Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
File: uUQn2LeWZF92S05mvxmtOOSr7hw.mft (raw, json)
Hash identifier: J0wDz100Q0m6I5Tum5X6EMpqX99agcr1+THp+GvTkcM=
Subject key identifier: 20:B9:F8:98:1A:67:FC:EC:EF:06:81:6E:93:C2:61:03:1B:05:DD:8F
Authority key identifier: B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
Certificate issuer: /CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Certificate serial: 019D9A7526DF2F6F9793E87252FCCEE459F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
Manifest number: 0211
Signing time: Fri 17 Apr 2026 08:01:02 +0000
Manifest this update: Fri 17 Apr 2026 08:01:02 +0000
Manifest next update: Sat 18 Apr 2026 08:01:02 +0000
Files and hashes: 1: uUQn2LeWZF92S05mvxmtOOSr7hw.crl (hash: 0zZKx5lxIdotppQMJCot08BPvIxmgvH2h4yMcc2zes0=)
2: y8g_KNg4CQpGLUtViNE4UcIwqGE.roa (hash: 3BP+uFbBHzZ2F6fJMPn4trgJdQyNQ1NxWfOoEPvI+IQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:26:df:2f:6f:97:93:e8:72:52:fc:ce:e4:59:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b94427d8b796645f764b4e66bf19ad38e4abee1c
Validity
Not Before: Apr 17 08:01:02 2026 GMT
Not After : Apr 18 08:01:02 2026 GMT
Subject: CN=20b9f8981a67fcecef06816e93c261031b05dd8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:6b:e8:82:2c:86:81:23:0f:47:2c:51:b5:
47:f6:0e:1b:19:d6:e1:50:69:bc:3f:8d:23:e4:30:
02:bb:b7:6c:e9:02:67:81:86:d3:3b:78:0b:e3:df:
e0:ea:04:4b:73:be:da:5e:2d:38:4c:59:6f:53:b2:
e9:99:69:db:6f:02:78:5a:0a:4d:ee:8b:a5:d3:bd:
0c:42:e6:83:8e:3f:aa:76:da:98:90:90:cd:56:ba:
3d:55:02:ae:5a:6e:cc:4d:ad:e3:6f:57:ff:4d:1f:
da:4f:98:7d:ef:c7:92:1a:b3:65:21:57:6d:ba:06:
3a:a0:52:2c:97:4c:3d:29:e2:c1:c6:3b:14:d2:c6:
1a:f0:2d:b0:1c:65:75:b1:13:27:c4:3a:35:cc:49:
6d:cb:36:5b:1b:31:2b:bd:43:5e:de:76:08:e5:57:
35:7c:4b:f7:33:57:a6:f0:ca:3a:43:4e:50:8f:8f:
df:ee:79:62:5d:4e:b7:7b:45:a5:fb:8a:3f:d1:ad:
ae:38:7a:60:cd:90:62:d1:27:61:41:45:c8:d2:5a:
70:ac:aa:e3:1a:5c:a6:cf:d0:0f:5a:9c:5d:f9:3d:
1d:37:97:08:e0:27:c7:ff:c9:33:12:33:df:26:bc:
20:68:b8:fd:26:ab:40:bf:4c:43:8d:17:d6:e5:65:
76:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:B9:F8:98:1A:67:FC:EC:EF:06:81:6E:93:C2:61:03:1B:05:DD:8F
X509v3 Authority Key Identifier:
keyid:B9:44:27:D8:B7:96:64:5F:76:4B:4E:66:BF:19:AD:38:E4:AB:EE:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uUQn2LeWZF92S05mvxmtOOSr7hw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d9cf7e-aa7e-4823-99f9-47f5c1c52ce2/1/uUQn2LeWZF92S05mvxmtOOSr7hw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:cc:c1:a0:99:10:e5:79:4b:22:74:88:66:a5:68:8c:bb:32:
25:26:a3:63:5f:42:06:67:a6:6b:78:f7:4b:22:48:ea:7b:c5:
43:1d:e6:07:cc:26:45:be:8d:c8:b1:64:b0:dc:bd:5f:d6:94:
71:d4:8e:e2:c6:8b:86:4f:43:e0:98:c3:31:07:be:2f:3d:36:
89:26:a7:26:77:cb:01:8f:ab:48:65:1c:86:2a:bb:d8:45:0a:
ed:6e:ec:31:4a:7b:a8:24:68:2d:ab:36:ee:47:98:8c:d1:d4:
80:ca:fe:fb:fd:e5:97:9b:55:a7:db:b9:e8:58:7c:a8:ec:ad:
04:c3:d5:11:06:d4:fa:c2:25:4d:13:44:85:36:ab:45:3c:4b:
e9:10:b8:8b:3c:e8:a5:3f:8c:45:1c:a5:e5:49:da:7e:46:94:
40:24:06:66:24:4b:35:74:4d:5b:78:83:12:c9:a9:f3:81:bd:
53:ae:dd:1a:88:88:68:ad:59:be:13:9b:cf:6a:11:fc:f6:a7:
98:d3:60:c4:1f:2a:00:37:51:7a:26:7e:b7:64:9d:f3:7a:bc:
35:59:0f:a5:be:51:f7:7e:48:c8:8c:f5:61:9a:52:71:e0:dc:
91:5d:c4:c5:1e:07:22:db:cd:fd:5b:f9:9e:68:d1:2d:1c:a3:
d2:52:63:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:33:09 2026 by rpki-client