Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: s5dQFkaF7z/BaAEReiVfA9XQNXaELIVwJ3TOdufwTC0=
Subject key identifier: 4F:0F:42:50:A6:0A:EE:04:7E:78:FF:64:80:EF:A1:79:94:82:98:FC
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 019DA52FE56854D4A36DCA35CFCF3901CCA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 085A
Signing time: Sun 19 Apr 2026 10:01:12 +0000
Manifest this update: Sun 19 Apr 2026 10:01:12 +0000
Manifest next update: Mon 20 Apr 2026 10:01:12 +0000
Files and hashes: 1: fi4yA0xzPM7GYQgxbxmYjezn86E.roa (hash: G/nw7pbKmX3E/jluA4P6MIqyVk+aVk5yMtozD6WiDB4=)
2: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: GYyegan11QhEtWgK6QVW1Bu7DotfmI4OIexhSjGTOTk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:e5:68:54:d4:a3:6d:ca:35:cf:cf:39:01:cc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Apr 19 10:01:12 2026 GMT
Not After : Apr 20 10:01:12 2026 GMT
Subject: CN=4f0f4250a60aee047e78ff6480efa179948298fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:a6:66:46:b1:c3:0b:26:0a:ad:cc:86:53:5e:
90:49:27:a4:0a:d2:8c:34:bf:e4:50:42:dc:ab:2b:
e9:fe:8c:54:c9:5e:4a:83:72:10:67:31:66:18:c3:
c7:67:cb:81:65:0e:38:01:7c:86:23:a5:a9:19:79:
39:9e:fd:87:5b:a0:a2:f8:79:55:f2:d9:5f:40:cf:
e8:21:34:5e:e8:fe:fe:8c:e0:8b:ae:46:c7:52:1f:
ee:91:de:4f:e1:29:58:fe:66:b7:b0:a6:69:d3:2e:
d1:9e:e9:c6:8e:a4:ce:66:4f:e9:8c:9b:bc:30:46:
c9:6c:b3:b6:dd:62:eb:a1:af:48:82:ed:13:9b:f3:
a0:46:c2:d5:d7:49:81:a4:49:7b:e0:a5:66:bd:de:
b6:ef:7d:1f:62:35:d8:00:6d:93:05:b3:b4:70:5d:
5b:33:ce:77:6a:bd:a5:4b:60:bb:c0:2b:55:46:7f:
78:ed:b4:21:84:73:7c:b5:f0:b8:5e:84:c0:e4:c7:
a2:35:ab:e1:66:67:b6:30:79:87:25:68:d8:69:e3:
f3:e4:69:f8:2c:cd:4b:fd:5d:ec:94:2e:62:e3:0f:
30:da:8c:e1:55:1e:9e:80:ff:92:78:fc:8d:8b:f1:
63:27:f2:bb:14:3b:67:22:ae:b7:30:9d:cb:92:3e:
6a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0F:42:50:A6:0A:EE:04:7E:78:FF:64:80:EF:A1:79:94:82:98:FC
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:da:8e:ef:5c:ab:99:b2:bf:89:41:73:e5:6d:51:4f:8b:b7:
23:1f:ea:d2:d9:99:18:c6:37:b2:8d:69:15:26:95:ec:92:b3:
a4:11:ef:0d:80:c4:e5:94:72:5e:e2:aa:97:6d:af:5d:72:b5:
4c:a5:ab:da:37:8b:64:8d:81:54:d9:7f:c4:69:fa:70:8c:41:
7a:fa:c1:6f:61:37:3f:31:26:d8:5c:5b:79:ec:7b:78:f1:43:
49:a9:a3:54:7f:9a:b6:6e:9d:41:a3:61:fd:9f:f1:aa:e1:f9:
88:29:7c:4e:ea:b8:7e:b9:54:cb:24:ab:9a:9d:be:ba:29:ea:
69:72:a5:53:18:9a:4c:49:c5:ac:f0:91:ff:18:fa:f8:8f:c8:
56:10:bf:2c:6a:fb:32:be:a0:f6:7f:c5:02:97:b9:21:7c:59:
a2:92:1e:52:d1:ca:d6:4d:a8:69:69:6e:36:e0:c6:64:ce:a1:
86:fc:30:62:10:53:9d:bf:4e:16:57:33:33:ac:d7:e3:76:e5:
22:29:e2:c2:11:c4:d6:3d:8b:0f:74:a5:9f:20:85:20:9f:5e:
08:b9:00:bd:0b:52:c5:a9:c9:2b:e4:e7:08:c7:b9:27:34:43:
6f:60:0a:4e:75:bb:4b:a6:0f:b0:83:33:30:14:8f:7b:0b:86:
6c:b3:9f:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:41:48 2026 by rpki-client