Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
File: uqrQjzbPvAAFOl7j1au3oxF8P4o.mft (raw, json)
Hash identifier: AkUlf/gtG1ub6SzST/Q9saZqhWymTsKR5el7tJRxasE=
Subject key identifier: B1:8D:12:B2:EF:17:CF:06:EF:0A:16:44:7E:AC:FC:1C:C0:E1:E4:0F
Authority key identifier: BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
Certificate issuer: /CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Certificate serial: 019D98F4B697BFEC80237A7BC5EFDF289471
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
Manifest number: 1023
Signing time: Fri 17 Apr 2026 01:01:07 +0000
Manifest this update: Fri 17 Apr 2026 01:01:07 +0000
Manifest next update: Sat 18 Apr 2026 01:01:07 +0000
Files and hashes: 1: S-yBnbW2TPRdHm8Bvnkb6SKNP-E.roa (hash: thzWzHkRBVrBpMkyMju39NgzMSOUf/2SSYied1BZFaw=)
2: uqrQjzbPvAAFOl7j1au3oxF8P4o.crl (hash: f7syRqxC46Njf+A4wem8ixNe/tk4/O2fy6NbC9G81xc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:b6:97:bf:ec:80:23:7a:7b:c5:ef:df:28:94:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaad08f36cfbc00053a5ee3d5abb7a3117c3f8a
Validity
Not Before: Apr 17 01:01:07 2026 GMT
Not After : Apr 18 01:01:07 2026 GMT
Subject: CN=b18d12b2ef17cf06ef0a16447eacfc1cc0e1e40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:69:a0:b9:c0:ed:7a:d7:6e:c3:e9:aa:9e:d0:
e2:43:e7:1d:33:4b:09:c7:08:36:86:44:a3:01:c8:
0e:86:13:ad:c4:13:e2:d3:5a:ef:7b:b2:a1:50:70:
d5:31:80:58:8e:f6:41:11:04:c8:34:15:ec:aa:62:
62:a8:0a:00:9a:ef:e5:73:e7:25:6b:18:d3:59:af:
a3:42:ff:c4:8e:5e:13:8a:02:b3:69:5a:0c:42:54:
97:38:93:26:bf:ae:2f:af:11:77:c6:64:b4:9f:0a:
c3:45:13:77:42:01:c1:91:05:b4:41:56:f8:ec:0b:
bb:4b:76:c7:00:06:c0:8c:31:c8:89:0a:00:5d:4c:
78:73:d9:40:27:de:fe:1f:76:e7:2b:91:46:34:59:
ab:dd:06:ce:e3:db:f9:78:40:aa:76:81:5c:ad:29:
54:a6:30:f2:d3:e7:e5:d4:1a:f1:f0:fe:2b:c2:34:
47:a8:0e:60:15:60:9b:04:e1:1a:41:95:48:ce:25:
56:53:ec:da:83:79:a2:c3:6d:91:c9:1c:e9:d4:9f:
23:d0:91:e9:27:a2:25:d9:0b:bd:bd:83:75:c7:37:
18:87:1e:d1:1e:02:85:69:84:4d:10:ed:aa:fe:ac:
ee:3e:23:02:9b:25:d7:7f:a9:06:75:08:6a:8f:d7:
2f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8D:12:B2:EF:17:CF:06:EF:0A:16:44:7E:AC:FC:1C:C0:E1:E4:0F
X509v3 Authority Key Identifier:
keyid:BA:AA:D0:8F:36:CF:BC:00:05:3A:5E:E3:D5:AB:B7:A3:11:7C:3F:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqrQjzbPvAAFOl7j1au3oxF8P4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/4edbe9-c5d2-41da-9c60-3d48da9b06a2/1/uqrQjzbPvAAFOl7j1au3oxF8P4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e2:66:2f:d2:c7:bd:4d:c8:c8:42:18:0e:90:9d:6c:a1:02:
ba:3c:27:92:6c:87:74:3e:34:7e:c8:7e:c5:b0:06:b6:e8:ee:
fc:87:4c:55:41:67:63:0b:d8:24:4e:b2:21:e7:8c:a6:d7:3c:
e8:aa:01:c7:34:d4:d2:a1:49:d9:7e:59:97:79:b8:92:9c:8e:
2f:7e:b9:b2:af:6a:9e:4c:87:03:8b:77:46:f5:25:5b:a0:9c:
b6:cb:09:55:bf:b1:38:bb:87:0a:d8:8a:6f:b0:b2:ef:df:15:
0e:c2:df:29:d5:f1:63:94:09:f2:3f:f7:cb:d9:8e:ea:57:0f:
b0:3e:a2:25:2e:cb:3e:2b:d8:c6:d4:02:27:b3:94:69:40:6f:
63:64:fd:ab:46:1c:ed:a5:b9:c0:58:f7:25:7f:7d:c2:33:94:
8c:fc:cd:ee:13:b5:3f:ce:7c:6c:47:12:8e:45:3a:27:4d:20:
73:ff:44:9f:93:0a:b8:e9:4a:10:30:ba:bb:ca:70:26:55:43:
7e:ab:61:ef:ea:3e:31:e2:0e:21:f4:83:96:3b:f2:95:3a:e8:
0d:86:65:d5:a5:3e:92:b9:56:ef:5a:27:13:6d:cb:d8:a8:bf:
19:fb:c6:57:01:00:fa:c9:8c:ed:36:bf:85:4d:1f:37:e9:af:
db:ef:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:08:23 2026 by rpki-client