Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
File: UJSiarpxAHYh_VmdU3u3rqreizM.mft (raw, json)
Hash identifier: vhboZq9+2M1eb8nzZjwAAoUAL27Ju/ktV3YnyD1na1M=
Subject key identifier: 20:20:67:03:BD:59:5A:50:17:4A:F3:39:A9:51:E6:C6:18:AA:F6:75
Authority key identifier: 50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
Certificate issuer: /CN=5094a26aba71007621fd599d537bb7aeaade8b33
Certificate serial: 019D9A3E15284F645886FD52E545DBD92043
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 07:00:52 +0000
Manifest this update: Fri 17 Apr 2026 07:00:52 +0000
Manifest next update: Sat 18 Apr 2026 07:00:52 +0000
Files and hashes: 1: UJSiarpxAHYh_VmdU3u3rqreizM.crl (hash: knnaXJOLSowqqGSsCXOFlWkbR9xxBWtVP02NJe5Rq/Y=)
2: dvjppw9s6JficbBL1JualOvAVhI.roa (hash: cPS5/nVNCYfyW3AOLG3yzdZLV0ipLTe96hQ2jMLs1Gw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:15:28:4f:64:58:86:fd:52:e5:45:db:d9:20:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5094a26aba71007621fd599d537bb7aeaade8b33
Validity
Not Before: Apr 17 07:00:52 2026 GMT
Not After : Apr 18 07:00:52 2026 GMT
Subject: CN=20206703bd595a50174af339a951e6c618aaf675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:50:91:6e:b0:1a:a5:c4:97:35:a3:e4:51:dd:
1d:99:36:6b:cb:78:ae:8e:c3:30:38:eb:a2:9b:4b:
c3:cd:17:0f:bd:f6:ea:c1:c0:70:71:2f:85:1c:bb:
98:84:a1:5d:e5:fa:3a:54:55:09:28:2b:4c:fe:ed:
ee:e7:05:07:bf:5f:54:6e:9f:44:b5:0a:28:4a:6a:
85:13:a4:c6:d2:e9:4a:f2:ba:8f:9c:91:2d:b1:05:
30:e3:88:08:c4:51:05:f4:a3:5e:f3:09:bc:0b:2a:
c0:f7:08:a7:40:b8:f9:01:f6:41:ae:eb:a0:0d:34:
53:c9:52:ab:f1:07:71:e8:a9:98:e0:67:ff:63:03:
8b:2a:5a:f4:e1:80:aa:77:92:59:fe:f5:e5:1c:2d:
90:fc:cc:eb:ba:e4:5b:82:d5:7b:43:e1:22:8e:a0:
3a:ba:a3:f5:a4:c9:99:f7:73:41:ca:d7:39:b3:cc:
75:67:36:85:6e:47:be:ee:b4:a6:a1:8d:13:a9:1b:
22:55:fa:04:ab:4a:60:d4:81:93:66:bc:49:36:7a:
ed:d6:dd:a9:64:09:d7:e2:a4:4a:f0:0d:c8:4c:ea:
d5:9d:96:93:f5:cb:f2:65:77:b2:24:74:81:90:10:
2d:49:a9:c1:fc:77:f4:c0:e3:41:05:ad:32:8f:78:
af:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:20:67:03:BD:59:5A:50:17:4A:F3:39:A9:51:E6:C6:18:AA:F6:75
X509v3 Authority Key Identifier:
keyid:50:94:A2:6A:BA:71:00:76:21:FD:59:9D:53:7B:B7:AE:AA:DE:8B:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJSiarpxAHYh_VmdU3u3rqreizM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/9fce78-4f9d-4847-b759-b451e477b9c2/1/UJSiarpxAHYh_VmdU3u3rqreizM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:dd:ab:f9:e6:75:5c:b1:02:c6:ca:c9:02:a3:5b:8d:70:b4:
7f:f0:fa:2f:18:57:94:32:5b:81:1e:17:3c:fd:ac:0f:90:e8:
63:e0:72:93:5a:4b:b9:bb:14:57:51:d8:a8:a3:5c:27:22:ad:
9b:bc:95:05:1d:c6:5c:28:57:65:d6:e0:f7:ba:03:7a:ec:ea:
9c:6b:58:b9:9f:21:1c:a7:81:00:74:c4:b6:5e:6f:d7:f9:0e:
fe:20:bd:9a:ca:29:45:ea:26:30:5c:57:4b:0c:4e:47:79:ee:
8a:44:37:04:ee:05:c0:a0:e2:2b:b4:0d:c8:b9:fc:c9:78:36:
dc:c5:a5:f3:42:87:cd:f4:c4:5b:de:2e:d9:0a:38:b6:25:cf:
61:20:eb:dc:13:81:2f:93:44:e9:07:ac:26:41:64:0c:c9:67:
e5:e4:b9:fb:56:a7:73:09:db:d5:29:0c:c2:70:da:33:96:1e:
55:e6:e7:aa:6c:8b:2b:82:97:63:bb:6c:e1:d0:18:c4:02:e8:
b0:5d:b9:8e:8e:4b:0e:60:e9:bc:06:2e:12:31:be:75:69:a8:
a9:54:d1:f7:98:4f:35:57:81:42:0d:24:8c:1c:5a:f8:0b:9c:
72:c8:b1:b6:e8:da:c9:1d:54:c7:66:52:8e:27:73:58:04:d3:
70:d9:ff:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:20:32 2026 by rpki-client