Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
File: uRFN_za5SLVsIR0l85h1HTW5PMI.mft (raw, json)
Hash identifier: xg1fahaVCHRGsZcx0+if41nxB9pwECGo3l5zodclrro=
Subject key identifier: 51:71:15:B7:E4:36:EE:CC:A3:D3:F3:12:B4:73:29:5B:94:D7:0C:88
Authority key identifier: B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
Certificate issuer: /CN=b9114dff36b948b56c211d25f398751d35b93cc2
Certificate serial: 019D992AF6DAC3C1986DDE7D94E3AEDD1D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
Manifest number: 10CD
Signing time: Fri 17 Apr 2026 02:00:22 +0000
Manifest this update: Fri 17 Apr 2026 02:00:22 +0000
Manifest next update: Sat 18 Apr 2026 02:00:22 +0000
Files and hashes: 1: D-37R8pTtaYyRSvFF1cIYOk-kgs.roa (hash: VVl+RrZKwp2SWM55JhoijG/n/TZ6UrTZnaeJgiQh+QM=)
2: gkon8URGKawWYsPCktsOv4GJyC0.roa (hash: wGsl+Lv3yiWPoxNTkh9Ez43KMkCIutQ7CbBGSolZmCM=)
3: u9H8ycoJJ73XLzdk1mG2YZJ6YlA.roa (hash: Akg2+wCDxoYDDb6kxdKsIcm/cpM8e7ZCMW+TrYVEbRA=)
4: uRFN_za5SLVsIR0l85h1HTW5PMI.crl (hash: FPFntwGiNmwQcxliyDUaEjHE8hLOt00c+rRVwnUMQIo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2a:f6:da:c3:c1:98:6d:de:7d:94:e3:ae:dd:1d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9114dff36b948b56c211d25f398751d35b93cc2
Validity
Not Before: Apr 17 02:00:22 2026 GMT
Not After : Apr 18 02:00:22 2026 GMT
Subject: CN=517115b7e436eecca3d3f312b473295b94d70c88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4c:b2:3c:f0:8e:26:72:8c:08:ef:9c:64:f9:
9d:cf:d6:05:d6:18:40:3d:19:65:f8:78:e7:4a:ee:
07:59:02:a0:8c:15:ac:c1:de:8c:f8:7d:d6:4f:f1:
1d:d5:a1:4f:7e:02:db:5b:9f:fe:86:fc:d5:0a:8a:
b2:b0:9b:47:a3:3d:dd:e0:fa:77:f8:a9:79:53:f6:
f4:ee:47:76:a4:6b:d9:dc:c2:5d:18:35:87:e4:0e:
c9:0e:2c:2a:d8:f0:49:f9:20:cd:e9:bf:81:29:4f:
af:42:43:1f:63:ef:9f:8e:7b:ee:45:db:7d:8e:55:
dd:34:54:8c:dd:7e:d0:5f:a3:ad:74:f7:5a:87:e9:
22:2b:07:af:97:48:f6:df:0e:92:ec:d0:a5:62:3b:
c6:c5:ab:a6:7c:70:7b:b1:c3:86:43:4c:43:9d:78:
8c:ea:8a:2a:02:16:eb:b1:23:65:2d:3b:24:3b:31:
85:dc:b8:54:45:15:2c:b4:34:4e:2a:78:50:0a:dc:
dd:a5:f9:fb:85:5e:19:17:71:84:5b:b2:00:42:5c:
34:32:85:ff:68:93:75:75:68:9e:18:20:ab:cd:9d:
a0:58:60:12:6a:d8:dc:9c:61:47:80:85:9c:6a:e1:
b0:f5:26:04:68:08:ca:64:f9:d5:bd:7b:6f:e7:c7:
4d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:71:15:B7:E4:36:EE:CC:A3:D3:F3:12:B4:73:29:5B:94:D7:0C:88
X509v3 Authority Key Identifier:
keyid:B9:11:4D:FF:36:B9:48:B5:6C:21:1D:25:F3:98:75:1D:35:B9:3C:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRFN_za5SLVsIR0l85h1HTW5PMI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/3c6876-96ae-48af-ae7a-ff05d446e7fd/1/uRFN_za5SLVsIR0l85h1HTW5PMI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:9b:4e:1a:d4:aa:43:d1:5c:b9:54:ba:4a:d1:dd:6b:20:fc:
74:c8:30:a9:c6:1d:1a:f3:98:56:fc:f5:fa:da:20:e0:91:30:
61:b9:67:a2:93:b3:79:c3:e8:30:1e:a9:90:3d:ce:18:c1:25:
cd:d1:a1:46:a3:8f:cf:39:28:37:54:36:35:56:0e:fd:64:70:
8c:28:16:1e:0a:ac:60:33:cd:9b:37:4e:83:af:4e:fe:9b:38:
e9:d2:8a:02:c9:e0:4c:39:3c:53:59:46:2a:fc:b0:88:29:7e:
9a:90:a5:b0:38:1d:eb:d3:13:e5:dd:63:4b:29:c9:b7:e6:f4:
08:10:18:72:5e:76:62:12:b0:99:e0:14:7e:c1:3f:c7:68:9e:
7c:f8:13:16:9c:b3:5d:7e:09:d8:16:d1:02:27:dc:08:a3:e9:
ca:31:24:7a:b6:0b:ca:2f:14:bc:2b:47:a5:3c:bf:55:fe:03:
75:49:50:bb:a5:fb:4b:21:a5:6e:67:d2:2d:93:1c:70:51:13:
61:af:02:20:e2:64:5b:f9:1f:39:d0:dd:e0:3e:e2:0c:42:03:
b7:e4:74:36:11:15:b0:f3:37:9e:92:ac:f1:02:f4:e5:f3:50:
7a:29:6d:fa:8b:2a:ea:fa:d0:97:ea:b3:b9:60:bf:b5:93:55:
82:04:e9:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:31 2026 by rpki-client