Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
File: uXK9SdVRtK2lvWu2lWGKeUUa004.mft (raw, json)
Hash identifier: CPiSU5cYK222SoSmM0xN2MpxwQeKQWRlU6yAHN1DYoM=
Subject key identifier: BD:9A:8B:5F:4A:38:B2:52:54:E9:3E:80:6B:4B:07:1E:2F:BC:80:0B
Authority key identifier: B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
Certificate issuer: /CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Certificate serial: 019D9BF513EE0642314280F4F0A790E710F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
Manifest number: 0B24
Signing time: Fri 17 Apr 2026 15:00:22 +0000
Manifest this update: Fri 17 Apr 2026 15:00:22 +0000
Manifest next update: Sat 18 Apr 2026 15:00:22 +0000
Files and hashes: 1: 0FR4rtBsUgkCQ9m5OguHfOm1GHQ.roa (hash: d7VJiBtsIdM7jSysdAdRwoEyVrklS+9IpbWKmL/eW6A=)
2: jOeIMzKbhpgFfG5e3hDQe_UydwM.roa (hash: y03l7aLK3bctMe56clUbqVb6IeHiboemDaPxdQDYS7Y=)
3: uXK9SdVRtK2lvWu2lWGKeUUa004.crl (hash: zGOPubVfqnsbfrR+7ISbpZhWkRQI1KYfqR2SmOuLeps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:13:ee:06:42:31:42:80:f4:f0:a7:90:e7:10:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b972bd49d551b4ada5bd6bb695618a79451ad34e
Validity
Not Before: Apr 17 15:00:22 2026 GMT
Not After : Apr 18 15:00:22 2026 GMT
Subject: CN=bd9a8b5f4a38b25254e93e806b4b071e2fbc800b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:f1:a1:e8:51:a0:66:e9:cc:6a:0d:d1:f3:39:
43:5a:14:67:61:58:a2:88:15:03:8c:30:23:f5:9d:
5a:3e:9f:3e:31:ed:55:39:3e:79:ae:e6:9e:b7:28:
b9:9f:0d:f0:71:03:1c:dc:c9:e0:df:04:14:cd:19:
35:34:0c:30:25:9f:cf:c4:61:7f:f1:71:83:99:9d:
d3:2b:cb:cb:5b:2b:b5:6a:0f:66:3d:6f:33:aa:21:
21:c0:4c:ed:05:d9:d4:7a:b3:74:5c:9f:e4:25:68:
70:a8:81:bd:51:07:b8:39:3a:8d:28:c4:fe:12:51:
d0:7e:88:3a:af:86:64:8d:5d:d1:9d:a7:f3:f0:32:
8e:c0:7c:e9:1b:b2:58:d8:71:64:11:5d:f4:36:3e:
4f:b1:cf:e7:2f:c4:9e:ff:e9:76:b8:c9:80:49:46:
b0:8d:76:06:27:dc:d9:01:e5:83:6c:45:48:d2:ad:
b8:df:50:70:d1:9e:2b:67:12:ce:20:15:d2:bf:ad:
37:ad:39:21:a2:77:a5:eb:dc:50:55:98:44:39:4f:
fb:dd:07:41:d6:74:4a:bd:c2:0c:16:f5:c2:a6:2a:
01:d1:ca:54:b0:5c:0f:d0:e3:5c:28:40:1e:7c:bd:
bd:da:a9:73:ea:a5:66:3a:20:20:44:18:ab:93:6b:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9A:8B:5F:4A:38:B2:52:54:E9:3E:80:6B:4B:07:1E:2F:BC:80:0B
X509v3 Authority Key Identifier:
keyid:B9:72:BD:49:D5:51:B4:AD:A5:BD:6B:B6:95:61:8A:79:45:1A:D3:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXK9SdVRtK2lvWu2lWGKeUUa004.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/fe07b7-f464-4e67-8299-ca5e685438a2/1/uXK9SdVRtK2lvWu2lWGKeUUa004.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:89:3f:ce:ce:32:f8:98:db:28:b1:92:16:6c:e8:58:28:f7:
d0:27:0c:79:84:dd:b2:d8:9d:f3:30:2a:59:7e:b5:d9:90:b6:
55:77:1c:27:4a:94:b2:b2:6e:1c:0c:bf:29:ad:8d:8a:fd:0e:
8d:c3:06:07:21:42:50:2c:3a:3e:60:61:7c:a5:5f:34:3b:39:
58:f1:98:9e:70:76:60:49:fd:ea:9c:c2:1d:67:c5:8c:da:8a:
f8:36:b4:11:d3:7d:6a:e8:3e:ce:36:e7:3f:33:e0:07:e8:8c:
97:f0:26:13:12:04:47:2b:c9:cf:52:21:37:9b:f7:7c:cd:6e:
f2:5c:dc:60:20:4b:82:ae:46:b5:89:d7:f2:1c:56:f5:95:bf:
ff:5a:42:a7:ce:1b:d4:92:27:b1:63:e9:d6:0e:2c:9c:c3:8c:
68:0c:14:c3:2e:10:db:e6:95:98:a8:cf:d9:35:50:5e:ea:f6:
93:ec:fc:8c:48:7f:a2:b7:37:8c:17:9a:24:35:1c:ae:cc:9e:
f8:b3:18:c2:7f:f7:bf:a7:82:35:88:f9:72:1f:47:b9:d3:a8:
6a:d3:cf:85:00:77:c9:9f:94:db:31:18:bf:63:17:8f:26:4f:
39:74:08:9c:2d:f2:4f:a8:20:5a:10:6b:bf:01:d9:eb:d3:44:
b0:6a:b4:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:22:18 2026 by rpki-client