Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier: WghmSTLa9Z79AIbxToidw04YwZSLToDvznnn/XMS9Pw=
Subject key identifier: 16:80:92:92:42:F9:8B:DA:77:23:D0:C2:90:01:77:4F:37:9F:98:73
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial: 019D9DACCC634408EF72D51EEDB93FED7463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number: 03D1
Signing time: Fri 17 Apr 2026 23:00:40 +0000
Manifest this update: Fri 17 Apr 2026 23:00:40 +0000
Manifest next update: Sat 18 Apr 2026 23:00:40 +0000
Files and hashes: 1: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: 9scbSOaWyn1cV+jJ/VwGL+87NK0ZlO7ifU9upciRyuo=)
2: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (hash: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:cc:63:44:08:ef:72:d5:1e:ed:b9:3f:ed:74:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Validity
Not Before: Apr 17 23:00:40 2026 GMT
Not After : Apr 18 23:00:40 2026 GMT
Subject: CN=1680929242f98bda7723d0c29001774f379f9873
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:fc:9b:5e:cc:51:ff:9a:57:bb:ca:fa:41:b1:
55:c8:da:ad:1d:c2:e4:e5:19:eb:40:a8:d4:ae:da:
90:50:64:8c:1d:5d:d7:e7:41:ec:5d:2d:fa:9e:32:
26:48:6d:6c:29:04:b0:2f:30:a7:87:51:33:a1:ca:
05:6c:f4:0f:f3:36:fa:8e:13:93:96:dc:e8:8e:0c:
37:58:84:44:19:a2:d0:bb:df:d4:4f:02:05:b5:56:
57:e6:0d:cb:c1:d7:0d:3c:9f:7c:69:d0:8b:44:7a:
a1:0b:ef:00:cf:44:d2:2b:94:e0:c8:cd:40:bd:89:
68:12:70:e7:01:51:13:e1:c5:2f:c1:17:a7:00:e8:
79:4a:4d:97:04:8a:c1:dd:50:cf:24:43:3a:a6:61:
8c:c0:9e:2e:93:af:44:ca:0a:27:a7:19:6f:cc:a7:
09:5b:fa:42:a0:6a:5b:93:90:c6:61:d3:0b:ce:53:
0e:22:27:c8:bb:30:e5:c8:83:83:84:5d:fb:20:14:
6a:20:30:2d:3f:eb:49:c3:2a:97:4b:92:fe:ff:dd:
42:fd:7b:fd:1a:9d:fa:97:fa:cb:70:08:52:9e:f9:
6f:17:8b:06:59:73:e4:85:c6:5f:88:6b:9c:7c:f4:
2d:bd:af:cd:bf:ca:2b:a5:a1:70:a9:1a:21:43:52:
82:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:80:92:92:42:F9:8B:DA:77:23:D0:C2:90:01:77:4F:37:9F:98:73
X509v3 Authority Key Identifier:
keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:a2:51:14:f3:24:38:09:74:e8:ef:32:0b:05:d7:47:72:0f:
77:ef:fb:f2:73:73:19:88:01:b3:12:b8:27:a5:7c:02:1e:14:
f3:8e:22:e0:c9:c8:23:4c:3e:44:dc:5e:2b:23:f0:d8:a2:cf:
12:7c:2f:7f:a9:96:30:e1:2b:18:7b:b0:da:8b:a4:cd:c5:fe:
af:9b:40:00:23:46:36:90:15:00:c3:c7:c7:22:5b:72:5e:14:
27:32:f8:a3:6d:f5:dc:1f:d6:48:53:b3:e3:09:9f:50:06:ab:
33:7d:f9:d2:5a:5c:1c:5a:72:8d:43:35:13:6b:8f:43:99:bc:
c9:06:30:a7:b8:2d:2e:87:94:ee:26:a3:6e:69:40:51:f0:d3:
4f:2b:a6:9f:1e:f7:05:a0:44:48:2e:3a:ed:85:e7:67:bf:ae:
0e:f6:27:53:8f:49:00:15:f4:4a:50:e7:0b:df:22:84:ba:e4:
b1:bc:8b:24:af:d4:75:aa:1b:16:ab:b0:3f:ec:2f:06:94:0b:
46:b6:cc:67:5f:c2:b2:2e:51:25:31:59:7e:1a:1e:60:0a:e8:
88:93:70:67:22:22:35:cb:ca:b3:5b:17:62:97:f8:fa:92:f5:
d1:f2:83:2e:1f:db:c6:59:83:2d:50:19:c3:cb:44:79:23:8f:
62:c0:a9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:28:19 2026 by rpki-client