Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
File: uQ9AvbnmZHaekXWQ942253GT11E.mft (raw, json)
Hash identifier: 2wPJiNigJIulMhfVn8WN6bkrMe920YCo6XyAYKIBRTs=
Subject key identifier: 31:92:92:A4:3F:7A:60:C8:12:BD:AE:D8:4D:EA:8E:AE:8C:DD:B6:FD
Authority key identifier: B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
Certificate issuer: /CN=b90f40bdb9e664769e917590f78db6e77193d751
Certificate serial: 019DA41D1E1340047FECD8707E4217AB1986
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
Manifest number: 0B84
Signing time: Sun 19 Apr 2026 05:01:04 +0000
Manifest this update: Sun 19 Apr 2026 05:01:04 +0000
Manifest next update: Mon 20 Apr 2026 05:01:04 +0000
Files and hashes: 1: uQ9AvbnmZHaekXWQ942253GT11E.crl (hash: ZBvylbCPYQVjRsozYnDTse1a2GQM7jUdQ/7dFsS/VxE=)
2: xTTTaBdVu0SeLwv0Gx01IddtE50.roa (hash: ivpMuo01dDNrw/GCqkgH0f4L7FOwQRX4fhYsRXB+ZA8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:1e:13:40:04:7f:ec:d8:70:7e:42:17:ab:19:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b90f40bdb9e664769e917590f78db6e77193d751
Validity
Not Before: Apr 19 05:01:04 2026 GMT
Not After : Apr 20 05:01:04 2026 GMT
Subject: CN=319292a43f7a60c812bdaed84dea8eae8cddb6fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c0:c1:6a:a7:9e:2b:88:bd:d0:cc:92:1d:47:
fe:f1:f2:2d:3e:02:a6:f4:e4:80:be:7c:a3:69:70:
db:e3:25:5b:f2:52:73:e9:66:e4:0a:e6:95:a3:b0:
50:d1:c8:7c:c0:31:a6:71:8b:0c:24:f5:54:5d:52:
1a:31:dd:26:fd:62:d3:08:d0:82:d5:02:43:20:e5:
b6:9a:0a:3d:c2:8a:c3:91:bc:c3:54:7f:b8:87:8f:
48:45:56:be:ed:39:67:79:db:59:0b:a0:78:9b:a8:
40:98:4e:61:a7:07:55:70:e2:dc:35:fa:00:9f:71:
8a:1f:10:da:74:ea:b9:95:fe:2e:6f:a9:fe:f1:8b:
1a:64:b3:d2:73:75:13:4c:56:c1:3e:cf:47:d5:38:
7d:9a:5a:b2:28:e7:8d:a8:a5:d9:38:c4:76:44:c5:
ce:19:11:73:ed:d7:91:1d:74:39:37:87:d8:c7:35:
d8:84:45:99:19:cd:8f:da:b2:fd:60:d9:3d:c3:9f:
97:2a:45:ac:fb:45:f5:26:b6:c6:a2:70:d7:3c:95:
09:b5:59:2e:9a:40:9e:51:d3:ec:0e:db:36:07:44:
4b:d1:43:2a:ff:64:49:65:a6:c4:79:05:1b:02:c1:
f2:7b:df:ca:5d:f9:9b:e6:15:30:05:55:fd:f1:dc:
81:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:92:92:A4:3F:7A:60:C8:12:BD:AE:D8:4D:EA:8E:AE:8C:DD:B6:FD
X509v3 Authority Key Identifier:
keyid:B9:0F:40:BD:B9:E6:64:76:9E:91:75:90:F7:8D:B6:E7:71:93:D7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uQ9AvbnmZHaekXWQ942253GT11E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/b92cc3-ddf1-43cb-b4b1-4154da5ceb9b/1/uQ9AvbnmZHaekXWQ942253GT11E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:db:9b:21:7a:98:1e:e1:30:77:da:9c:4b:7f:a3:e7:61:9e:
4a:05:1b:6e:93:28:d5:4b:59:84:ec:3a:49:09:04:3f:1a:c7:
e6:e2:b5:08:08:8a:14:9a:df:9e:7a:e3:f0:86:3c:f6:e8:8d:
83:4a:2e:23:50:e4:19:39:8e:9d:b8:71:9f:29:43:87:94:27:
7e:c6:2d:77:04:b5:1e:d6:af:3f:aa:de:25:8c:2d:b3:97:50:
41:b3:d6:73:3d:25:30:8f:e7:6c:5f:a0:26:ba:c2:24:f8:92:
c5:f7:bf:62:fb:b4:25:ee:f4:b2:5e:b4:c7:23:5b:12:93:52:
73:f4:7a:f4:6c:dc:70:53:6b:fb:3a:f6:5e:2d:7e:f0:ff:11:
eb:e7:b0:11:a0:0b:bf:ef:da:53:2d:da:a1:2a:6a:56:ec:71:
99:85:32:f9:dd:de:b8:79:dd:a4:7c:94:4d:43:53:1f:0b:a7:
c5:86:e3:7d:28:b8:55:01:bb:a6:0a:89:99:b0:c4:28:79:59:
4c:cd:5c:6a:31:6b:40:80:6f:1e:a4:8b:df:b6:10:16:5f:12:
02:b3:ea:ef:fc:9d:08:fe:bd:a1:ca:62:e8:68:c8:80:31:9b:
3c:38:16:f6:a0:76:7d:5b:de:39:03:db:98:a7:98:f7:35:22:
ae:5f:9e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:55:02 2026 by rpki-client