Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
File: ug4SZOB7Nwi8udtaFOfMknCGOVg.mft (raw, json)
Hash identifier: R2G3bMioQsNPuts+7eNCF4BDU74LPcQx4xG1zKYBXCc=
Subject key identifier: 61:2B:A0:27:90:48:C7:11:32:55:2B:91:EF:99:6F:BF:25:9D:D9:E8
Authority key identifier: BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
Certificate issuer: /CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Certificate serial: 019DA453667E17BB491172D50ECECAA74DBF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
Manifest number: 18CE
Signing time: Sun 19 Apr 2026 06:00:22 +0000
Manifest this update: Sun 19 Apr 2026 06:00:22 +0000
Manifest next update: Mon 20 Apr 2026 06:00:22 +0000
Files and hashes: 1: lqoHHwMlwGNCfCp3U3U4kkhl1Ig.roa (hash: y6qClx3Rf5mZaySn4zehVo/hI1iBDsZsk48LzNmFPQE=)
2: ug4SZOB7Nwi8udtaFOfMknCGOVg.crl (hash: IBBQpSiarPqR5ScgpVC3mE4fi1xxBDT8k3ZIGVNIkuw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:66:7e:17:bb:49:11:72:d5:0e:ce:ca:a7:4d:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba0e1264e07b3708bcb9db5a14e7cc9270863958
Validity
Not Before: Apr 19 06:00:22 2026 GMT
Not After : Apr 20 06:00:22 2026 GMT
Subject: CN=612ba0279048c71132552b91ef996fbf259dd9e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:31:20:63:68:cd:52:79:cd:c1:23:07:02:9d:
68:11:74:97:5c:65:c9:72:90:9a:5a:a5:bb:48:98:
25:b1:10:62:85:23:7c:54:64:3e:c0:3d:6a:da:d5:
ed:ab:ca:e5:24:0e:ab:f1:e9:f0:46:2c:1c:ce:72:
3b:00:94:50:10:50:b2:b4:19:88:ee:71:d3:e9:6d:
4e:a2:d2:da:37:ae:ab:a4:f5:dd:b9:a0:d3:c4:aa:
f0:bc:53:e7:65:85:3a:39:57:51:91:0e:a0:98:e5:
2b:88:73:d1:8d:97:40:01:9b:2f:31:f7:c0:cc:53:
e5:30:28:37:27:41:1e:3d:06:a9:5b:f8:68:43:5b:
41:01:bf:e1:08:47:f3:a4:57:a9:0b:ab:be:00:39:
5d:60:a4:9c:62:b2:09:f6:52:2c:0b:fd:ef:72:5c:
86:c8:0a:b5:6d:b5:21:b5:6a:62:f8:bf:c5:ae:4d:
de:cb:4b:2d:12:1a:94:43:93:d2:f0:04:15:18:9a:
17:88:f4:b8:be:bc:a5:67:af:71:33:09:77:3a:79:
9a:8e:f7:44:b5:da:eb:62:94:35:c9:cc:8b:af:38:
c9:5f:e1:71:df:f4:9e:23:c5:4e:64:bb:ee:fb:4d:
55:06:2c:14:c1:b1:55:ba:bd:20:7b:f7:49:17:50:
ca:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2B:A0:27:90:48:C7:11:32:55:2B:91:EF:99:6F:BF:25:9D:D9:E8
X509v3 Authority Key Identifier:
keyid:BA:0E:12:64:E0:7B:37:08:BC:B9:DB:5A:14:E7:CC:92:70:86:39:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ug4SZOB7Nwi8udtaFOfMknCGOVg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/64c2fa-df54-47ff-a8c9-bfe0ccb79fcc/1/ug4SZOB7Nwi8udtaFOfMknCGOVg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:16:6c:90:4f:6f:e4:ff:8a:1c:5d:de:31:9d:6d:41:13:34:
d4:06:10:9e:50:07:3c:60:9f:6d:2a:f2:e7:fd:ef:04:c8:53:
00:fe:7c:e2:26:5e:5c:51:39:df:87:2d:ab:87:21:fb:05:61:
26:b6:ed:1c:ac:27:57:78:3a:05:67:90:8e:36:db:34:ae:91:
80:d6:0a:fb:ba:8f:96:84:82:0c:97:f3:fe:69:b3:9e:4b:62:
e7:eb:72:f7:1e:8c:b8:53:c7:dd:e7:a4:39:0e:21:92:0b:45:
c0:4b:09:59:bd:8b:8e:6d:9d:81:63:4a:d1:0d:98:2f:e9:b6:
19:d1:9b:21:5c:60:78:d3:3f:b2:cf:d0:b4:72:61:82:28:47:
e5:6b:a1:c6:68:bf:bd:89:02:d0:34:68:cf:a5:19:cf:92:08:
3a:03:7d:f8:26:7a:86:2a:e5:f0:95:67:f3:48:53:05:1e:53:
64:b1:3b:d7:7b:c7:82:65:a2:9e:53:83:2d:a9:86:1a:06:fa:
a6:b1:7f:a0:5e:e0:1f:7b:62:c1:5d:01:22:69:65:90:82:c7:
b8:4b:37:d8:81:81:bf:bb:b3:2b:06:64:4f:8f:e7:49:56:ab:
29:f6:c5:2e:db:96:e3:25:b3:13:ac:15:e3:bc:a5:ec:05:8e:
e4:c5:9a:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:14:36 2026 by rpki-client