Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
File: rUZjafOSfaDIn7X0s-qeMk-SioQ.mft (raw, json)
Hash identifier: ixMHB4qFuxs9okd3tWmeXrFrJjBHtZOUL5L/bJdvGFg=
Subject key identifier: 4D:C2:14:8D:FE:A3:BA:AD:AC:3F:05:A9:9D:B8:62:A0:69:15:AC:A4
Authority key identifier: AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
Certificate issuer: /CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Certificate serial: 019D97742EC89D4442E62B0B195FBEB1894F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
Manifest number: 08D7
Signing time: Thu 16 Apr 2026 18:01:06 +0000
Manifest this update: Thu 16 Apr 2026 18:01:06 +0000
Manifest next update: Fri 17 Apr 2026 18:01:06 +0000
Files and hashes: 1: _R9reWa8MF6i_0GtsC9MqO5XdM0.roa (hash: RpCmFg94gtFIxSyeDWhJqoErRSnSfBXY9f+R3zExZ1k=)
2: rUZjafOSfaDIn7X0s-qeMk-SioQ.crl (hash: HnVfEY4KcTw8upghXZUOtIVHD3GQP2N2YnifojpQzLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:74:2e:c8:9d:44:42:e6:2b:0b:19:5f:be:b1:89:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad466369f3927da0c89fb5f4b3ea9e324f928a84
Validity
Not Before: Apr 16 18:01:06 2026 GMT
Not After : Apr 17 18:01:06 2026 GMT
Subject: CN=4dc2148dfea3baadac3f05a99db862a06915aca4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:26:6b:2c:76:a9:e6:8e:28:a7:f0:de:49:17:
93:4d:b1:02:cf:b0:9a:02:d1:d8:6a:31:24:88:fb:
ab:5c:92:4f:6e:0d:91:34:7c:e6:25:65:2a:85:29:
f3:a9:a6:da:e0:9b:59:06:4b:20:92:86:7f:7a:1c:
11:91:87:57:3b:b7:cc:e4:3d:b2:ca:35:30:c8:5d:
81:9e:55:2d:a6:1d:12:10:b7:17:b9:24:78:9a:a3:
65:29:3e:85:3c:29:29:02:da:b5:59:89:d7:e1:52:
c5:53:2f:85:8a:f2:a9:7c:df:bd:57:12:17:90:53:
ed:23:96:97:48:88:a5:3b:03:00:dd:7b:b5:eb:7c:
ae:70:92:9c:d1:36:c6:25:40:68:f5:32:dd:d6:cf:
b0:16:53:ab:1a:9c:24:25:b8:a7:07:40:db:65:8e:
f0:21:cd:c7:a7:86:3f:35:6e:9d:db:dd:32:e7:89:
39:07:92:87:ff:8a:31:65:a9:36:70:ea:4c:ba:d0:
69:92:47:ef:84:a4:9c:27:a2:af:69:fd:3a:1b:df:
0a:d0:50:ae:42:ea:43:5c:c0:70:4c:88:e6:43:34:
d9:84:62:80:5a:b2:cd:c8:b7:42:dd:f1:fc:47:dc:
64:4c:2b:fd:35:45:eb:6c:bc:a6:42:ae:f3:78:a5:
97:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C2:14:8D:FE:A3:BA:AD:AC:3F:05:A9:9D:B8:62:A0:69:15:AC:A4
X509v3 Authority Key Identifier:
keyid:AD:46:63:69:F3:92:7D:A0:C8:9F:B5:F4:B3:EA:9E:32:4F:92:8A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUZjafOSfaDIn7X0s-qeMk-SioQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/27c6a1-1c94-4a49-8e3d-9fd503970ff0/1/rUZjafOSfaDIn7X0s-qeMk-SioQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c2:e1:e3:fa:ff:9a:36:3f:51:b4:2e:0a:7a:1e:b2:61:78:
e3:89:6c:7f:de:ae:cb:f4:0a:86:86:e5:da:b2:f4:b8:87:29:
0a:ac:91:88:5b:9a:31:42:c7:4c:b8:50:7a:aa:82:25:18:be:
e5:18:cf:eb:6f:45:1f:5c:24:8d:98:d1:30:77:92:9d:a0:48:
3b:2a:81:1f:5c:fe:71:9b:17:a1:43:6b:ae:40:6d:5e:99:6e:
dd:e1:79:18:99:ce:04:44:a8:2e:5e:61:e9:e9:90:6b:ef:8c:
3c:c7:6d:17:41:12:64:cc:88:af:21:bc:11:85:be:73:2c:9d:
9b:64:53:5b:6c:ff:1d:90:ab:9b:6d:3f:e9:e9:b0:d8:39:ee:
83:00:c9:59:60:bd:f4:29:68:c4:4f:dc:7f:7c:0c:75:07:f3:
a1:e4:ac:27:d6:2d:29:86:e1:f3:36:04:b1:02:b0:d8:4a:12:
c7:78:66:23:9d:e1:c0:a2:42:d2:10:df:e5:ef:50:11:6c:3b:
b4:bb:99:82:e9:03:ea:56:e5:3f:81:81:3e:2c:65:9f:82:32:
47:4f:61:d3:d4:cc:a1:25:1f:65:59:71:c1:f9:ab:c2:24:1d:
4f:3b:e5:84:b2:80:7d:5d:7b:1b:74:42:e4:1b:6c:82:05:3c:
57:89:ec:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:39 2026 by rpki-client