Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
File: uakIi7QgHORtjrg9yfOMeLjzvhs.mft (raw, json)
Hash identifier: Okbs7D0hm8cFJRr15reIwByZkW0f8DLbYLCyRGNwpCk=
Subject key identifier: 53:78:E5:E0:F0:1E:DD:C0:2E:58:09:22:F7:3B:CA:52:D7:43:5B:78
Authority key identifier: B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
Certificate issuer: /CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Certificate serial: 019D9962C5D4F5C2D676A0B8610B4AABD6A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
Manifest number: 0FF8
Signing time: Fri 17 Apr 2026 03:01:20 +0000
Manifest this update: Fri 17 Apr 2026 03:01:20 +0000
Manifest next update: Sat 18 Apr 2026 03:01:20 +0000
Files and hashes: 1: l2OwBfKBqnL4zNFyyaKM_FGb5e8.roa (hash: toz7u9OavVUGLaYysHXeqXBkXKxUrSmYpku7Siccj48=)
2: uakIi7QgHORtjrg9yfOMeLjzvhs.crl (hash: xekFzS7NrKukRozkq2ge3OOItsAIQtX2gMegXAZltf8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c5:d4:f5:c2:d6:76:a0:b8:61:0b:4a:ab:d6:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a9088bb4201ce46d8eb83dc9f38c78b8f3be1b
Validity
Not Before: Apr 17 03:01:20 2026 GMT
Not After : Apr 18 03:01:20 2026 GMT
Subject: CN=5378e5e0f01eddc02e580922f73bca52d7435b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:2f:73:23:f3:38:d2:a5:00:79:ef:80:1c:
1f:74:8f:d3:ae:c9:79:f6:01:1a:69:7a:7f:2f:c7:
58:c3:af:18:d3:99:c1:bf:b5:a5:cc:88:3e:30:4d:
42:ba:0a:b7:01:9b:b1:10:46:98:c8:64:e9:d6:3c:
5a:e8:9f:85:e2:5b:6c:6b:ed:a9:bb:ef:a0:c9:c4:
96:53:ca:a1:72:6c:41:a8:af:dd:66:4f:72:84:77:
23:52:7b:83:8e:eb:94:03:7a:e7:34:69:aa:01:c4:
7d:12:e2:d7:3b:8a:05:76:37:52:09:64:2a:dd:ad:
c2:d2:01:b8:69:91:be:87:df:99:0f:ed:e0:e4:8b:
a9:af:5f:92:6e:04:bf:33:3d:22:8b:63:c6:f2:84:
e2:c9:76:f0:ea:3e:32:51:f0:05:04:b7:12:b2:5b:
a6:d4:be:83:f2:82:f6:6a:9d:43:6b:04:0d:13:60:
77:41:f8:88:a9:7e:46:b8:fa:37:7b:52:c8:cb:d9:
d6:9f:23:41:7f:d9:4e:08:1f:00:09:d6:00:d6:a9:
9e:c4:63:c3:32:07:9f:e2:9a:f5:77:cb:9e:26:9c:
fc:46:5b:a5:62:9c:c6:be:c5:c0:af:e3:24:67:15:
d9:f8:b9:97:7d:ca:f0:c5:5d:28:5d:2b:50:5a:d1:
39:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:78:E5:E0:F0:1E:DD:C0:2E:58:09:22:F7:3B:CA:52:D7:43:5B:78
X509v3 Authority Key Identifier:
keyid:B9:A9:08:8B:B4:20:1C:E4:6D:8E:B8:3D:C9:F3:8C:78:B8:F3:BE:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakIi7QgHORtjrg9yfOMeLjzvhs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/ccaf34-3dee-4fe2-b2fc-8dd453ab423d/1/uakIi7QgHORtjrg9yfOMeLjzvhs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:21:a9:1f:41:dc:e0:53:db:62:03:d2:da:92:0e:49:62:a0:
25:e4:d5:14:af:96:ff:3c:3f:52:06:28:97:30:f1:79:3b:02:
db:b2:f1:bc:f6:4b:86:46:bf:71:60:57:5f:a7:54:3b:16:7e:
38:6a:aa:87:81:eb:ec:8a:3b:e8:b7:09:e7:9c:a3:66:a0:d3:
cb:2e:ee:45:13:0a:b4:e6:fe:8b:7c:93:d7:af:d4:f2:f1:1f:
12:fc:22:0f:e1:90:86:0c:3d:e8:c9:19:f7:9c:71:9b:46:38:
7f:0e:05:68:0c:9c:90:55:db:38:45:b4:c8:1f:61:26:bf:b6:
b3:58:a6:e0:13:03:3f:78:c8:e5:5f:1e:ea:e0:58:7a:df:83:
ee:5d:20:b9:46:01:0a:ee:eb:3b:c8:d7:d7:eb:f9:d7:5a:e4:
91:33:70:a3:cf:f6:51:47:29:f2:40:a3:b1:4e:b8:38:35:e0:
03:88:8d:45:d9:93:a1:e2:b6:e0:ea:99:62:22:ef:5f:83:71:
fa:0b:43:21:ee:c3:9b:20:7d:78:98:fa:92:39:26:1b:ba:4b:
58:24:4a:12:40:72:0f:56:95:59:f1:eb:6b:e9:2e:a1:a6:3b:
36:b8:20:c4:9a:20:d1:55:8e:a5:81:de:be:d2:7e:3d:6c:4f:
af:42:c5:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:08:24 2026 by rpki-client