Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
File: UxKdBI3rLgv2InE5mgkLkBAWCzk.mft (raw, json)
Hash identifier: af3HKTqR0Rw/UrijxELyEZKEtt3zcjs7QzuFWMI1WqI=
Subject key identifier: F3:B3:A5:73:DB:85:0B:6E:1D:99:26:DF:7C:A5:DA:39:F0:7A:97:99
Authority key identifier: 53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
Certificate issuer: /CN=53129d048deb2e0bf62271399a090b9010160b39
Certificate serial: 019D97AA9A6004126B28067BA1093A6A85D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
Manifest number: 0897
Signing time: Thu 16 Apr 2026 19:00:33 +0000
Manifest this update: Thu 16 Apr 2026 19:00:33 +0000
Manifest next update: Fri 17 Apr 2026 19:00:33 +0000
Files and hashes: 1: GGelaebdyv7wKj2s1MaS_yeYfsg.roa (hash: t1/+9CRFTy7pepvLSNI7FD84YDz6M4/rIVe2xaAkI2w=)
2: UxKdBI3rLgv2InE5mgkLkBAWCzk.crl (hash: 0Xo0G5uRZ7xtmTGR4lnUuQx6LaF9GQLfqwjYSzePR70=)
3: ZiID9bA4kVJXaS6I_e7XfY_pEWQ.roa (hash: Si+JLMLd7OiqxpqpbnGko1NX7RV2TJpWFgx4YxD8Q9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:9a:60:04:12:6b:28:06:7b:a1:09:3a:6a:85:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53129d048deb2e0bf62271399a090b9010160b39
Validity
Not Before: Apr 16 19:00:33 2026 GMT
Not After : Apr 17 19:00:33 2026 GMT
Subject: CN=f3b3a573db850b6e1d9926df7ca5da39f07a9799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e0:1a:c0:8c:6e:57:1e:87:81:39:dc:91:85:
1e:5d:0d:dc:4a:dd:02:1b:21:09:fe:d1:0e:c4:8e:
c4:01:0e:61:32:b1:c9:04:85:e2:45:f6:f6:4c:b5:
46:e4:3f:0d:a5:2a:04:1c:7b:af:57:73:13:54:01:
c2:bd:8e:52:90:9b:5b:2a:86:0d:2a:64:d5:a8:6a:
92:a0:e3:c2:1b:4a:20:f5:ff:07:b2:93:02:60:2e:
c6:fb:6a:ec:88:0b:bb:e4:6d:f9:cc:39:ee:bc:8b:
73:50:fd:9c:a6:8b:82:a3:0f:b0:91:43:40:b3:5c:
69:db:93:9c:ba:c4:3e:27:dc:f7:a2:7c:83:c7:1f:
7c:dd:38:8f:7b:9d:72:ea:3d:5f:53:28:ba:41:a5:
ac:5a:d2:ed:a9:b3:32:72:ab:2b:c3:c7:c8:84:7a:
eb:d0:e5:e6:f0:da:e7:07:67:c5:3d:81:76:7a:b8:
c1:27:65:0b:9f:08:2e:f9:f1:24:40:dc:a8:43:71:
1e:a7:15:29:39:c0:66:ef:ee:30:88:e3:30:96:7b:
61:fd:ac:4a:32:09:66:a6:f4:b6:96:ec:71:e5:09:
da:cd:4c:33:f7:aa:23:f5:0f:f5:60:3f:eb:e5:1e:
d3:37:cb:67:57:79:c9:ae:d5:46:9b:e2:eb:6d:7d:
78:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B3:A5:73:DB:85:0B:6E:1D:99:26:DF:7C:A5:DA:39:F0:7A:97:99
X509v3 Authority Key Identifier:
keyid:53:12:9D:04:8D:EB:2E:0B:F6:22:71:39:9A:09:0B:90:10:16:0B:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UxKdBI3rLgv2InE5mgkLkBAWCzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/8d58e4-88f6-4aed-ba43-7ae6359d3110/1/UxKdBI3rLgv2InE5mgkLkBAWCzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:92:82:7d:c5:ce:f3:67:c0:b5:31:76:4d:96:9c:7d:b2:22:
ab:d6:29:2a:0c:d2:3d:80:fd:c7:a4:3b:d8:84:8a:b1:49:26:
06:2c:84:b8:70:b8:cc:75:29:80:c7:c7:fa:b4:fc:58:e1:44:
79:31:46:5b:02:d5:e1:32:8a:d8:1b:fd:36:3f:ca:f7:38:c3:
0a:e9:c1:ec:b9:77:13:c1:1c:c7:a4:23:6f:63:11:c6:5e:0b:
ad:58:19:2d:ac:c4:22:d7:04:c5:a9:44:44:a1:86:a4:80:5e:
fb:ea:60:26:0d:d2:12:bd:63:6f:e8:8d:8d:ad:e0:a8:14:2a:
e4:58:bb:e9:87:cd:ce:e5:8a:97:b8:8f:17:1b:4c:e7:73:84:
8d:f5:29:f4:97:4e:d8:b0:b4:47:32:28:70:09:79:c3:71:8b:
b2:d4:a1:fe:ff:68:b4:f0:e3:ea:65:87:99:83:20:eb:e2:e2:
c7:16:62:f6:67:9a:d0:7b:02:39:ae:e7:66:9b:8c:ea:4f:e8:
02:2a:56:49:dd:d4:ab:a4:ed:a5:de:af:22:cb:f9:ac:af:e4:
c4:6d:02:fb:34:3f:59:af:98:56:75:07:1d:e9:f1:27:ff:9e:
7d:71:e8:91:e0:fa:48:b0:cf:61:f2:71:cf:63:29:92:57:7b:
63:d9:57:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:52:31 2026 by rpki-client