Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
File: UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft (raw, json)
Hash identifier: Cm/5h6SMPoDUJXsQYLzQc2aBZg2l84tsGZDxCQYi4ME=
Subject key identifier: B6:ED:0D:0A:A7:5E:CB:6F:6B:D6:BA:4B:04:EB:C8:A3:5D:9C:03:60
Authority key identifier: 51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
Certificate issuer: /CN=510b419f0c17b4c8be217f64388d268d14dc261e
Certificate serial: 019D9999845491BDE0425FBFEAE05F29DDB7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
Manifest number: 13E7
Signing time: Fri 17 Apr 2026 04:01:07 +0000
Manifest this update: Fri 17 Apr 2026 04:01:07 +0000
Manifest next update: Sat 18 Apr 2026 04:01:07 +0000
Files and hashes: 1: 5LP1tFsYxrSifJx4g3QCwnwqEE0.roa (hash: KN3CpVDHemmKFo5Hvty6pP9rTH9gXzF1gwHa0T5DRaI=)
2: Oyp5RiUIb7ZqQLR77tkeZhEy5Y4.roa (hash: pR+eHKxdsqOeJhrr2qYTxhhUH69JVErIDEpF2ZKp/Bc=)
3: UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl (hash: xGJLjbtgzg4DZESaAexLV5Gaixb6u6HRwVul3Cbc/t4=)
4: Vvg_eRMXx1wM0ykfa7tuZT2JbiU.roa (hash: y54xWJIZgynMkSzzpbyHXRwEQLJEaYo5XZHrl4z8vdo=)
5: XEGrGY29N2_6fdEZQllMn9S3ctY.roa (hash: FoInU+oGSpZKQRSWi66xB6iIQ2i/avIu/9TIfHo6uB0=)
6: c72wk2piK98wT4mJw8_ZtS1RplA.roa (hash: sWf1C2L00m53zAy7UBc4ltRNb1KloYEQlgh8zb6I1Tg=)
7: q5ijRhsoQMXQqvexZ__tLFhWfbE.roa (hash: RKODKNUK1hXqxPnqoVYe1vULFOrntBOl4JYsmeK1KQ4=)
8: uUz_sLM3KsC9uXXY3-UTgKhMUC0.roa (hash: 3lqaJbLuu76YzS5K2R73vb0E1obPhoOUMrSjJHQL5uU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:84:54:91:bd:e0:42:5f:bf:ea:e0:5f:29:dd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=510b419f0c17b4c8be217f64388d268d14dc261e
Validity
Not Before: Apr 17 04:01:07 2026 GMT
Not After : Apr 18 04:01:07 2026 GMT
Subject: CN=b6ed0d0aa75ecb6f6bd6ba4b04ebc8a35d9c0360
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:16:90:11:00:53:1c:93:3e:92:5b:3d:4d:84:
11:a2:2f:36:18:a9:c1:e7:42:b5:9a:41:ba:b0:8b:
13:df:c3:7f:ec:1e:e8:6d:35:ad:e3:38:91:41:66:
d9:52:76:dc:c1:f3:1f:c1:ad:57:04:a8:5a:4d:1c:
e3:55:cd:fa:f8:d4:0e:f2:8a:10:a8:34:c0:22:7a:
61:11:45:20:55:e1:df:b8:98:39:72:a5:dd:17:57:
c1:3d:e4:df:fa:97:84:3c:35:b1:00:46:83:9f:ed:
11:77:80:2b:ab:61:6f:dd:47:d0:ad:cb:70:17:00:
8a:59:5d:b0:3d:d0:da:ba:f7:4a:e8:31:b3:10:d5:
16:65:1b:43:29:bd:96:14:79:c7:eb:0d:cb:58:17:
b2:04:86:f3:02:14:5c:31:d4:c7:d0:ee:0b:af:8c:
f9:7a:2f:9a:ec:a4:89:02:5e:38:4e:64:f3:54:2d:
7c:6e:2b:d7:74:58:0d:18:d2:cb:25:1d:04:66:c8:
22:58:71:e2:e1:e9:d3:89:13:fe:81:6b:d3:00:69:
34:f3:61:8a:a2:35:40:ee:ec:91:80:37:c2:fb:03:
62:aa:78:08:5e:01:88:30:bf:3c:d0:ac:5f:02:03:
2b:34:1f:33:60:b4:f9:28:4f:81:fd:72:9a:04:4f:
c2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:ED:0D:0A:A7:5E:CB:6F:6B:D6:BA:4B:04:EB:C8:A3:5D:9C:03:60
X509v3 Authority Key Identifier:
keyid:51:0B:41:9F:0C:17:B4:C8:BE:21:7F:64:38:8D:26:8D:14:DC:26:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UQtBnwwXtMi-IX9kOI0mjRTcJh4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/30cd0a-93cf-45dc-9356-14a09993d671/1/UQtBnwwXtMi-IX9kOI0mjRTcJh4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:3c:a0:2f:f4:0e:3d:66:a7:5c:22:0b:ca:d2:f2:b5:b3:c0:
fb:ab:b8:de:57:6a:03:4d:27:44:bc:27:e9:37:47:a7:38:eb:
6b:77:a0:92:85:2d:e4:03:82:a7:7d:2f:bc:22:19:9f:c1:b5:
9f:58:aa:1a:d5:ee:78:5a:23:14:8f:12:f9:0e:bf:a9:ea:60:
55:04:2c:ea:ff:89:79:88:68:06:41:24:a4:19:ee:b7:27:84:
e9:0a:89:85:f7:8d:15:cd:43:56:e5:e5:ad:57:ec:5a:e3:8b:
1f:b7:81:bc:1e:23:93:ad:de:6a:d3:f0:43:bf:65:6c:d0:eb:
98:6b:c7:a9:0f:f5:a6:ba:ae:4f:f9:55:a8:91:24:82:7c:33:
bd:6e:38:e4:49:e5:b7:1c:40:a1:52:04:dc:69:37:13:f3:9e:
bb:87:45:bb:14:cd:85:c3:42:ea:d5:77:8f:6f:04:b6:97:d6:
4b:8d:51:72:99:95:48:5d:cb:51:1f:33:42:7a:ad:6f:ba:4c:
39:bf:08:f6:e6:51:8c:0f:a6:81:ac:51:6f:a0:24:62:1e:5b:
0f:ca:a8:c9:97:b5:eb:83:1c:07:98:c2:3f:81:fb:26:47:6b:
a6:f3:94:62:ee:d4:fa:48:c1:ce:39:79:44:0a:ef:b9:95:e5:
cd:45:5e:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:06:46 2026 by rpki-client