
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier: LpY50Kg81OOuh10egJVW/NyT37x+JWuCOgmVAOUlvRg=
Subject key identifier: 59:89:29:52:E3:46:77:D8:18:5C:35:A9:6B:57:32:91:94:87:C2:3A
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial: 019D9A3EE07317D0FEC7ED33502AC1F5FBBA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number: 0224
Signing time: Fri 17 Apr 2026 07:01:44 +0000
Manifest this update: Fri 17 Apr 2026 07:01:44 +0000
Manifest next update: Sat 18 Apr 2026 07:01:44 +0000
Files and hashes: 1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: HF7Cw3tFBxGYCibMOXwrNzKKqk1hQsMx+hvd4ruH7BU=)
2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:e0:73:17:d0:fe:c7:ed:33:50:2a:c1:f5:fb:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Validity
Not Before: Apr 17 07:01:44 2026 GMT
Not After : Apr 18 07:01:44 2026 GMT
Subject: CN=59892952e34677d8185c35a96b5732919487c23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:3b:65:61:30:33:e5:61:05:84:ae:7e:0e:85:
00:1c:f5:ad:92:52:c4:ad:d2:82:8e:a2:86:7b:f1:
6d:64:6f:21:7e:37:37:5a:7b:0d:e1:7b:d7:25:6d:
3d:bd:4a:99:ad:eb:c2:15:c9:07:05:a0:d5:58:f7:
33:ad:7e:08:da:f3:74:32:df:eb:c4:8f:ec:a4:41:
d1:dc:0e:49:c0:95:60:48:ea:b9:f4:ad:76:64:5c:
f2:2b:f8:64:19:be:6b:d1:97:49:31:44:c9:40:c7:
eb:2d:dd:42:ac:a2:95:88:94:1f:5b:98:7d:d9:41:
f0:be:b5:da:18:95:3d:48:ba:8e:19:ae:72:88:39:
c3:71:10:74:66:e7:f8:99:41:59:78:07:52:e2:da:
f4:49:8b:0c:5f:bc:51:1a:00:97:4c:21:c7:d7:60:
5f:31:48:60:81:bd:a5:23:ec:05:93:71:02:25:ad:
51:36:92:a6:72:12:53:86:bb:ca:9f:0b:1f:bd:e4:
90:d2:69:c4:bd:c0:72:4d:23:ce:fd:02:55:a4:49:
72:35:2e:27:82:46:52:4d:cd:00:3d:8a:9e:e9:5c:
47:12:09:46:b6:67:8d:f1:6a:05:0c:4e:6e:c4:e0:
15:9d:cf:3a:93:f8:8d:b2:7e:96:ad:be:22:87:92:
fb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:89:29:52:E3:46:77:D8:18:5C:35:A9:6B:57:32:91:94:87:C2:3A
X509v3 Authority Key Identifier:
keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:8d:c4:53:ac:99:c5:83:8f:05:4a:0e:95:5b:14:b4:d9:3e:
0f:1a:02:56:52:dd:43:c0:2d:89:a2:5f:21:47:12:26:df:cd:
6b:21:0d:30:76:e8:d2:53:b0:82:ee:11:56:3d:c4:27:6f:7a:
23:67:fd:60:24:a7:15:7d:2c:75:5e:ed:18:30:f9:b1:87:23:
89:3b:c9:69:e0:a3:1d:fd:5b:de:4b:44:21:38:03:c2:00:d9:
bd:89:54:88:08:eb:ac:40:ad:9d:f7:ce:e0:0d:4e:a8:64:40:
2b:c2:a2:12:4a:3a:6a:2d:6c:86:31:26:8c:fc:19:09:ba:0f:
8c:40:40:f2:cd:7c:09:98:9a:94:5e:88:11:fc:9b:d4:88:9d:
b8:cf:c6:5e:93:eb:29:24:eb:b7:61:93:73:d0:fb:86:92:8a:
ec:31:44:ba:66:7f:99:5a:89:ce:1e:c5:45:97:40:7a:6d:4d:
af:6c:b4:4c:de:8b:58:75:f6:38:d3:ef:3d:29:f5:e1:e6:cb:
7e:d6:a9:3d:0a:30:5f:f7:89:23:8b:de:e4:f2:a0:b3:45:8b:
d2:04:69:94:49:61:07:c7:74:21:ef:da:9b:ba:14:83:7f:68:
45:96:29:ef:72:46:23:35:8b:77:fa:15:14:3c:85:e5:6a:77:
3d:f3:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:29 2026 by rpki-client