Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
File: U0Z21mkyx3oldhE2rJnrm3TYAaY.mft (raw, json)
Hash identifier: U4UnY/DrtwdTHt3P6nSusa+23Jwrjn0gK+2WywmqLYE=
Subject key identifier: AC:F2:CD:DB:4E:B5:02:FF:74:52:92:B6:D7:E4:09:AC:7B:D4:CA:59
Authority key identifier: 53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
Certificate issuer: /CN=534676d66932c77a25761136ac99eb9b74d801a6
Certificate serial: 019D9A753F0AB9036064BDD2ACC1386B5B4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
Manifest number: 0593
Signing time: Fri 17 Apr 2026 08:01:08 +0000
Manifest this update: Fri 17 Apr 2026 08:01:08 +0000
Manifest next update: Sat 18 Apr 2026 08:01:08 +0000
Files and hashes: 1: U0Z21mkyx3oldhE2rJnrm3TYAaY.crl (hash: E76+LhEQqMtyMF2K/OGWy6BJEnHUEPMYZoWpPbCK+nQ=)
2: aLUgnnQfJFpMYdLs4kwtonmb-hA.roa (hash: GymUmYXXa2s1YAQ4JdjPRXC1fKxQsyfynIWTDZIu0M0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:3f:0a:b9:03:60:64:bd:d2:ac:c1:38:6b:5b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=534676d66932c77a25761136ac99eb9b74d801a6
Validity
Not Before: Apr 17 08:01:08 2026 GMT
Not After : Apr 18 08:01:08 2026 GMT
Subject: CN=acf2cddb4eb502ff745292b6d7e409ac7bd4ca59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:ad:02:90:7d:2c:3b:c9:0c:57:00:a9:8a:10:
79:3e:08:08:71:4e:12:56:17:4a:34:73:08:17:05:
30:95:7e:55:8f:82:59:16:e2:00:9b:87:6a:00:4c:
e8:e1:c6:9e:e3:09:02:b2:f5:8c:03:0f:95:3d:73:
9f:a3:f8:46:73:a5:ab:fc:bb:e5:5e:da:ac:a3:99:
71:c4:f0:7e:dd:bc:a5:f3:bf:88:74:2b:b5:cb:c6:
14:b2:09:a4:ce:bf:5f:27:f1:50:2c:87:c4:aa:f3:
53:b6:64:87:d6:9f:ee:99:1b:17:cb:ae:dd:88:ea:
17:16:a1:2b:a2:c5:c6:9d:d2:c1:50:c0:c5:27:7d:
69:c1:9b:9e:f1:ec:1b:98:c4:f4:c8:da:8f:d0:da:
2e:8f:b5:34:c1:a1:64:aa:39:03:e3:47:9e:8f:d4:
2c:bb:16:cd:f7:ee:7c:77:c1:4c:ae:53:5f:07:4f:
b2:71:0a:39:dc:c9:e2:a4:8f:72:c7:ce:14:60:5e:
f0:99:4b:be:b1:03:02:0c:5f:13:68:a5:80:53:e4:
76:1b:94:b2:ea:33:e2:5a:6c:bc:42:20:fa:15:56:
05:8a:33:8f:26:13:bd:2d:51:b7:29:fb:10:2b:ab:
8c:d8:ba:9b:6a:59:f4:f7:aa:50:a4:7a:4a:9b:bb:
d1:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:F2:CD:DB:4E:B5:02:FF:74:52:92:B6:D7:E4:09:AC:7B:D4:CA:59
X509v3 Authority Key Identifier:
keyid:53:46:76:D6:69:32:C7:7A:25:76:11:36:AC:99:EB:9B:74:D8:01:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U0Z21mkyx3oldhE2rJnrm3TYAaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/04e64b-924c-48a0-89a4-a00944fd7d9d/1/U0Z21mkyx3oldhE2rJnrm3TYAaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:19:fa:96:4e:af:76:d7:dc:b9:fd:0c:5b:80:3d:ec:03:db:
fe:ba:37:ff:dc:59:55:ac:45:fe:5d:85:47:4b:59:56:2f:6e:
f9:d7:43:06:b2:c5:04:91:93:57:02:53:d9:34:72:13:16:30:
0f:e6:41:23:bb:e3:de:6c:c6:f2:91:ff:eb:28:78:16:3e:5b:
7c:53:f3:76:e3:b1:dd:98:4d:ad:50:16:0d:4e:d0:a6:99:48:
5b:2c:54:4d:44:f4:c8:c5:11:09:16:a4:5c:c2:dc:18:9e:cd:
42:80:52:06:8e:f0:ab:27:e7:17:ad:6c:c3:f3:68:fa:06:bb:
ab:39:ce:5b:83:9b:f2:3b:2f:14:1e:7b:c0:bc:b1:f1:4b:c4:
25:8c:ff:bf:bb:93:20:0e:25:83:43:c5:4c:8e:af:82:51:e9:
28:fa:22:23:46:3c:3d:2b:e0:92:e9:f3:76:af:2f:11:6c:9b:
eb:e2:ea:b9:08:30:e3:c4:82:9f:cc:f4:ad:00:c6:5b:99:76:
94:b5:38:30:5a:ad:83:5f:3c:a4:4a:7c:8d:62:69:d6:fc:de:
c7:ee:b4:05:18:2c:ed:2e:5a:6f:91:bf:2c:b4:ba:a5:ac:b7:
a2:52:bb:88:ea:fe:4f:e8:26:8d:51:e2:c4:dc:73:a1:3c:b2:
2e:2c:6c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:14:06 2026 by rpki-client