Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
File: uMDd44urYli1oClOwTT2ysFdNm4.mft (raw, json)
Hash identifier: 5+Hw+gUSJ6D5KIo+pTHZy6YXe/GKJLCrC/8ZUec2Zfg=
Subject key identifier: 6D:02:49:C8:C1:27:F7:89:87:C6:80:04:F4:A2:5F:9A:65:3C:3D:B6
Authority key identifier: B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
Certificate issuer: /CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Certificate serial: 019DA3417EF5BE5A0E2322CF61888612B8D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
Manifest number: 0859
Signing time: Sun 19 Apr 2026 01:01:11 +0000
Manifest this update: Sun 19 Apr 2026 01:01:11 +0000
Manifest next update: Mon 20 Apr 2026 01:01:11 +0000
Files and hashes: 1: fi4yA0xzPM7GYQgxbxmYjezn86E.roa (hash: G/nw7pbKmX3E/jluA4P6MIqyVk+aVk5yMtozD6WiDB4=)
2: uMDd44urYli1oClOwTT2ysFdNm4.crl (hash: JmEf+JlkBWcDfpbysi70njjdm/nePYWAZZLOvVtTmzM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:7e:f5:be:5a:0e:23:22:cf:61:88:86:12:b8:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c0dde38bab6258b5a0294ec134f6cac15d366e
Validity
Not Before: Apr 19 01:01:11 2026 GMT
Not After : Apr 20 01:01:11 2026 GMT
Subject: CN=6d0249c8c127f78987c68004f4a25f9a653c3db6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:a1:1f:27:fc:70:9f:e5:37:7d:fa:f1:57:49:
88:4b:dd:f5:d4:aa:e5:85:74:59:84:50:1f:20:4a:
fb:ae:c5:93:7a:bf:d5:c8:65:f2:81:13:9f:b9:fe:
35:c5:62:da:a1:b2:9b:ad:dd:a6:be:81:d4:18:5c:
5f:63:8e:8f:ff:1d:2c:c4:fe:75:39:f1:9a:d2:ba:
51:77:4e:c3:2e:90:4c:25:dd:ce:3b:4e:bd:67:91:
0c:c6:59:2c:3a:16:6f:22:23:02:49:db:08:01:22:
97:51:4d:ee:6c:cf:83:46:71:cb:8e:87:67:a0:07:
00:17:2a:cc:5f:e2:19:f9:c5:b6:73:11:a2:22:92:
cd:8d:16:8e:c3:da:a2:44:52:55:11:cf:b6:f0:bf:
5a:48:d7:30:56:d6:31:8f:3d:65:bb:2b:26:f8:33:
cc:cb:87:56:b0:b5:56:d9:77:e2:7b:b4:3a:ed:4d:
7a:06:b1:07:53:ea:82:66:51:91:b7:0a:e9:51:21:
e1:1a:28:62:45:68:b8:f1:1e:ec:c7:44:de:60:9c:
84:37:98:7b:c0:96:b6:d3:7d:69:43:55:aa:65:26:
e6:ef:c3:06:8a:84:ed:d7:a3:64:db:20:df:f6:0e:
42:ec:1d:45:58:eb:89:d5:4c:35:de:17:9c:1b:f8:
07:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:02:49:C8:C1:27:F7:89:87:C6:80:04:F4:A2:5F:9A:65:3C:3D:B6
X509v3 Authority Key Identifier:
keyid:B8:C0:DD:E3:8B:AB:62:58:B5:A0:29:4E:C1:34:F6:CA:C1:5D:36:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMDd44urYli1oClOwTT2ysFdNm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7a526c-2dc7-4069-9e32-04edbdbcec37/1/uMDd44urYli1oClOwTT2ysFdNm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:1a:64:3e:43:68:60:3e:65:c3:d1:b6:15:3a:4f:01:e2:9d:
c7:d7:17:fd:a0:1c:4c:7c:70:b7:71:29:4b:9d:61:37:eb:68:
8f:32:76:46:2b:2c:7d:73:ad:e0:ad:51:f8:6d:51:27:b3:e5:
d0:b9:29:34:ed:46:d4:b2:a9:90:7a:50:8f:39:e2:37:c2:9f:
00:b5:29:14:36:a9:86:02:51:02:db:47:c6:cc:a5:1a:df:3c:
dd:56:5c:6b:1b:ba:3d:98:ec:73:5b:aa:0f:5c:d0:7b:88:7f:
d1:88:90:01:5c:63:11:a4:96:8d:a6:b1:ff:27:c2:f4:4a:4b:
78:b8:2d:b0:a7:e3:6d:92:b0:86:67:47:01:c0:1f:b7:70:06:
f7:7b:a9:c3:11:50:4a:88:ae:d5:8a:df:8e:f8:c7:ae:4c:b2:
0d:62:29:e3:b8:8a:b0:b5:01:19:07:6d:84:8d:d9:98:f6:af:
a3:2b:74:21:2e:2d:69:d3:c5:3e:b1:c3:73:2b:61:f5:94:8e:
5b:4b:fe:8b:fa:34:b7:04:68:fc:f2:7b:5a:8e:95:56:a1:92:
37:32:21:da:f3:c1:b2:02:52:39:2a:6c:5b:93:27:63:1d:33:
c7:b6:ad:5f:9c:9e:bf:de:22:04:b9:63:02:b1:34:16:5e:86:
6f:d3:cb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:29:43 2026 by rpki-client