Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
File: UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft (raw, json)
Hash identifier: 4gwsjrhlqUbvrXMRb+R6aqoX2Rn+12KWY0v6v2NEav4=
Subject key identifier: DC:24:DF:66:54:BA:7F:8C:02:38:6B:16:A0:0B:9D:E9:1F:D6:18:B7
Authority key identifier: 52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
Certificate issuer: /CN=52f941173564a09b7cf8efdd9875614262a7dd61
Certificate serial: 019D9A3E5525229E7CC40FB4CCDE194F6F56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
Manifest number: 0FA8
Signing time: Fri 17 Apr 2026 07:01:09 +0000
Manifest this update: Fri 17 Apr 2026 07:01:09 +0000
Manifest next update: Sat 18 Apr 2026 07:01:09 +0000
Files and hashes: 1: UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl (hash: bPpU7QvMh/ktg54rFok2TrAXgmxxWv/E1XEDWAKH0VQ=)
2: iAlVsYAfeyXYz_1uMV60y2Ryfds.roa (hash: jtM3bdjEHbWHHyELEbQ22EQKZ+IZ7PnI556Qy41j5xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:55:25:22:9e:7c:c4:0f:b4:cc:de:19:4f:6f:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52f941173564a09b7cf8efdd9875614262a7dd61
Validity
Not Before: Apr 17 07:01:09 2026 GMT
Not After : Apr 18 07:01:09 2026 GMT
Subject: CN=dc24df6654ba7f8c02386b16a00b9de91fd618b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:37:17:3d:a5:42:4c:36:a3:74:a0:69:ae:45:
73:69:e5:3c:46:84:61:4b:55:25:4a:86:15:24:a0:
f1:dc:7e:1d:be:ab:04:15:38:d4:c4:c9:bf:f1:cf:
cc:7a:ae:19:db:b0:99:3a:92:34:65:b5:66:bf:b4:
32:a0:34:9d:5a:98:7d:99:43:5d:05:c5:be:15:26:
5f:14:0e:7a:b8:e0:5b:af:76:3a:ba:b9:4d:03:bc:
ac:f8:6b:44:a7:cb:fa:0a:76:94:6f:88:5f:10:21:
06:8c:b4:f1:96:fe:ff:d0:8f:cb:b9:91:d3:00:88:
5c:d8:25:5d:85:00:98:93:e9:b5:b2:27:39:bc:ba:
ba:52:72:1a:87:fd:74:30:da:11:59:a0:48:c8:1a:
2d:15:4e:5f:a0:a2:e6:28:6f:ca:37:4b:62:e3:26:
17:0b:aa:a9:06:b0:35:11:8d:4c:36:42:47:ce:9e:
ac:f5:91:a4:8d:94:d3:01:c6:a6:4a:69:b0:e7:2a:
c8:be:c5:0c:ff:93:c1:91:94:fa:1b:90:08:b0:23:
ea:24:71:c8:3d:35:a4:5d:c8:d2:5f:4d:f7:29:67:
79:51:6f:da:83:ab:8c:f9:8a:71:f2:37:c4:ea:5d:
c5:24:49:81:b7:c7:54:14:2d:c2:62:19:4e:b5:85:
e1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:24:DF:66:54:BA:7F:8C:02:38:6B:16:A0:0B:9D:E9:1F:D6:18:B7
X509v3 Authority Key Identifier:
keyid:52:F9:41:17:35:64:A0:9B:7C:F8:EF:DD:98:75:61:42:62:A7:DD:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UvlBFzVkoJt8-O_dmHVhQmKn3WE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/24f509-ec2c-486d-9b01-09d8e493c1f9/1/UvlBFzVkoJt8-O_dmHVhQmKn3WE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:f0:15:af:1a:73:ba:be:71:ad:e0:c8:99:e7:7e:ff:e3:4a:
a7:4c:bd:96:9e:1b:5d:fe:0f:da:31:19:f9:01:c7:3b:66:ca:
be:6a:01:49:3d:4b:b1:f7:6c:ac:08:07:59:fa:8e:23:88:15:
75:d8:b7:41:e8:c2:c3:fd:17:53:0e:61:fe:63:5e:08:04:d9:
70:e9:73:f3:14:5b:c1:ad:4d:2c:b9:a2:4b:d2:c4:ca:2d:90:
96:92:25:e6:03:83:32:79:e2:2c:51:1f:49:6c:b2:d4:df:05:
eb:a1:ab:d8:08:ea:f1:aa:e2:88:b2:d8:92:b2:7c:91:29:b1:
61:24:6f:c8:fe:0d:d8:5f:5a:ec:71:f1:93:6d:5c:6a:f0:4c:
2a:09:60:a7:e4:c2:85:32:84:c1:39:47:b0:56:e6:cc:49:f1:
1f:2f:ae:1f:db:7e:fe:92:90:6c:81:03:d2:1d:00:ff:73:41:
08:12:de:ca:91:4e:69:b2:11:b1:50:bf:25:20:19:78:07:7a:
af:47:a5:49:60:4f:45:47:53:b8:c6:d7:db:9b:11:d1:e5:0f:
1b:fd:cb:b5:4f:2f:d0:0c:a0:0a:86:d4:2a:e1:98:46:cf:63:
11:31:23:a7:8e:d0:f2:e9:a2:ba:0b:8d:c0:8e:a9:2f:06:ea:
07:4f:ee:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:59 2026 by rpki-client