Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
File: UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft (raw, json)
Hash identifier: esK8jq4Y2HrNclgq8lp8TtvddGs3jfQF2nDm/ZL2XAU=
Subject key identifier: 89:77:73:CE:19:C8:16:8F:78:B7:C5:BA:42:18:33:78:11:F4:97:D8
Authority key identifier: 52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
Certificate issuer: /CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Certificate serial: 019D9BBE3D1F061013DD0C7FB9F0A5FBF6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
Manifest number: 0CD0
Signing time: Fri 17 Apr 2026 14:00:28 +0000
Manifest this update: Fri 17 Apr 2026 14:00:28 +0000
Manifest next update: Sat 18 Apr 2026 14:00:28 +0000
Files and hashes: 1: HJPLxJxpfq1R9TzTgRQlYzUDbhs.roa (hash: OQoHpJCgdLNrLAKiPR4smDKveNyBf+LPF6Xo5G3zvkg=)
2: UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl (hash: R+QRyxnFd6708a5iyoeieE4U/hzClkf7dM7AxfBJdic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:3d:1f:06:10:13:dd:0c:7f:b9:f0:a5:fb:f6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e86b141c51c65eeabd6e62ea522edc5988526e
Validity
Not Before: Apr 17 14:00:28 2026 GMT
Not After : Apr 18 14:00:28 2026 GMT
Subject: CN=897773ce19c8168f78b7c5ba4218337811f497d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e9:f0:a9:79:42:40:00:3a:42:db:6e:fd:9b:
ad:4b:61:c0:33:92:7f:55:3d:67:0a:09:13:ac:f9:
78:eb:88:d0:51:e0:30:35:3b:29:fa:27:2e:48:a7:
9a:af:0d:39:24:0d:bc:c7:96:ba:7a:56:fe:95:e7:
3c:b2:3a:fc:68:4b:5a:1b:0a:39:2e:0e:92:87:61:
71:7f:0a:62:59:79:b0:80:58:dc:0c:7f:13:f4:7e:
81:b4:fb:82:00:b1:79:47:42:a6:63:e5:f3:f3:c0:
c3:7b:5c:c8:1b:a5:b9:b1:5b:dd:ab:bc:42:39:48:
01:ef:9a:c5:31:f2:0d:10:0e:7f:63:7e:bb:f7:b5:
f2:b4:49:8f:9b:86:fb:76:ff:99:d6:b8:3d:b4:a5:
1d:88:13:50:87:b0:8c:fa:9d:ae:6f:a4:ea:40:ef:
f5:52:15:cf:9d:15:95:75:31:d0:90:ed:b5:85:23:
a9:b5:62:15:46:18:ff:ec:5b:ad:55:5e:98:f4:b0:
b7:cc:90:d1:95:22:6b:6b:35:2a:1b:14:2f:eb:08:
a6:71:99:0f:91:13:64:57:74:8f:1e:1c:da:d3:f0:
d8:d3:24:33:9e:c8:ce:47:64:8a:10:85:a2:3f:d8:
fa:04:3a:a4:8b:94:4e:f7:61:8d:a6:c5:83:a3:85:
aa:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:77:73:CE:19:C8:16:8F:78:B7:C5:BA:42:18:33:78:11:F4:97:D8
X509v3 Authority Key Identifier:
keyid:52:E8:6B:14:1C:51:C6:5E:EA:BD:6E:62:EA:52:2E:DC:59:88:52:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuhrFBxRxl7qvW5i6lIu3FmIUm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/5f45a5-7288-4537-89dd-c687e792b25d/1/UuhrFBxRxl7qvW5i6lIu3FmIUm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:01:6e:1d:72:11:9b:22:ad:25:75:fd:91:08:2e:82:ee:e0:
56:83:98:07:9c:14:2b:05:06:96:66:35:02:79:9c:22:1f:f7:
6a:11:b3:cb:cd:18:aa:12:8a:eb:28:b3:73:89:2d:44:f6:26:
83:cb:ef:68:4b:bb:f3:53:2a:f7:1f:db:5e:c3:a4:d1:12:9a:
86:1e:74:3a:08:d2:bd:ce:ca:63:81:b7:ea:d0:ec:db:29:d2:
a4:43:04:db:cf:5f:50:63:2d:6d:f8:77:3a:d4:45:93:b0:7a:
c4:fd:7f:d9:77:6d:60:5a:92:26:10:9e:d0:b9:46:e2:83:c1:
e2:81:07:9a:fd:2b:12:47:0d:17:49:5c:8c:57:41:ea:62:c8:
4e:71:39:c6:3b:55:cd:90:dc:3b:2e:69:01:c5:da:3d:b6:4e:
a8:b4:83:34:d2:1a:7e:24:15:43:8d:42:93:fa:f6:8f:f1:eb:
60:28:93:65:94:3c:01:7d:9f:bc:f8:40:d9:9d:fa:cd:28:4b:
43:d5:d7:7e:46:d8:1d:c6:d0:1c:bc:fc:bb:ab:2a:b2:e8:c0:
fe:c5:d4:bd:f9:53:b6:82:95:41:26:3e:30:35:55:b0:97:cc:
46:5c:c9:cd:0f:10:41:01:c1:1e:77:e8:ff:b0:1e:f2:a9:6d:
d5:94:89:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:32:26 2026 by rpki-client