Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
File: uRil9IFVJuHpJRDTZI69oM27wqw.mft (raw, json)
Hash identifier: QD54ueC+3gl7MoXJusnv4uE+pp0TDUIy9HEWd1sjPyE=
Subject key identifier: 35:6C:4D:E6:41:FD:F1:79:34:3E:AD:B4:F1:ED:31:09:41:1C:2E:BE
Authority key identifier: B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
Certificate issuer: /CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Certificate serial: 019D9AAC43FF1A1441384BBB9BB089EBBC62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
Manifest number: 0ACE
Signing time: Fri 17 Apr 2026 09:01:13 +0000
Manifest this update: Fri 17 Apr 2026 09:01:13 +0000
Manifest next update: Sat 18 Apr 2026 09:01:13 +0000
Files and hashes: 1: IVaGwYE-xSWos9-zj2HpODEJhqg.roa (hash: L3WvUKStDTf5drv93q1GG66aaVezmjafU4Trsj7t1+s=)
2: uRil9IFVJuHpJRDTZI69oM27wqw.crl (hash: JRY6PMVqk11j7aUkqsbdp8tj1n94KYaW2cBXztIIiek=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 09:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:43:ff:1a:14:41:38:4b:bb:9b:b0:89:eb:bc:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b918a5f4815526e1e92510d3648ebda0cdbbc2ac
Validity
Not Before: Apr 17 09:01:13 2026 GMT
Not After : Apr 18 09:01:13 2026 GMT
Subject: CN=356c4de641fdf179343eadb4f1ed3109411c2ebe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:18:86:96:4c:c9:5a:5d:b0:b2:34:ab:62:b5:
d5:c0:e3:89:21:b8:29:e2:81:97:04:3c:43:99:b2:
c8:56:06:4c:34:4d:0c:b0:a2:01:6f:50:02:ad:54:
18:20:33:f0:a6:1f:e0:d0:a3:98:ae:05:68:08:ec:
3b:f0:56:76:24:4a:4b:fb:61:70:8c:25:2c:9b:80:
0b:3d:4e:16:b9:7f:9c:31:56:5b:07:b3:ca:21:38:
32:bb:79:83:c1:ac:cd:67:6e:7c:8c:5f:20:27:cb:
24:11:38:69:ed:3c:f9:c4:11:f9:07:f4:ce:34:7a:
27:ee:e4:70:aa:38:8a:96:69:ac:82:af:a9:16:2c:
bf:ac:84:4c:2e:b8:27:26:e4:55:6a:b2:2f:f5:2f:
f5:73:df:02:ca:47:2b:f9:c4:92:8e:93:be:51:47:
b3:5a:29:24:33:46:28:3d:15:63:f7:4c:c5:b5:00:
9c:57:85:50:55:6d:fa:f0:1c:02:8c:e9:de:c5:41:
61:9c:ad:1b:e2:81:ec:62:7f:4b:b9:1c:3d:7b:85:
6c:9c:5f:5e:2f:bf:44:0c:eb:bd:ca:ce:02:ec:8b:
cf:30:01:a3:65:d3:af:e3:5e:79:77:75:26:78:e1:
b7:d7:8b:74:a2:68:e7:1f:07:ed:cd:85:06:8f:a6:
41:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:6C:4D:E6:41:FD:F1:79:34:3E:AD:B4:F1:ED:31:09:41:1C:2E:BE
X509v3 Authority Key Identifier:
keyid:B9:18:A5:F4:81:55:26:E1:E9:25:10:D3:64:8E:BD:A0:CD:BB:C2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uRil9IFVJuHpJRDTZI69oM27wqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/3c293a-1591-4685-8769-a8f90d45ea67/1/uRil9IFVJuHpJRDTZI69oM27wqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:46:db:05:ae:67:10:5d:e8:e4:6e:ef:dd:d5:72:77:5f:94:
02:72:52:9f:af:71:59:33:17:46:a3:3b:aa:97:56:71:86:c3:
94:87:0d:95:93:29:26:c5:06:73:db:d9:ac:ab:67:c5:e9:9b:
99:e0:e9:ee:ca:02:3b:dd:65:69:52:33:26:1c:f1:da:bc:c6:
73:3d:02:42:00:2b:88:1b:47:98:b1:27:79:b4:f2:f0:2e:bb:
7a:9d:21:42:e9:75:28:f6:83:3b:8e:c3:95:05:91:c0:42:5c:
5f:aa:a8:46:f6:03:3e:74:08:63:1e:2a:9a:ae:d3:f3:6e:66:
a1:47:0a:7f:43:fe:e8:28:c2:ec:f7:48:a9:c2:eb:52:5a:58:
ed:be:7b:44:e4:ad:71:d4:47:b5:1e:81:c5:11:de:a8:b5:6e:
d6:56:26:54:b6:a4:eb:5d:f8:f5:41:16:90:6c:4d:ca:69:99:
a0:8e:f2:2f:51:3a:f0:70:14:5b:c2:ca:4c:8d:c3:b8:9d:1c:
0c:34:71:69:d7:3a:4b:19:6c:c3:b8:70:25:de:38:50:4f:c6:
5e:b6:3f:b5:7e:6c:38:2b:59:ac:4a:f6:c2:ca:9b:6e:97:0d:
c7:24:b7:36:5b:43:52:7a:e8:d8:78:23:d2:54:4d:eb:2d:72:
46:36:6c:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:28 2026 by rpki-client