Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
File: UeMbSuzGWzElp7R6yQkIsKUXhIM.mft (raw, json)
Hash identifier: dDuP9qrEDkwOh6hbpCk40Ltak41BlhKnyXGEku+D0vE=
Subject key identifier: ED:03:39:15:55:7D:3E:D8:C0:49:3E:60:99:C6:A1:DE:6B:24:07:BF
Authority key identifier: 51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
Certificate issuer: /CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Certificate serial: 019DA3AEE116C540BB46EA88998940D968E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
Manifest number: 1131
Signing time: Sun 19 Apr 2026 03:00:40 +0000
Manifest this update: Sun 19 Apr 2026 03:00:40 +0000
Manifest next update: Mon 20 Apr 2026 03:00:40 +0000
Files and hashes: 1: UeMbSuzGWzElp7R6yQkIsKUXhIM.crl (hash: jIkezAQTq3T9gkkHZ9MMHWFVPefGLypNgKdSTYcxv7w=)
2: WHzT1xNbrqBC6jtKFtgLQt_Vl6E.roa (hash: 8QkWSVBBzKymI1BjVbTns65IfcYeeeiohZFtfy32gfk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:ae:e1:16:c5:40:bb:46:ea:88:99:89:40:d9:68:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51e31b4aecc65b3125a7b47ac90908b0a5178483
Validity
Not Before: Apr 19 03:00:40 2026 GMT
Not After : Apr 20 03:00:40 2026 GMT
Subject: CN=ed033915557d3ed8c0493e6099c6a1de6b2407bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:04:b9:d5:5c:c6:0d:71:45:53:6a:94:66:d0:
e9:4a:d8:18:1d:76:0c:3a:72:0f:84:17:eb:53:ea:
23:b4:9b:13:b1:5f:0d:41:07:f7:df:ae:61:a8:3c:
b1:68:c4:93:d4:ac:f5:60:da:b9:a3:55:15:30:de:
2f:c4:d9:5b:67:fd:dd:83:bd:0f:52:3e:71:49:aa:
fe:f7:4a:37:5c:83:be:e2:69:ed:05:7d:f8:d5:fe:
4b:d1:a8:02:5b:06:11:88:cb:ce:b7:4b:99:eb:0a:
47:17:17:90:78:a0:ab:e6:47:46:11:ff:b3:95:0e:
d6:2c:0e:70:4f:31:0c:58:3b:a3:a1:12:63:e1:2e:
81:8f:9f:89:f0:24:1d:31:c2:7d:20:f1:8b:60:bb:
d7:d8:2f:f4:9c:ca:bc:bd:85:58:da:bd:2e:2a:b6:
4a:02:5a:36:fe:15:23:3e:ae:52:e2:20:74:9f:e0:
a4:4b:67:e8:fb:c9:b0:d1:43:31:fc:0e:86:86:45:
69:8a:fc:ff:22:6f:ed:f9:da:b9:b6:10:62:a4:df:
9a:f3:f2:f5:37:4a:f5:f1:79:75:35:31:c5:b0:20:
b1:cb:9c:e7:d9:7c:57:e2:0e:7a:96:87:03:93:30:
e5:ea:c2:29:9c:52:0b:02:1e:c0:42:82:5e:6c:13:
85:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:03:39:15:55:7D:3E:D8:C0:49:3E:60:99:C6:A1:DE:6B:24:07:BF
X509v3 Authority Key Identifier:
keyid:51:E3:1B:4A:EC:C6:5B:31:25:A7:B4:7A:C9:09:08:B0:A5:17:84:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UeMbSuzGWzElp7R6yQkIsKUXhIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/774481-c64f-429c-9961-fd4b2a2aefa5/1/UeMbSuzGWzElp7R6yQkIsKUXhIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:4b:b4:ed:ee:88:3f:1e:3e:ae:77:54:e2:0f:29:be:56:d9:
94:be:4a:4f:02:13:98:ec:2a:d0:04:eb:fb:ea:22:89:d8:79:
1b:08:08:da:1c:52:37:c1:43:20:73:f1:2b:33:11:b6:46:91:
39:6c:c9:be:69:7c:e9:97:92:0f:4a:97:48:d7:25:69:46:83:
18:c6:89:ac:77:ea:69:78:5f:1f:8a:9f:46:2b:3f:f4:45:be:
6f:10:bc:ac:5b:a4:7d:90:c2:b6:f6:18:bb:5a:b2:53:07:cb:
63:07:16:70:35:d9:6c:38:b7:4b:01:c7:c3:b0:a0:42:22:46:
00:be:8b:a5:ab:01:bf:a2:74:a5:4a:1e:ca:c5:6b:48:18:69:
e0:d9:d8:25:d3:61:64:e5:e8:e6:a2:bc:43:77:67:de:73:26:
15:0a:3d:8c:83:07:38:c8:d0:dd:9c:48:6c:0f:71:67:9e:ca:
80:0b:22:62:c2:5b:e4:8a:d5:29:71:26:27:f4:81:75:e8:79:
56:41:00:a9:4f:c4:65:0d:75:19:54:69:e6:7c:b7:a7:66:6c:
6a:1e:af:71:0a:a2:a8:ca:98:62:00:21:0b:68:3f:75:7f:35:
10:4f:8e:a0:6c:4f:61:61:74:53:29:2f:d6:4e:43:2b:30:39:
21:1d:c6:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:39:17 2026 by rpki-client