Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
File: UuAiJP-5cRcuSTXtfdll0RVQibY.mft (raw, json)
Hash identifier: d1MT/vmS4i+mCOVQb98lU7sOPqYImA7zZbQ5WYwzLvU=
Subject key identifier: 46:DD:8D:C0:AD:AC:20:B7:7D:AF:BC:7F:B9:A6:0B:12:EF:38:00:02
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial: 019DA37817AC22542CA559285D3A86CED5DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
Manifest number: 1253
Signing time: Sun 19 Apr 2026 02:00:49 +0000
Manifest this update: Sun 19 Apr 2026 02:00:49 +0000
Manifest next update: Mon 20 Apr 2026 02:00:49 +0000
Files and hashes: 1: Ej04tqIea-55QGqR9P8U_IWSz5E.roa (hash: 56Ay1dz7+2/hrBe1gefM4Z9MpRY5OP2aiLGQZC5nqmk=)
2: UuAiJP-5cRcuSTXtfdll0RVQibY.crl (hash: h83hWk9Dv17O+oFV9PPW3tHD0hmke+viQrsWSTJsGHs=)
3: bKZux_GRyhQisliOyg0o3pomUGE.roa (hash: UT5otdZIy6+fjq+k6mHMr69f+BiRVOr2Dbn8liI5eMU=)
4: eed8-v0DQQsIlGh_LdKlEMEvsTw.roa (hash: ryiQISgXOOgfkizItwqCf8st8jseYCZTQbYCWpyKpsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:17:ac:22:54:2c:a5:59:28:5d:3a:86:ce:d5:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
Validity
Not Before: Apr 19 02:00:49 2026 GMT
Not After : Apr 20 02:00:49 2026 GMT
Subject: CN=46dd8dc0adac20b77dafbc7fb9a60b12ef380002
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ac:8e:6b:6b:ca:d8:20:31:5f:c9:29:e4:44:
ec:5e:0e:c7:a8:a9:20:96:cc:29:8d:97:0b:6b:fc:
f5:2d:c4:98:32:52:bf:5a:f3:3d:99:ed:b7:8d:b0:
d4:70:46:c5:74:7f:af:8e:09:55:c9:17:75:fc:e5:
4f:01:02:5d:8d:79:8b:7e:5a:0d:50:e4:de:ce:c6:
a8:c4:4c:75:a8:a8:e5:0b:48:8d:a5:be:d1:a9:74:
3f:f7:18:e4:9f:11:51:08:96:d7:44:99:45:4f:a6:
ff:83:c7:33:c2:d6:88:69:07:cb:45:61:3d:02:61:
ef:2e:37:f1:fc:02:86:a7:fa:df:0d:2e:26:66:4b:
e8:92:43:d2:c8:4a:99:4f:a3:58:e5:33:e8:cb:1e:
1a:7c:a3:ba:15:22:60:1e:63:cb:01:98:ff:95:a9:
ce:70:bf:35:5d:80:77:0a:33:8d:f3:bb:02:b0:de:
6b:bb:e5:95:55:ad:c1:e1:a6:94:33:b4:c0:dd:65:
8f:8f:7d:70:d2:02:88:15:6b:f8:54:73:bd:dd:0f:
2b:41:81:07:da:3b:9e:5b:12:2d:07:8d:0f:35:61:
3b:bd:25:2b:dd:9f:5b:9e:6c:1e:27:37:99:01:30:
41:a2:45:de:44:dc:b4:4e:90:95:1d:5b:22:80:f8:
d2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:DD:8D:C0:AD:AC:20:B7:7D:AF:BC:7F:B9:A6:0B:12:EF:38:00:02
X509v3 Authority Key Identifier:
keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:6c:5d:34:bd:20:e6:66:ec:dc:a7:15:ce:99:b6:cc:43:8c:
2b:36:b8:24:f3:c1:3e:f1:88:84:0e:f9:4b:23:c2:d9:d3:f8:
d2:ba:dd:e6:78:29:cd:be:e2:38:4d:82:03:42:50:47:64:73:
77:9f:53:12:10:49:de:a9:15:ca:34:55:df:d8:cf:e3:ab:67:
71:43:bd:ce:20:3f:27:b2:ac:d3:95:0b:6f:d9:ea:3e:4e:ef:
c6:dc:21:cb:d0:9a:0a:f6:8b:8a:d5:40:f6:2f:d1:c1:4c:a5:
eb:ac:a9:44:de:16:96:78:e7:f9:6d:28:0c:1f:5c:45:71:60:
33:f6:ed:c2:92:93:e1:ab:77:5e:fb:ba:11:85:c0:2c:f8:35:
ff:b1:84:0c:c4:ad:84:1e:40:b3:03:a2:4f:ae:cd:18:9b:6e:
65:7c:75:a4:48:6e:2f:9e:08:41:13:24:fa:ba:27:8c:ee:ea:
e9:72:75:74:97:30:6d:f1:0a:72:a4:32:ff:7d:db:80:e2:50:
55:2b:d6:e3:f0:de:bc:50:1e:22:a8:60:21:7c:36:27:ae:ee:
13:03:14:99:de:cf:e5:a0:d0:77:12:e5:89:b3:b9:65:11:ed:
68:d9:54:38:12:b3:d6:07:64:66:f5:58:a1:f1:b7:26:96:77:
32:b8:20:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:23 2026 by rpki-client