Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
File: _u_5L8n-U1R7fjvh-DYIgJxFZsk.mft (raw, json)
Hash identifier: QVSiTCrTlpVaWZeEYALp39MlS/Zc65xYBBAdct8Hn7s=
Subject key identifier: 68:95:7A:0C:AE:93:31:6E:17:02:96:ED:82:79:81:CB:CA:05:F8:C7
Authority key identifier: FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
Certificate issuer: /CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Certificate serial: 019D9A7524C2836A2188448147F0F9D939C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
Manifest number: 095C
Signing time: Fri 17 Apr 2026 08:01:01 +0000
Manifest this update: Fri 17 Apr 2026 08:01:01 +0000
Manifest next update: Sat 18 Apr 2026 08:01:01 +0000
Files and hashes: 1: Dr3OacsNKO2WTdv7Q8llg_soZvA.roa (hash: KbhoDJ9dQsBvDj3nKAtLQGpRyI1OX7thvD73xgl+H2g=)
2: _u_5L8n-U1R7fjvh-DYIgJxFZsk.crl (hash: CKOmtL0v1Gv+249k+33rwfSM0RcbjZJVh3FKjGz9clE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:24:c2:83:6a:21:88:44:81:47:f0:f9:d9:39:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=feeff92fc9fe53547b7e3be1f83608809c4566c9
Validity
Not Before: Apr 17 08:01:01 2026 GMT
Not After : Apr 18 08:01:01 2026 GMT
Subject: CN=68957a0cae93316e170296ed827981cbca05f8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:0f:4a:a9:fd:cf:54:db:2e:cd:e5:41:ec:6b:
4a:f7:de:25:f4:4e:9e:41:d2:c3:87:89:6f:64:bf:
bd:79:81:ba:55:8d:95:2e:65:fa:86:8d:96:2b:e1:
0b:25:c3:0b:86:d0:b8:0c:86:b0:71:cb:69:f7:a3:
a0:e6:70:f4:b1:54:de:dc:c1:6f:37:24:e5:8d:eb:
64:f0:d2:b8:eb:8c:20:58:c1:78:37:7b:16:ae:92:
27:ca:ed:21:ae:46:8a:e2:e8:13:81:3e:d9:80:79:
db:3e:16:b5:d6:63:c4:ad:38:61:f7:89:61:72:d7:
b2:cd:84:ed:00:dc:0f:ef:84:dd:39:d5:4f:80:43:
2d:c8:e6:e5:31:96:1d:a9:bd:b9:3e:f6:71:45:cb:
3b:5f:52:e2:f0:d8:77:ff:33:c4:4a:96:04:b3:be:
e9:af:55:21:3f:91:58:2d:c4:4f:50:84:34:12:f0:
5b:e2:d9:5d:07:74:64:b6:82:3c:41:7a:98:68:90:
20:b0:ed:b5:31:9d:2a:91:20:d0:9b:a1:1c:70:14:
4c:43:7b:ef:4a:b0:08:0b:86:1e:2b:11:16:6b:95:
40:1a:ab:26:8a:3c:7b:f6:4e:7f:fb:63:da:8d:91:
5f:e3:96:22:d8:0c:a1:0a:ef:b9:2c:b0:80:59:e4:
5c:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:95:7A:0C:AE:93:31:6E:17:02:96:ED:82:79:81:CB:CA:05:F8:C7
X509v3 Authority Key Identifier:
keyid:FE:EF:F9:2F:C9:FE:53:54:7B:7E:3B:E1:F8:36:08:80:9C:45:66:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_u_5L8n-U1R7fjvh-DYIgJxFZsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/d8776b-284a-4f78-a71c-4574062aecb5/1/_u_5L8n-U1R7fjvh-DYIgJxFZsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:04:6d:27:c8:b4:a6:d1:1e:37:88:b9:90:56:4e:b6:5e:20:
ab:62:63:e6:81:dc:70:3f:0f:6e:a9:4f:fd:6c:ae:2a:12:55:
ab:36:07:88:2c:64:4d:93:f6:c2:f1:63:26:d3:a0:57:27:ba:
b7:73:e9:b0:2b:54:37:3a:8e:a7:3a:37:c8:5a:4a:e1:5e:aa:
8c:b4:b2:44:49:6b:45:15:c5:93:b5:16:c7:d2:cf:ac:5d:d2:
54:78:16:43:fa:6e:56:f1:ef:76:72:2b:a1:ba:e7:b5:d1:cc:
1a:d5:c9:17:4a:56:a5:55:2d:98:36:7c:4e:47:6c:4c:8f:91:
b1:c4:bf:3a:e5:e4:88:67:fc:f6:d3:f3:64:18:9f:9a:92:9d:
2a:fa:9d:10:35:ca:62:f5:64:cc:12:00:54:fd:5a:98:78:ca:
68:bf:df:ac:ef:be:a7:85:46:c2:84:c0:8f:21:cb:41:8f:c5:
a1:57:f5:52:3f:46:9e:9a:7c:f5:5d:52:a8:ea:81:cf:70:27:
7d:9e:1d:d0:83:34:d6:70:e7:e0:8e:d6:47:6a:06:b3:b6:63:
09:fa:a4:68:1c:b1:84:a1:e7:3f:2a:d9:f4:83:4b:f5:d8:0c:
82:22:9e:87:43:03:56:e6:bb:65:74:50:04:3f:54:90:15:96:
af:66:15:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:48:37 2026 by rpki-client