Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
File: uGnuZhZNPLQdvS31QXgXwy9M6gU.mft (raw, json)
Hash identifier: i3Ew5GkxCvhYNcN2t73jaeOvKOREEDaOPsDZzLLLo9Y=
Subject key identifier: CB:07:2C:07:16:B5:FA:19:32:9A:DA:5C:2E:5E:59:28:81:5F:13:07
Authority key identifier: B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
Certificate issuer: /CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Certificate serial: 019D9A74D4C489705FAF6392A630DDBC986E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 08:00:40 +0000
Manifest this update: Fri 17 Apr 2026 08:00:40 +0000
Manifest next update: Sat 18 Apr 2026 08:00:40 +0000
Files and hashes: 1: EKN-VhfSh7NqAUTwaEDwo-mbUcg.roa (hash: RURLvfa0vZeEDe5BKC7vJtcjJKvo0nmsNWlb1Fca1bg=)
2: uGnuZhZNPLQdvS31QXgXwy9M6gU.crl (hash: 2DgrqkGeMKWjpUWa1WO/a8U79IHO8Wy7Cz7t6ShQV/c=)
3: z_SLOwZzLzTLUlxe9eeHUMNRBV4.roa (hash: sXhfTVz/7doOZGLXSWgTb9dJ0tx/PZHzsugITkY48mE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:d4:c4:89:70:5f:af:63:92:a6:30:dd:bc:98:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b869ee66164d3cb41dbd2df5417817c32f4cea05
Validity
Not Before: Apr 17 08:00:40 2026 GMT
Not After : Apr 18 08:00:40 2026 GMT
Subject: CN=cb072c0716b5fa19329ada5c2e5e5928815f1307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2e:2d:ea:e4:3e:88:5d:44:40:42:a6:f1:07:
b3:8e:39:53:d9:ca:b2:b5:9c:e5:d7:52:8e:57:3a:
2e:44:02:7c:af:8c:21:c0:81:14:56:68:da:e8:0c:
b8:a8:c3:9f:13:e6:79:5f:10:8a:70:97:16:e6:b7:
f8:13:e5:67:cb:2d:1c:11:28:73:e8:89:f7:88:23:
ac:40:b2:52:b2:07:24:81:0b:e0:c9:e8:d0:6f:cb:
f1:88:24:f6:87:03:e5:f5:2a:c0:27:4e:d3:57:fb:
df:fb:be:43:52:d7:10:4f:6a:83:d2:47:67:b9:9b:
ec:a4:17:17:ce:5c:51:71:04:25:33:a9:dc:d8:3a:
b1:e4:7b:0f:1b:28:4c:e3:44:40:5c:82:d6:e4:8e:
ab:22:52:29:59:46:06:7d:02:5c:f6:d6:3e:76:ed:
97:31:12:0e:fb:6f:51:c0:8b:e4:ce:35:dd:5c:63:
4c:58:a6:7d:f4:07:8b:01:4b:7b:e0:17:48:e0:36:
31:ec:ad:e9:a2:17:3a:7b:f0:44:7e:b4:00:f6:5f:
1f:26:0f:81:f4:a9:0a:91:72:40:18:4f:74:60:7a:
66:5e:7b:c4:ff:e3:14:d6:99:92:14:57:01:45:96:
88:1e:67:df:74:e0:03:5e:42:85:00:3b:57:95:20:
08:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:07:2C:07:16:B5:FA:19:32:9A:DA:5C:2E:5E:59:28:81:5F:13:07
X509v3 Authority Key Identifier:
keyid:B8:69:EE:66:16:4D:3C:B4:1D:BD:2D:F5:41:78:17:C3:2F:4C:EA:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uGnuZhZNPLQdvS31QXgXwy9M6gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/1d5ee1-accf-474f-a589-cd1fa484411b/1/uGnuZhZNPLQdvS31QXgXwy9M6gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:86:70:f0:13:a2:a8:07:39:07:01:ef:ab:c2:e4:ca:9d:42:
a7:4f:73:71:07:ec:1f:4a:fe:7c:a0:22:f4:53:fb:ef:9e:ed:
37:a1:93:11:7f:94:f5:1f:11:39:8a:10:c1:97:ad:83:2b:ec:
f8:e6:8d:c3:78:87:30:78:8f:f6:1e:7a:4f:89:be:36:1c:33:
ee:f1:20:33:04:e5:ae:6b:4e:0f:70:8f:65:2c:7d:d3:fc:95:
ff:5c:dd:db:d8:34:8f:5e:98:31:6a:28:0b:ef:15:94:46:20:
eb:75:64:bb:fe:b1:17:08:50:25:1d:b2:07:63:60:2f:9a:b9:
48:26:d2:77:df:7a:cb:43:19:c5:fa:79:3a:1d:f4:cf:de:5b:
a5:2f:6e:8a:15:96:99:da:99:37:c4:b0:28:a2:52:8b:82:57:
d9:1d:00:3d:3e:ad:af:8c:cc:b1:b7:f7:35:6b:e3:40:c2:63:
a9:9f:47:d4:13:03:47:76:2c:fa:4a:05:e0:92:3c:af:6a:7f:
27:48:9b:d1:5b:b2:5d:1a:b2:1b:a6:8c:bc:49:f9:1e:12:aa:
b2:92:16:ef:55:63:49:64:82:4a:64:44:10:20:80:93:4e:98:
64:b5:86:7b:57:cf:18:a0:6a:9d:d2:ec:a3:1d:d7:8a:69:73:
c6:7f:80:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:03:13 2026 by rpki-client