Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
File: Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft (raw, json)
Hash identifier: la12Sz4+cbBqSH3V4JgRAo6KTyOxdRBduySlKeVEQB8=
Subject key identifier: 68:0E:79:5A:CC:82:8C:D8:8E:61:0F:97:A4:CA:4F:FD:75:D9:E3:B6
Authority key identifier: 52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
Certificate issuer: /CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Certificate serial: 019D9A071B93875E1B284ADDDD6FF251D50F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
Manifest number: 1763
Signing time: Fri 17 Apr 2026 06:00:50 +0000
Manifest this update: Fri 17 Apr 2026 06:00:50 +0000
Manifest next update: Sat 18 Apr 2026 06:00:50 +0000
Files and hashes: 1: RrsaAahk0Vba-XkVgGrcvV0uLOU.roa (hash: CIPZFtJdaOw/Ie6ppEcG6OhrO0JGBP2pAR46eIvpN8g=)
2: Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl (hash: fhviqHGA8dpNZl9rfksSVONHfi8LWglYUKIH1ATehDg=)
3: _8f64H6kLzJHWcOIk3oSyh4YXRM.roa (hash: n4LZZXz9oD2l4x9qTuFFYxB9HvtLZ63oNauDlgkiRcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:1b:93:87:5e:1b:28:4a:dd:dd:6f:f2:51:d5:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528d5814c7156420dec3a3f7e526ef0f8333eef6
Validity
Not Before: Apr 17 06:00:50 2026 GMT
Not After : Apr 18 06:00:50 2026 GMT
Subject: CN=680e795acc828cd88e610f97a4ca4ffd75d9e3b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:d1:f5:52:3c:7c:13:35:97:53:78:e8:d8:bb:
92:d0:5a:1c:78:6f:0d:6b:fc:d2:86:ea:c0:4b:49:
82:87:c6:0a:26:cd:78:c7:c4:4f:3d:4f:84:6b:00:
4e:00:a9:a2:cd:0f:9c:03:ec:2d:de:6f:8d:86:71:
54:86:b8:5f:95:67:08:43:b8:9f:21:49:e7:b5:4c:
23:e5:10:cd:d2:93:1c:0c:3c:99:c0:77:cf:49:20:
6b:37:4e:aa:47:04:01:86:a1:06:41:7d:bd:3b:c0:
c0:28:25:ed:07:2a:d5:55:34:e1:1a:2c:a0:75:3e:
d1:3c:7f:ae:2e:52:33:f8:3e:61:49:bf:e9:9e:f1:
e6:4c:64:35:57:fe:30:1e:a3:dd:f5:4c:17:ad:f3:
a7:86:ec:f1:f0:1b:44:89:b7:76:70:f8:6e:af:14:
4b:f5:09:6a:71:01:42:89:ea:a6:38:e6:c4:f4:2d:
0e:e3:2d:cb:f9:3a:07:4e:9a:7c:8d:12:a5:c1:86:
77:fd:b3:41:f4:87:80:58:f7:c4:0b:00:b6:51:78:
9e:b2:f4:9d:7e:5e:fc:f4:c2:ce:85:d5:db:3a:66:
bb:2f:3e:c9:ab:73:eb:7a:c9:1f:06:e7:2c:57:21:
93:49:7a:a1:be:32:63:d6:ed:8c:eb:34:2a:20:16:
2c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:0E:79:5A:CC:82:8C:D8:8E:61:0F:97:A4:CA:4F:FD:75:D9:E3:B6
X509v3 Authority Key Identifier:
keyid:52:8D:58:14:C7:15:64:20:DE:C3:A3:F7:E5:26:EF:0F:83:33:EE:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uo1YFMcVZCDew6P35SbvD4Mz7vY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/beac09-c49f-4c70-9818-431c39bb7b38/1/Uo1YFMcVZCDew6P35SbvD4Mz7vY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:01:0e:c1:49:2c:d2:ad:72:16:6b:62:a2:16:79:49:cb:c5:
89:79:20:eb:cc:1b:7e:23:36:00:34:91:37:25:04:b3:ec:c9:
a9:a7:c4:fc:70:cb:fd:fc:04:f3:be:c7:84:d1:f7:0a:db:05:
92:c4:3e:b3:00:ec:e5:bc:76:60:e3:a1:6b:49:3c:02:cd:18:
cd:c0:0d:0b:0d:af:2e:3c:8e:18:2f:b5:ef:dc:2f:4f:a3:51:
eb:4f:e2:20:70:c1:ac:d9:54:e7:eb:d4:24:33:5b:02:c3:c7:
75:c9:26:cb:4f:df:ec:40:c9:b2:a5:c2:5c:a3:18:a6:7e:9b:
be:c3:6a:16:53:ab:4d:ad:c7:a4:50:93:a8:3b:e8:17:ba:47:
a2:ed:9c:bf:fb:db:db:4e:3d:4a:12:cb:5d:ac:d5:ea:6d:37:
f5:13:91:53:95:25:e6:90:19:af:d6:62:74:ae:47:8c:c3:d3:
c1:ca:a8:28:34:3a:ce:90:1f:ed:37:69:a2:90:0b:af:0e:88:
57:c0:be:df:c2:bd:c5:c4:4c:64:85:dd:85:1c:51:00:69:2a:
a3:4b:81:eb:53:b9:a1:30:c5:01:12:81:92:ec:22:b2:ed:47:
52:35:4e:15:27:8c:d4:e6:dc:25:c1:fb:84:db:64:5e:c3:56:
5e:cc:07:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:53 2026 by rpki-client