Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: LMaSMPZl6zHeGIdhlR7J2RllB0q/edNOhzLkyV2LWIU=
Subject key identifier: 2D:4A:3A:4D:62:04:D8:C9:D2:E6:19:29:1D:64:4F:95:38:19:B4:BE
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019D98F4461479F867D87C9CEB431A4F71F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 18CF
Signing time: Fri 17 Apr 2026 01:00:38 +0000
Manifest this update: Fri 17 Apr 2026 01:00:38 +0000
Manifest next update: Sat 18 Apr 2026 01:00:38 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: 0LnmtMpR3VJE68hxImW/WYTE10WWmv8QmRmU+g6m47Q=)
2: kIMbXdJtsDQKax2xphZaFN7nTGo.roa (hash: 0ama1VpnrdgMASVoDbU/VZGJ8RaYQqmTeKUTSxZsyFA=)
3: mhFszU5SEmptr5GI0ZcCS5h2GPE.roa (hash: nvx25tg/A55YxF5P3zlSkrAozJAeP8DAEDZ0+PHZPRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:46:14:79:f8:67:d8:7c:9c:eb:43:1a:4f:71:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Apr 17 01:00:38 2026 GMT
Not After : Apr 18 01:00:38 2026 GMT
Subject: CN=2d4a3a4d6204d8c9d2e619291d644f953819b4be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:33:26:5e:16:60:ae:48:ea:25:b7:d3:c1:9a:
ad:a8:b4:d0:b6:fe:1e:3d:66:27:4a:db:bf:a8:84:
6d:e6:3f:50:bb:36:8a:cb:6a:98:d4:3b:5b:66:17:
3d:51:1b:9c:08:7d:1e:5a:7f:f5:52:69:cc:2f:16:
a7:e1:44:24:37:cb:a8:fd:9e:4f:5a:d7:48:46:25:
5d:1c:6a:fd:65:8e:ed:09:0b:26:46:bb:f6:4f:45:
14:09:40:51:17:c6:91:be:4e:41:b8:d1:e7:e8:c3:
86:ef:69:70:54:91:d8:9b:ee:41:20:62:aa:8a:0a:
d3:16:e6:33:a6:b6:a2:7d:17:82:45:c0:a1:20:9e:
f1:1a:47:a8:0a:a6:e1:34:db:4b:91:79:50:a6:db:
be:02:31:a3:24:27:1a:87:1e:e5:6e:ce:a8:61:19:
66:d8:92:6b:a2:23:1c:6a:79:3a:c2:78:28:6f:d0:
7e:d2:61:52:32:30:a7:90:de:92:c7:f2:e8:46:f1:
5b:34:d1:27:86:71:2f:8a:21:32:ec:ed:be:80:c0:
4a:77:33:16:e5:53:b6:b8:1d:6a:d2:17:4f:e9:a0:
fe:f0:56:23:8e:fb:ea:4c:45:19:48:99:80:5c:e9:
60:30:20:3c:c1:57:39:00:d7:5b:bc:c5:a0:29:e3:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:4A:3A:4D:62:04:D8:C9:D2:E6:19:29:1D:64:4F:95:38:19:B4:BE
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:7f:44:dc:a8:6e:18:67:a9:60:7c:16:1d:50:52:28:a3:d6:
27:32:c0:32:63:fc:b1:6b:c6:57:05:bb:79:f8:f3:f8:d6:09:
43:9e:1e:71:dd:20:3c:bd:08:b9:e6:96:e3:9e:77:e9:7b:1d:
b9:ac:d8:fc:b4:8e:d4:e9:30:56:b4:9e:ba:2d:02:2c:90:3c:
73:ea:1e:c7:ab:b7:db:35:a1:64:4f:dc:70:08:6a:24:e9:2c:
2b:55:16:17:92:a1:09:14:eb:29:7c:07:f4:cd:a5:42:16:ba:
ce:08:73:99:de:df:27:71:9e:fd:13:17:bf:51:6d:06:dc:9b:
c5:81:41:4e:40:d4:01:e4:fe:0b:a2:0b:24:09:7d:92:75:e1:
f9:5b:24:91:a1:06:e3:ef:57:1e:d9:bc:ee:71:28:a7:c0:67:
41:c7:76:bf:07:4f:20:5b:8d:d2:94:73:86:c0:dc:0c:c7:65:
12:d3:6d:c1:81:70:c8:50:c6:48:14:93:1e:28:e9:a7:ab:e9:
98:6a:5e:c0:9a:66:84:c1:3b:fc:22:c9:01:39:24:cc:2b:a5:
b2:02:a6:be:5a:f2:fa:59:7f:ff:3f:1e:1a:2a:5b:41:50:b8:
4b:d6:b4:5f:7f:1e:05:67:a3:28:2c:48:da:93:86:b8:57:c6:
f3:5d:1e:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:21 2026 by rpki-client