Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
File: Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft (raw, json)
Hash identifier: CdEpbSxt4wp3BWYngbj3/LZL0BBrm4GAkN+vOSwMzcA=
Subject key identifier: C9:0B:B8:E3:C0:50:AC:79:DA:59:DE:8E:AE:E8:1C:20:9F:1C:32:F0
Authority key identifier: 53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
Certificate issuer: /CN=531f247d4bc70214606d07d659319ec3f3479706
Certificate serial: 019D984F8F792FF9394E869FB96A7C199A66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 22:00:43 +0000
Manifest this update: Thu 16 Apr 2026 22:00:43 +0000
Manifest next update: Fri 17 Apr 2026 22:00:43 +0000
Files and hashes: 1: Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl (hash: PyDbMbj+aCjqbe5jV6Ag4G29032onV9KWyf6K2hS0Rc=)
2: gasIi9uIBm_j6aD0r4hpEpXQM6k.roa (hash: Wp7nXb862KjRHfKzxWCc0lZMplvU3kmdQKf28f0j66g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:8f:79:2f:f9:39:4e:86:9f:b9:6a:7c:19:9a:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531f247d4bc70214606d07d659319ec3f3479706
Validity
Not Before: Apr 16 22:00:43 2026 GMT
Not After : Apr 17 22:00:43 2026 GMT
Subject: CN=c90bb8e3c050ac79da59de8eaee81c209f1c32f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:74:7c:91:5d:32:8f:23:3a:b7:38:48:67:a6:
ca:fc:63:74:fb:cb:60:90:8d:ce:51:95:a1:e5:2a:
a0:3d:1e:2d:e9:2a:67:64:bf:28:30:1b:01:f8:44:
5f:51:a0:3a:81:19:44:e4:23:93:3c:fb:8f:6d:45:
5b:48:f5:c7:4c:cb:1b:89:bc:8f:e0:a8:88:94:69:
ae:0a:c7:43:38:51:ac:64:4d:f8:c2:8a:65:e4:25:
41:e6:ac:9f:d8:f5:11:96:f8:2d:60:04:38:23:e1:
9f:30:d8:c9:dc:87:8e:16:eb:12:54:5f:09:01:38:
7e:78:2e:dc:5f:d7:41:de:a0:05:ef:65:c9:37:e6:
e8:6a:f0:df:c7:f3:aa:26:af:eb:a2:c3:db:80:09:
58:43:42:79:53:f6:57:13:6f:a0:6a:90:f5:9f:fc:
3f:1a:85:9d:c4:ac:46:b5:73:a3:ca:3c:37:2c:0c:
c9:f2:fc:ed:9f:e5:e9:2d:20:f0:08:65:47:c3:8b:
20:11:ae:6c:55:7b:a1:38:0b:e9:ef:a5:a7:2e:99:
77:cf:43:c7:39:ad:14:12:83:2f:59:2a:49:84:6a:
8e:89:a3:55:fe:52:28:c4:f7:11:57:7f:c1:f9:88:
36:72:4a:d1:72:25:bc:40:1c:22:14:11:f2:f3:18:
5d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:0B:B8:E3:C0:50:AC:79:DA:59:DE:8E:AE:E8:1C:20:9F:1C:32:F0
X509v3 Authority Key Identifier:
keyid:53:1F:24:7D:4B:C7:02:14:60:6D:07:D6:59:31:9E:C3:F3:47:97:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux8kfUvHAhRgbQfWWTGew_NHlwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/75452b-a4ea-4112-af03-8ed8433d38c4/1/Ux8kfUvHAhRgbQfWWTGew_NHlwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:75:6a:6f:5d:6e:84:29:6e:b4:c0:c1:f7:0a:8d:05:a8:04:
b3:0f:41:b3:7d:8e:df:b0:59:74:38:84:30:9c:1b:17:cb:dc:
26:1c:88:f1:ad:eb:6d:f2:db:5f:a2:f4:4e:e5:e5:0d:6e:2e:
1a:c1:95:34:d0:c4:77:15:7e:d8:21:62:ec:6f:cc:f2:fc:b0:
d2:f4:a5:20:25:b2:62:e2:97:a9:98:b1:7c:1e:c1:72:0c:fb:
9d:c8:72:45:50:a3:34:ed:5c:62:12:64:74:87:ad:7c:6e:c7:
74:9f:ef:2c:74:fb:b6:8d:34:ad:05:00:a3:75:96:be:f8:0c:
86:1e:69:5a:0a:6e:1e:ae:60:73:9b:91:ca:26:e3:78:db:d8:
e9:6a:3a:47:b0:2c:0f:ff:f8:a2:96:61:7f:58:75:c1:02:60:
85:c1:f9:f5:bf:d7:ac:41:e3:28:d5:43:d1:88:1b:2e:bc:c8:
90:00:b8:aa:4e:51:e2:08:37:f3:cb:33:33:27:2c:84:09:c2:
0c:9f:70:66:7e:ea:a1:61:1c:78:c3:ca:c7:fd:01:bb:70:c3:
14:d7:6c:1b:99:11:b8:fd:e6:cf:55:f1:ee:d1:f5:96:bd:6b:
33:8d:66:ac:6c:89:a3:5c:1b:50:d2:a2:f4:4d:75:82:91:c0:
48:e8:ba:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:09:20 2026 by rpki-client