AE:79:AC:BE:C6:CA:1D:0F:C5:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzFm4_cJ-zusqa55rL7Gyh0PxQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/091911-06d8-45c8-b05d-e4bbf4c0db59/1/UzFm4_cJ-zusqa55rL7Gyh0PxQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:15:cb:bf:e7:ab:2c:6c:eb:28:47:91:98:aa:31:bd:a5:74:
68:06:16:a6:ab:aa:b5:72:3e:e4:1f:b5:38:a3:77:e1:47:fd:
ab:38:ea:77:b3:15:25:fc:32:3a:e3:e1:a3:63:99:ee:9c:87:
d1:2c:2d:30:c4:dc:20:cb:fa:52:21:4b:1a:ed:18:d5:be:65:
26:3c:40:4a:d4:5e:fc:f7:eb:91:10:0b:39:ea:e8:ee:5c:59:
75:6e:f5:1b:6a:b6:98:05:01:37:f8:cc:c9:5a:9a:7e:97:00:
ec:ca:6a:87:10:03:af:d8:2c:bf:60:ff:3c:3f:e8:4d:b2:1c:
dd:54:85:4a:84:a4:15:f7:bf:d7:44:d5:41:7b:fa:12:fd:9d:
91:f4:21:54:93:76:3f:3d:20:9f:08:7c:4b:38:62:0e:69:34:
95:8b:6a:55:db:0b:9b:27:b7:7f:bd:c4:e7:12:b3:12:6f:55:
ac:1d:8e:3d:b2:5b:4c:ba:7f:3f:03:2a:a5:a4:a7:b3:7c:7a:
aa:96:c4:0b:2e:ee:7e:fa:92:e8:8a:d2:96:b2:8c:52:36:2a:
ee:3a:bc:a8:a9:77:ae:95:32:82:2d:e1:bd:76:bd:71:62:0f:
c9:2c:d6:62:a4:aa:79:e8:aa:10:a7:c2:43:1a:58:27:ec:e0:
10:b0:7e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:12:10 2026 by rpki-client