Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
File: uZndWsAyJYRLa0kPkvA0fM8JZwg.mft (raw, json)
Hash identifier: UjUOB1n3sWqDcPhLP2koyC12tf2kK6EZWgrg8XbZzUI=
Subject key identifier: 9B:E9:07:16:78:5E:12:F5:E2:AC:1A:FF:91:0F:4B:D2:BA:76:74:7E
Authority key identifier: B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
Certificate issuer: /CN=b999dd5ac03225844b6b490f92f0347ccf096708
Certificate serial: 019D992B702DEAF5DFD9D9DA98A293030F54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
Manifest number: 16CC
Signing time: Fri 17 Apr 2026 02:00:53 +0000
Manifest this update: Fri 17 Apr 2026 02:00:53 +0000
Manifest next update: Sat 18 Apr 2026 02:00:53 +0000
Files and hashes: 1: 0sG02fRT--XJolYuZ7_jXyMamw4.roa (hash: YsaXqtsrHkKSzKqIrNyEZ6rkNj200yF1XlYMTQ9by/Q=)
2: uZndWsAyJYRLa0kPkvA0fM8JZwg.crl (hash: hT8M7BnsXiHsME6DhHYxHZl9icDFbcQipFhGUKamFtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:70:2d:ea:f5:df:d9:d9:da:98:a2:93:03:0f:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b999dd5ac03225844b6b490f92f0347ccf096708
Validity
Not Before: Apr 17 02:00:53 2026 GMT
Not After : Apr 18 02:00:53 2026 GMT
Subject: CN=9be90716785e12f5e2ac1aff910f4bd2ba76747e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:e8:28:31:27:71:60:d6:ea:13:36:8b:fe:
03:37:48:02:77:dd:d9:0a:ce:8a:ce:d4:5d:5c:36:
17:05:36:89:c3:ca:71:68:d6:95:3d:26:07:ed:1a:
06:f8:a6:c1:b0:ab:62:d1:b8:fa:b1:8f:f1:79:b7:
b7:31:03:c1:03:56:99:87:3b:9c:4f:e4:c7:b8:81:
94:04:2c:83:80:fd:19:db:c6:ab:84:c5:8b:6d:56:
b9:44:ba:49:18:a8:60:9d:46:0b:57:8d:e4:f4:70:
e0:07:e3:80:6a:aa:a9:f6:d7:9e:0d:05:27:84:ef:
5c:34:ed:98:e9:36:5e:57:a0:54:e1:d2:3e:1d:3b:
de:4e:27:37:b6:a6:c2:85:d7:03:f9:29:a0:16:f8:
f6:81:f4:e7:d7:4b:52:70:8d:48:7d:28:dd:83:27:
5f:39:51:4e:9c:43:a3:d5:17:11:31:f9:78:13:c4:
be:be:36:6c:bd:8d:c3:4c:4e:6b:14:98:3a:03:4b:
d1:36:00:c5:3a:1a:aa:27:92:0a:cd:8f:64:b6:9f:
c4:19:27:a9:fe:5c:64:ae:0e:bf:2a:c8:b8:98:5e:
39:8f:c7:5b:7e:5c:15:af:89:64:dd:22:66:af:6b:
32:e3:8b:86:84:29:6e:90:d0:eb:5a:bb:31:a8:e9:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:E9:07:16:78:5E:12:F5:E2:AC:1A:FF:91:0F:4B:D2:BA:76:74:7E
X509v3 Authority Key Identifier:
keyid:B9:99:DD:5A:C0:32:25:84:4B:6B:49:0F:92:F0:34:7C:CF:09:67:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZndWsAyJYRLa0kPkvA0fM8JZwg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/c7f05d-35f5-4115-9f7f-fcaaf2ef3601/1/uZndWsAyJYRLa0kPkvA0fM8JZwg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:e7:c7:b1:fc:93:d0:0f:50:fb:85:d7:98:c5:41:e4:4c:5b:
7a:61:0f:a6:f3:dc:80:c4:a6:58:2c:70:b7:cb:c6:42:25:73:
f7:10:69:81:e8:f6:2f:1f:27:46:87:73:58:8d:77:94:40:06:
a0:c2:2b:52:23:5e:96:ae:c9:53:8c:4e:d4:1b:7d:96:87:ae:
ca:c2:c2:25:06:41:91:f5:bf:25:5e:dd:a8:54:2d:54:74:aa:
09:4d:7a:6f:8a:9f:69:ed:16:4a:63:c5:c8:b8:a1:ad:68:c1:
e3:36:1a:7b:fb:7e:80:ca:34:ed:9a:ed:97:b5:97:6e:5d:d2:
cc:d2:f2:d9:9b:fc:8c:0e:3e:31:75:9b:92:64:b5:1d:e4:52:
06:3e:f6:a5:db:52:ce:ea:ef:48:55:af:45:68:7f:dd:46:97:
97:db:4c:f2:c5:e4:41:1b:c6:b8:fb:89:28:61:0a:22:f4:52:
04:6a:85:c2:ca:f2:88:c2:a3:19:91:f0:fa:9f:90:c1:df:54:
7b:33:1e:3e:97:47:31:39:2e:1c:16:34:6d:c2:db:15:84:6a:
92:d6:fb:59:2e:a1:cf:f3:fe:ca:ea:4e:ae:cc:5b:2a:1e:b2:
82:65:f7:b2:9b:f9:30:2f:6e:89:31:5f:8b:16:91:c4:43:89:
0f:b0:e9:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:28:14 2026 by rpki-client