Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
File: x-ur14baE4BWVbG1UB_cv0M7x40.mft (raw, json)
Hash identifier: IHv5KPwqESG5kztXq0ZhpS+PtfqEldBetUhi/zyiHDI=
Subject key identifier: 95:DA:88:C1:DC:B6:F9:1F:28:6B:A9:DE:21:86:10:F2:23:B1:D9:FF
Authority key identifier: C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
Certificate issuer: /CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Certificate serial: 019D99D038DF41929BD5FE192F447115D3A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
Manifest number: 1048
Signing time: Fri 17 Apr 2026 05:00:53 +0000
Manifest this update: Fri 17 Apr 2026 05:00:53 +0000
Manifest next update: Sat 18 Apr 2026 05:00:53 +0000
Files and hashes: 1: MUDlj_foqQtHS4g3iVOxdnqwX5U.roa (hash: 8ddMF47yP0pJAVGHQdkSQLRsafhb5eoMN8E4QvTkIwo=)
2: T_ajvR2nQAvlNGNDSwjL2eitBKI.roa (hash: uZlllXoSCgzxncNwBPd5Cx/IZ61QG4puWlaD0A2LBZ8=)
3: x-ur14baE4BWVbG1UB_cv0M7x40.crl (hash: PxvA0J70T30cEbnA1FKmsrkfm3r+ebQlg8TPwW8RMhI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:38:df:41:92:9b:d5:fe:19:2f:44:71:15:d3:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7ebabd786da13805655b1b5501fdcbf433bc78d
Validity
Not Before: Apr 17 05:00:53 2026 GMT
Not After : Apr 18 05:00:53 2026 GMT
Subject: CN=95da88c1dcb6f91f286ba9de218610f223b1d9ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:af:d5:2b:3c:96:e8:78:51:81:d6:5b:7b:7f:
5c:35:cd:53:98:5c:9f:5b:d1:ec:4d:6e:75:56:cc:
13:ac:e8:7f:69:6d:a8:5c:5c:6b:66:bb:61:af:50:
5e:fb:ac:f2:6d:f5:31:c9:64:e7:8b:f9:41:76:ce:
51:e3:09:71:35:5a:81:d5:32:e6:d5:22:71:85:e5:
de:c6:ad:86:8e:9c:bb:27:fd:36:01:0d:c9:e7:3e:
18:d4:d9:bc:91:76:3f:e2:c6:41:d9:64:06:af:76:
43:da:68:c8:c7:4f:c5:78:f5:89:7c:02:fe:52:b8:
0f:1f:60:bf:a1:99:e4:9e:c1:15:9e:e2:2f:e8:0d:
90:6b:7e:2a:a7:8e:96:00:88:fd:01:3f:79:b8:9f:
12:08:57:b5:53:e0:35:1e:b3:e8:b1:e1:72:68:4c:
cb:93:37:df:c3:2d:6d:ff:5e:1e:f2:4b:09:a7:c4:
13:00:fd:e7:f1:17:64:69:ef:26:74:2e:1e:27:f5:
4e:3e:e9:78:6b:5f:ca:c6:4b:6e:08:9c:7d:98:82:
56:16:45:d3:74:02:65:c6:c4:17:70:3f:f2:2e:da:
fb:9d:73:97:49:38:e3:57:54:bd:dc:1e:cf:3c:b5:
64:8d:5a:4f:40:2d:56:d2:6f:4e:40:9d:82:4f:77:
c6:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DA:88:C1:DC:B6:F9:1F:28:6B:A9:DE:21:86:10:F2:23:B1:D9:FF
X509v3 Authority Key Identifier:
keyid:C7:EB:AB:D7:86:DA:13:80:56:55:B1:B5:50:1F:DC:BF:43:3B:C7:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-ur14baE4BWVbG1UB_cv0M7x40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/c064a5-d7a9-4e6f-8fd8-0dcd03dc0897/1/x-ur14baE4BWVbG1UB_cv0M7x40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:d4:4f:35:0e:e9:7a:b6:85:7a:3f:c0:ee:ae:4c:ae:4e:11:
fc:42:72:d6:2f:f2:f8:07:8d:d3:e8:52:5f:f2:33:99:a2:fc:
63:44:98:91:29:a9:a4:37:00:62:d4:9f:00:24:bb:16:b7:48:
2b:6d:e7:8a:a2:0b:d1:7b:16:21:af:02:f6:0e:27:60:a3:fe:
28:4d:a9:b2:2d:b8:5a:b7:71:ef:21:da:56:a2:97:27:3e:a0:
72:72:61:51:0c:23:f6:24:e6:43:0c:35:f0:a2:68:22:c6:e1:
12:4b:e0:0d:7c:9b:34:e1:0c:73:9a:27:cc:43:b8:54:3f:82:
03:fc:5a:24:e1:dd:be:d2:1a:39:79:1f:11:d6:c7:71:93:e6:
3d:78:2f:32:9f:79:88:2c:79:19:cc:33:e1:7f:39:6e:44:25:
d5:40:3c:51:90:e6:71:4e:64:7a:30:87:4c:30:5f:4e:5e:a1:
c2:fa:a6:14:27:81:ce:9e:9f:ef:50:c2:7f:9c:52:e4:90:dd:
0b:e1:53:18:1b:69:ce:77:91:c8:de:c7:9e:59:1b:7f:13:1b:
62:f6:49:44:6c:10:d2:45:ef:d0:a4:a2:a9:3e:dc:e2:79:0f:
1d:5d:3a:52:1a:76:0d:6b:39:1e:37:21:c6:ff:b7:a4:e1:ef:
d3:99:a6:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:58:22 2026 by rpki-client