Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
File: u4rmO3V9oa95DyD1nGNIEe7rG8w.mft (raw, json)
Hash identifier: WUZHpwXNePrRm3+5bxgUxD68QhdxrIC6nBmp5HSp6Nc=
Subject key identifier: 7B:ED:8B:77:53:8F:5D:86:0B:97:3F:F6:CB:78:6A:BA:AD:0E:A2:4C
Authority key identifier: BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
Certificate issuer: /CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Certificate serial: 019D9AAC401B5616073C687D1DCB094204DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
Manifest number: 0D63
Signing time: Fri 17 Apr 2026 09:01:12 +0000
Manifest this update: Fri 17 Apr 2026 09:01:12 +0000
Manifest next update: Sat 18 Apr 2026 09:01:12 +0000
Files and hashes: 1: R4Xor_QOm8kkue50w13Q01GksLs.roa (hash: hz+RaanVrQajJNEjuOfF15dTh+z02W3jfEQAUxrmmAk=)
2: u4rmO3V9oa95DyD1nGNIEe7rG8w.crl (hash: Tn9G4PZvML4QXEQyU9Fso1fNZJWcbKwUkDQjXBc8TTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:40:1b:56:16:07:3c:68:7d:1d:cb:09:42:04:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8ae63b757da1af790f20f59c634811eeeb1bcc
Validity
Not Before: Apr 17 09:01:12 2026 GMT
Not After : Apr 18 09:01:12 2026 GMT
Subject: CN=7bed8b77538f5d860b973ff6cb786abaad0ea24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:76:c6:82:5f:51:6c:9c:51:52:96:83:02:24:
50:1e:35:c9:4a:3c:06:fa:6b:af:67:76:de:92:28:
65:cc:37:b8:1e:62:80:32:9c:b4:14:54:a8:f4:c3:
a1:07:96:b7:dd:1e:68:03:76:33:4d:86:55:66:f5:
ac:65:11:07:13:56:44:8b:a7:96:7f:13:ae:1a:1d:
1b:3d:09:66:89:51:de:2e:17:f4:29:65:49:f8:b5:
97:3f:6e:57:5d:36:dc:ad:67:27:3b:78:62:6f:8b:
61:2c:5e:fa:b5:6b:63:75:4d:e6:09:73:76:71:31:
47:b3:7e:ce:fa:e3:53:1a:00:71:57:ef:fb:9f:f1:
74:74:fb:25:f0:1a:60:80:7a:1b:4f:30:c2:ae:d0:
cd:b9:7d:f7:96:b1:7f:41:35:5f:d9:60:4c:22:1e:
cb:70:a2:df:88:6b:bd:4d:61:26:8c:fc:19:2e:b2:
58:e7:3a:95:8a:5a:35:e5:fb:89:cc:8d:c2:c5:71:
d8:f6:de:13:79:47:ca:58:99:ea:8c:d8:ec:ef:8a:
f2:2a:16:75:3f:05:6c:c6:27:cc:20:00:ea:f2:e5:
25:de:2d:d9:d9:3b:f2:a0:c8:e2:57:d6:db:e8:8f:
f0:88:eb:a7:00:78:22:64:e8:e0:7b:a5:05:6a:72:
0c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:ED:8B:77:53:8F:5D:86:0B:97:3F:F6:CB:78:6A:BA:AD:0E:A2:4C
X509v3 Authority Key Identifier:
keyid:BB:8A:E6:3B:75:7D:A1:AF:79:0F:20:F5:9C:63:48:11:EE:EB:1B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4rmO3V9oa95DyD1nGNIEe7rG8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/12c66d-ac63-43fc-8894-ab087f43b595/1/u4rmO3V9oa95DyD1nGNIEe7rG8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:76:be:59:7b:13:6b:7f:a7:52:ee:bd:74:c6:15:fb:94:ff:
76:e9:9f:b9:de:86:83:9d:b9:ed:81:09:63:9e:70:db:93:cb:
eb:99:8f:97:1e:86:e3:e4:4a:34:a3:58:4a:0b:e1:43:c0:52:
a3:ec:e5:36:da:8d:63:a8:69:a1:f0:0f:48:5c:db:6f:76:4b:
13:9f:8f:53:f9:66:19:f9:eb:56:91:be:59:b0:50:69:64:52:
1e:d9:d0:66:66:0a:34:c8:c3:ac:b0:bc:fb:ce:b0:a0:83:c3:
06:95:3b:2c:a0:35:03:40:ca:22:db:5e:0e:94:e3:56:1d:07:
4c:26:30:0d:eb:34:dc:9f:ee:a1:ec:1d:aa:da:98:59:ac:2c:
c2:e7:5c:37:24:16:19:3f:16:a3:83:f6:b7:71:e0:7d:54:85:
b0:8e:12:77:3e:2d:1b:95:10:83:c5:3c:ae:73:35:b7:bc:6e:
be:de:84:43:14:fd:1b:3b:ec:82:5b:c9:07:a2:a7:57:5b:b0:
38:8d:80:04:66:8d:df:dd:4a:48:d7:41:ac:21:10:20:9d:88:
36:03:cd:c4:bd:2d:e5:00:b0:04:8c:76:56:09:79:e7:da:7e:
ba:8b:5d:29:8e:fb:5f:3e:80:0d:5e:ad:21:3c:6e:dc:b2:0d:
45:cb:22:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:20 2026 by rpki-client