Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
File: UFrRf0xiDVjUU9X218kjP84SZJk.mft (raw, json)
Hash identifier: JHvbNjuzSmRGRKtz1uZLLTwO91S0ps7HNDQJRpmKV9Y=
Subject key identifier: D7:22:02:0A:1D:89:B1:1E:DE:18:35:D1:FB:E2:A2:4F:0B:F0:CE:CA
Authority key identifier: 50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
Certificate issuer: /CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Certificate serial: 019DA2D3709ED4D72F0D14F6145E55A5F76C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
Manifest number: 0951
Signing time: Sat 18 Apr 2026 23:00:59 +0000
Manifest this update: Sat 18 Apr 2026 23:00:59 +0000
Manifest next update: Sun 19 Apr 2026 23:00:59 +0000
Files and hashes: 1: UFrRf0xiDVjUU9X218kjP84SZJk.crl (hash: tMFNS73vZ8dgyNhoIoHVJ0+/JuLkKteji/gVGkf9V3E=)
2: n29c-eqwdShZtcEOhZv3Ign1VGo.roa (hash: uxh/IP+egHWNQsX3vB68RQ/0/wzosXKCxI7jga5PL14=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d3:70:9e:d4:d7:2f:0d:14:f6:14:5e:55:a5:f7:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505ad17f4c620d58d453d5f6d7c9233fce126499
Validity
Not Before: Apr 18 23:00:59 2026 GMT
Not After : Apr 19 23:00:59 2026 GMT
Subject: CN=d722020a1d89b11ede1835d1fbe2a24f0bf0ceca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:dc:5e:af:d0:ca:bd:a7:29:dc:6f:dd:b1:9d:
4f:5c:a0:ab:52:99:11:85:c7:8d:48:5a:2f:ab:55:
7d:b8:72:00:c7:bd:b9:f9:4f:8e:ba:fc:30:6b:a6:
6e:80:70:ed:b9:f9:90:0a:7b:94:d1:45:52:5c:6b:
46:5a:d7:09:1a:6b:ae:e7:2e:ef:07:46:ee:54:56:
0c:4f:07:c6:ad:96:60:f9:f0:a6:0c:ef:b1:8f:ad:
0f:a4:cf:bc:74:5e:8e:3f:92:a0:99:ff:54:4c:57:
13:54:c0:a2:9e:cb:07:ea:c2:be:1d:e3:c8:ee:ff:
29:e8:1f:e7:ee:4d:3c:9c:b2:e5:aa:6a:c2:36:0a:
f3:e5:12:42:2d:51:f0:dc:e5:5f:d1:01:7f:bb:b2:
01:f7:4a:58:9f:d9:8d:04:d4:5d:2d:70:47:5b:9c:
fc:3e:98:bb:12:3c:6a:b7:5c:d6:1e:57:36:82:c5:
52:b4:f9:56:bb:80:d3:a4:a9:0c:41:2c:2a:e1:ca:
74:1c:b8:e8:4f:b5:a9:49:4a:99:7b:cd:e2:ce:f4:
c4:d3:a7:5f:7e:b4:a9:0b:13:c4:1b:70:2e:5e:5d:
45:5f:d4:83:5f:17:2a:44:9c:6b:a9:5e:45:70:d4:
45:cd:34:db:42:80:a0:44:14:89:24:39:16:d6:24:
9c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:22:02:0A:1D:89:B1:1E:DE:18:35:D1:FB:E2:A2:4F:0B:F0:CE:CA
X509v3 Authority Key Identifier:
keyid:50:5A:D1:7F:4C:62:0D:58:D4:53:D5:F6:D7:C9:23:3F:CE:12:64:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFrRf0xiDVjUU9X218kjP84SZJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/a2fc18-534b-4454-9bd1-fe6bb049337d/1/UFrRf0xiDVjUU9X218kjP84SZJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:ad:aa:0a:a8:a0:d8:66:43:bf:29:86:f5:a3:83:00:17:bf:
cb:3f:d1:bb:99:f0:b9:ea:15:e6:af:57:2f:87:f3:a6:e8:8b:
40:96:df:52:70:a9:4e:cf:8b:12:62:10:37:45:5b:49:56:b4:
7f:3b:be:b0:30:b5:76:04:ef:58:6d:d4:66:41:53:f3:d4:81:
ef:81:f6:db:3c:5f:e9:77:17:60:78:87:81:76:86:ea:71:ab:
64:a3:24:92:ea:6a:4a:5d:13:72:00:11:19:26:bc:6d:63:ac:
7e:a7:42:e2:c9:21:73:87:3a:48:70:42:c2:83:fb:f3:b5:c4:
61:a4:44:a3:9b:b0:c8:d2:c4:b6:81:c7:41:c1:66:fd:13:ad:
f0:fb:88:09:eb:4f:ac:c3:c5:a8:70:df:6f:4a:73:e6:59:61:
cd:cf:4c:2a:a2:c9:4e:3c:7a:c6:67:73:6e:31:70:33:ba:20:
ea:5e:28:7a:6f:3b:95:48:20:13:1d:d3:4f:13:75:d3:f9:80:
ff:a0:c2:f7:6c:45:12:6d:62:9f:10:36:ea:91:f8:99:57:a5:
82:40:89:bc:e4:07:e4:97:50:ae:79:6b:ab:55:06:d4:94:89:
d3:a0:bc:1f:e1:2b:da:e5:8b:fb:ba:54:9e:ee:08:68:a6:98:
79:79:47:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:54:25 2026 by rpki-client