Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
File: _g_UdpyC_7SSkwQelUnZS9EsGhc.mft (raw, json)
Hash identifier: LmRwnU3hKOREP9MKg7Xd6k7hnGNi5aT5Ah6QZo5gJEc=
Subject key identifier: D7:81:17:C4:0D:24:3D:1F:93:32:C9:CB:A8:7D:A3:FA:A8:7F:F4:40
Authority key identifier: FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
Certificate issuer: /CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Certificate serial: 019D9AAC3A25AE51CCAD77E478B0CD78FC63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
Manifest number: 01E9
Signing time: Fri 17 Apr 2026 09:01:11 +0000
Manifest this update: Fri 17 Apr 2026 09:01:11 +0000
Manifest next update: Sat 18 Apr 2026 09:01:11 +0000
Files and hashes: 1: B4JyBpzXmFAaGecPS8XtNq-LmT0.roa (hash: uSeF+NNIJh3wPrQ9CVuNaeVXKGRJIAAu+5sEtiYdjfg=)
2: _g_UdpyC_7SSkwQelUnZS9EsGhc.crl (hash: RBnvrZP1U68O88Xma+iGgJaQQboNmLyQszVm1RCbt2w=)
3: jXkcT7aCGBM17fxGDpk5QqnkTzs.roa (hash: E6cBqX6Avm9snkxbKS/ker/kTWCnrXD0E3VIe/Tuprc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:3a:25:ae:51:cc:ad:77:e4:78:b0:cd:78:fc:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe0fd4769c82ffb49293041e9549d94bd12c1a17
Validity
Not Before: Apr 17 09:01:11 2026 GMT
Not After : Apr 18 09:01:11 2026 GMT
Subject: CN=d78117c40d243d1f9332c9cba87da3faa87ff440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c0:18:4a:48:c6:26:ca:3f:89:6f:6e:15:87:
6f:45:a9:1b:24:fd:94:4d:36:37:89:f9:fd:bc:7c:
fc:a0:63:54:46:ee:7e:2a:10:06:b2:57:4b:3f:ac:
fb:1a:ef:28:ba:19:8c:22:eb:f2:12:a9:a9:74:74:
25:49:c7:ea:fa:48:fc:49:ae:d7:a2:80:59:88:cd:
47:0f:18:db:38:fc:a7:84:c8:a8:c6:05:79:f9:e8:
f4:22:b9:da:99:61:b3:97:45:8f:17:30:fe:e3:e0:
24:13:21:06:b7:20:b8:93:0e:27:74:d4:ea:ec:8f:
bf:87:e5:e1:08:df:7c:b8:47:cd:d0:30:31:c7:16:
94:ad:20:30:f4:c2:de:7f:cf:6c:c9:29:68:07:8c:
58:56:94:e0:a0:d8:1b:f3:2a:f5:45:41:dc:8d:f9:
f3:17:d7:10:ac:b6:0f:98:a4:d7:1f:2e:0d:37:7f:
e8:fe:35:b9:f7:d0:cd:0b:e9:eb:b1:56:34:2c:d2:
8f:f9:6b:26:6b:8c:d2:1a:47:21:91:be:40:56:65:
61:2b:6f:47:55:5c:c4:92:6f:96:aa:62:d6:bc:3d:
21:55:67:bf:9b:0f:c7:a1:ab:89:07:d9:bc:52:92:
81:d5:a0:93:03:fc:a1:1d:91:69:b8:e0:5b:0d:79:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:81:17:C4:0D:24:3D:1F:93:32:C9:CB:A8:7D:A3:FA:A8:7F:F4:40
X509v3 Authority Key Identifier:
keyid:FE:0F:D4:76:9C:82:FF:B4:92:93:04:1E:95:49:D9:4B:D1:2C:1A:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_g_UdpyC_7SSkwQelUnZS9EsGhc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/4cba7a-11d7-4624-851d-a7ca02c88e39/1/_g_UdpyC_7SSkwQelUnZS9EsGhc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:29:86:f1:61:48:9c:2d:36:b2:6b:7f:c6:46:63:58:cd:34:
b8:60:db:60:93:c4:65:53:1f:21:4c:3c:f6:d0:e1:04:28:be:
dd:f5:7c:83:d7:95:4c:c4:22:74:a1:6b:2e:0b:67:cf:da:62:
c6:a5:7d:fb:72:51:46:22:01:44:1b:d8:8a:23:72:51:ca:ae:
e9:7c:fe:40:49:59:f1:16:68:ad:d4:f5:f3:d5:a9:b2:80:94:
34:77:a2:59:09:4d:76:40:da:28:07:bd:18:b2:2c:12:7a:e2:
66:1e:4c:9b:4e:4f:4e:15:81:37:f1:02:59:6f:cc:3b:71:25:
a8:e3:35:cd:c8:23:95:2f:8b:d0:9e:ff:bc:f7:49:c5:cd:cf:
6d:25:9a:bc:a0:f8:f2:62:fe:d1:cd:48:3e:ee:10:6f:c7:47:
c7:71:5c:90:fa:03:79:f2:c5:4b:0d:b3:a7:c4:26:a9:53:a8:
cd:3c:54:15:88:d4:dd:0f:51:0f:34:61:db:6b:7b:62:4d:15:
ce:11:18:a0:5b:90:a0:db:4d:0b:4f:e2:7a:6b:8c:c6:3c:ac:
76:76:4a:45:84:8f:53:6d:71:02:9c:32:98:0e:1d:6f:d7:07:
38:93:a1:0b:9a:a4:98:03:95:f1:6e:25:92:88:7e:33:b3:76:
b4:89:2b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:14:59 2026 by rpki-client