Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
File: uXhT3Vdz8qawcYefW567Dm9Ofao.mft (raw, json)
Hash identifier: Lj4B0x06gBIM6wMtQBxhmtKY/3dtArDjJdpnm378n3c=
Subject key identifier: 97:F8:56:F5:29:E3:1A:68:87:1B:E7:43:3A:F8:EE:CC:32:87:6E:84
Authority key identifier: B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
Certificate issuer: /CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Certificate serial: 019D99621984E51E759E80430753A7B07CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
Manifest number: 1853
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: uXhT3Vdz8qawcYefW567Dm9Ofao.crl (hash: HwIYyGEOX9v/eOanAp4xjXDjbdY7Z2LmzilqnktseSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:19:84:e5:1e:75:9e:80:43:07:53:a7:b0:7c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b97853dd5773f2a6b071879f5b9ebb0e6f4e7daa
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=97f856f529e31a68871be7433af8eecc32876e84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a6:02:7c:30:2f:5d:66:68:0d:e3:43:37:b6:
3a:5f:08:ae:0b:37:69:0b:ab:40:a3:88:4e:d7:7a:
df:00:68:20:b6:d2:24:67:5a:02:c2:30:99:b5:66:
c1:fb:0a:59:ea:74:fd:a1:c0:35:4f:16:ee:d2:f5:
bf:6c:16:8c:e5:bc:fd:db:36:69:ee:29:70:a6:cf:
17:29:79:9a:95:10:b6:ba:d5:c7:8e:46:7a:f6:dd:
c9:bd:03:41:49:f5:07:a2:66:14:4f:8a:5d:c2:06:
bd:93:ff:97:b8:dd:9b:21:25:d9:66:23:6e:8d:de:
6e:66:e1:3b:69:67:83:27:af:b3:59:56:0a:64:63:
20:64:e9:96:47:88:0f:b6:ba:53:55:dc:43:f6:36:
a0:1e:e7:ce:3f:74:b7:0a:f0:26:a6:ea:ae:25:a8:
61:92:1e:3a:f8:d5:91:5d:f3:58:31:f3:dc:ff:2f:
57:7c:aa:b8:de:72:fa:60:2c:6c:1b:e6:8e:30:e5:
87:1c:bf:f8:0c:88:90:34:62:ce:64:79:aa:3d:87:
a9:7a:2d:88:44:cc:e1:1b:fa:aa:a8:d6:4a:4e:22:
a6:ba:f1:85:31:82:f9:2d:7a:35:e0:45:c9:0e:1d:
4d:fc:99:d9:29:c6:76:81:0d:54:0a:f5:24:5e:3b:
cf:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:F8:56:F5:29:E3:1A:68:87:1B:E7:43:3A:F8:EE:CC:32:87:6E:84
X509v3 Authority Key Identifier:
keyid:B9:78:53:DD:57:73:F2:A6:B0:71:87:9F:5B:9E:BB:0E:6F:4E:7D:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uXhT3Vdz8qawcYefW567Dm9Ofao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/b93b66-af35-49d1-bd78-7ff8443d9c21/1/uXhT3Vdz8qawcYefW567Dm9Ofao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:60:12:9e:1f:5f:7d:c1:2b:c3:16:7a:9e:38:ec:7f:56:04:
02:a5:c1:77:5d:22:41:bc:a2:57:4a:f6:43:7c:3b:6c:c2:61:
b9:25:59:22:ec:62:40:4e:a9:be:1d:b1:5c:85:34:36:2b:7a:
10:73:2d:87:56:7d:4d:fa:62:16:fa:47:5e:43:5f:d3:56:56:
47:a6:6b:a7:be:cd:07:af:9f:8a:c0:95:9e:e7:9c:fe:6e:45:
dc:a1:bc:d6:5a:34:3e:32:3d:be:12:76:c1:7b:3b:a3:4e:7c:
91:9d:30:18:f6:b2:4e:05:be:f9:83:6a:42:9f:e9:e2:a5:30:
74:19:4c:4f:18:4f:55:f3:06:59:34:6c:18:91:ad:10:be:16:
29:8e:fc:43:dc:da:ad:aa:23:50:95:02:f6:7e:18:ea:de:be:
d8:7b:68:ce:fa:20:93:0c:aa:0f:19:85:02:39:eb:4d:cb:f6:
7f:c8:d2:0f:55:be:29:b0:84:53:39:71:e6:05:5b:c2:cb:ca:
7c:56:8d:52:9e:d0:67:d5:d4:32:8a:7d:12:29:f6:64:c0:f5:
f7:92:aa:de:f4:a0:93:88:5d:27:e7:92:3c:02:65:fd:4c:9a:
19:4a:c6:eb:a5:6a:52:c4:f1:fc:19:7a:b5:49:7c:34:98:70:
60:94:ef:95
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYhmE5R51noBDB1OnsHyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5Nzg1M2RkNTc3M2YyYTZiMDcxODc5ZjViOWViYjBlNmY0
ZTdkYWEwHhcNMjYwNDE3MDMwMDM2WhcNMjYwNDE4MDMwMDM2WjAzMTEwLwYDVQQD
Eyg5N2Y4NTZmNTI5ZTMxYTY4ODcxYmU3NDMzYWY4ZWVjYzMyODc2ZTg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKYCfDAvXWZoDeNDN7Y6XwiuCzdp
C6tAo4hO13rfAGggttIkZ1oCwjCZtWbB+wpZ6nT9ocA1Txbu0vW/bBaM5bz92zZp
7ilwps8XKXmalRC2utXHjkZ69t3JvQNBSfUHomYUT4pdwga9k/+XuN2bISXZZiNu
jd5uZuE7aWeDJ6+zWVYKZGMgZOmWR4gPtrpTVdxD9jagHufOP3S3CvAmpuquJahh
kh46+NWRXfNYMfPc/y9XfKq43nL6YCxsG+aOMOWHHL/4DIiQNGLOZHmqPYepei2I
RMzhG/qqqNZKTiKmuvGFMYL5LXo14EXJDh1N/JnZKcZ2gQ1UCvUkXjvP3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJf4VvUp4xpohxvnQzr47swyh26EMB8GA1UdIwQY
MBaAFLl4U91Xc/KmsHGHn1ueuw5vTn2qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgt
N2ZmODQ0M2Q5YzIxLzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9iOTNiNjYtYWYzNS00OWQxLWJkNzgtN2ZmODQ0M2Q5YzIx
LzEvdVhoVDNWZHo4cWF3Y1llZlc1NjdEbTlPZmFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2ASnh9f
fcErwxZ6njjsf1YEAqXBd10iQbyiV0r2Q3w7bMJhuSVZIuxiQE6pvh2xXIU0Nit6
EHMth1Z9TfpiFvpHXkNf01ZWR6Zrp77NB6+fisCVnuec/m5F3KG81lo0PjI9vhJ2
wXs7o058kZ0wGPayTgW++YNqQp/p4qUwdBlMTxhPVfMGWTRsGJGtEL4WKY78Q9za
raojUJUC9n4Y6t6+2HtozvogkwyqDxmFAjnrTcv2f8jSD1W+KbCEUzlx5gVbwsvK
fFaNUp7QZ9XUMop9Ein2ZMD195Kq3vSgk4hdJ+eSPAJl/UyaGUrG66VqUsTx/Bl6
tUl8NJhwYJTvlQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:55:03 2026 by rpki-client