Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
File: uRHH7b8dPMT7B1OBo392JWuHKF0.mft (raw, json)
Hash identifier: l0ZrtnoKopVGavCmrDCGSFTnFYIWE8QCoO51dVkCgK0=
Subject key identifier: 48:81:5E:F1:B8:28:7C:89:90:0C:98:9A:DD:57:FE:07:0A:F5:CF:12
Authority key identifier: B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
Certificate issuer: /CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Certificate serial: 019D98F50DC78F02E6008E2C5C3DE34C1CA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 01:01:29 +0000
Manifest this update: Fri 17 Apr 2026 01:01:29 +0000
Manifest next update: Sat 18 Apr 2026 01:01:29 +0000
Files and hashes: 1: 0niShbwHtinfdOcyX-eB9nvMN5U.roa (hash: NxNRyO/CDa98+QF8PESlbVbO+c6T2pxgQCeBwyf4+1Q=)
2: greq7WY7GiIu5wsAhwnBREui5Zw.roa (hash: iT6mrR2gyIJ44Vu53Oggr+gcfc4YnEqZltQEnS0ZISU=)
3: uRHH7b8dPMT7B1OBo392JWuHKF0.crl (hash: x0/v7cNU+f3qLma2nsOUTkJ/GPEVJR4z7foH7Q8Vj/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f5:0d:c7:8f:02:e6:00:8e:2c:5c:3d:e3:4c:1c:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b911c7edbf1d3cc4fb075381a37f76256b87285d
Validity
Not Before: Apr 17 01:01:29 2026 GMT
Not After : Apr 18 01:01:29 2026 GMT
Subject: CN=48815ef1b8287c89900c989add57fe070af5cf12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:86:57:90:a3:52:1a:a9:cc:84:79:31:65:95:
25:51:98:c7:68:19:45:4f:02:62:90:92:32:16:90:
34:b7:c7:d4:f9:aa:21:f8:ae:fd:5d:57:db:73:46:
fe:cf:56:e9:c3:4f:d4:ce:f9:a7:76:19:54:c6:43:
0f:a4:56:fe:d3:25:c3:8d:1d:39:d2:07:4b:c5:c4:
6f:e9:a1:ab:ed:41:d6:a2:ce:22:62:09:c3:19:d8:
af:bd:53:03:1e:d9:4b:cc:be:90:4a:f0:6e:e0:97:
1c:52:1e:f2:cd:a3:82:9f:01:20:15:9c:88:07:d6:
60:bc:ba:97:41:f1:df:45:3b:02:fc:5c:ab:d0:4c:
40:c2:84:8d:2c:6a:86:c3:5c:40:df:cc:c5:20:48:
eb:3b:d4:ec:3d:e7:b8:13:fc:a4:e0:06:66:c8:09:
57:ff:a1:96:1f:f8:3f:80:50:1d:11:0b:5d:58:75:
95:1c:88:05:91:ec:94:56:29:67:83:63:48:4d:f7:
a8:9e:b6:6a:4f:86:b2:2e:0a:ba:5c:fa:d8:7d:29:
a6:e6:72:80:62:ca:62:de:a9:8d:e7:a9:94:14:08:
63:5c:8a:ab:e7:b8:9d:78:71:cc:f5:b4:7a:b5:c9:
c7:7a:05:68:f2:7e:d8:1e:64:49:d9:9c:82:45:5f:
60:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:81:5E:F1:B8:28:7C:89:90:0C:98:9A:DD:57:FE:07:0A:F5:CF:12
X509v3 Authority Key Identifier:
keyid:B9:11:C7:ED:BF:1D:3C:C4:FB:07:53:81:A3:7F:76:25:6B:87:28:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRHH7b8dPMT7B1OBo392JWuHKF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/23b148-e0dd-4fa6-af44-613017886e8b/1/uRHH7b8dPMT7B1OBo392JWuHKF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:fd:54:f3:de:4d:e6:34:71:62:d7:cf:43:0b:2c:74:7b:5c:
1a:04:94:e2:df:21:30:31:32:21:ba:f1:43:46:0a:23:43:3d:
56:84:12:8f:b1:3b:66:3a:0c:79:84:f7:e6:e4:bc:79:64:8c:
2b:f4:47:b7:f7:89:ac:f5:89:57:33:b1:a4:03:c6:4b:8c:29:
ce:62:0b:b8:fd:a1:21:a3:62:12:cf:09:5c:2a:7b:c5:b6:db:
f5:ea:47:b7:51:9d:a4:6a:db:48:00:04:cb:c5:71:4d:88:d2:
a8:41:75:c5:ba:49:f4:3d:94:6e:bc:8e:f7:14:46:a6:8c:38:
f5:29:bd:bf:08:b3:ea:c8:4f:3c:52:54:be:34:da:42:f1:8a:
8f:11:e5:0e:b5:fa:df:a2:d8:84:4f:be:d9:13:9f:ca:b2:06:
c1:77:2d:1e:d5:e8:32:79:d2:e5:23:b3:42:ff:d0:23:1f:2a:
15:9f:f7:8f:6b:17:24:3b:95:a3:4e:ef:7c:e8:c5:f5:c8:e0:
a8:90:71:29:4a:97:eb:39:2e:62:1b:35:3f:97:95:ca:a0:fd:
3e:4a:60:ba:f3:79:fa:d0:02:6b:e6:b0:4e:77:c2:26:66:db:
5a:0a:64:05:dd:d2:4a:e4:48:20:81:83:7b:66:ad:f3:9b:93:
bb:95:b4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:00:30 2026 by rpki-client