Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
File: UXM4bzZygYSqADsdljn-OcShKqk.mft (raw, json)
Hash identifier: pi6QZv3yvYIRtUiodduuVe6gkRjbzVx8SK0O8INaUAA=
Subject key identifier: FB:72:0C:97:FC:19:77:19:61:72:82:35:60:40:B1:E0:EB:92:D9:A7
Authority key identifier: 51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
Certificate issuer: /CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Certificate serial: 019D984F9F451C505CD6C4984A42C8D97F5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
Manifest number: 1825
Signing time: Thu 16 Apr 2026 22:00:48 +0000
Manifest this update: Thu 16 Apr 2026 22:00:48 +0000
Manifest next update: Fri 17 Apr 2026 22:00:48 +0000
Files and hashes: 1: 7AUQmk1i8qtjdruOjZMPpBTiL6c.roa (hash: q33FWL8mHM8VvfHdKdh+6eQHgq4qLKkzK579GRNQTE8=)
2: UXM4bzZygYSqADsdljn-OcShKqk.crl (hash: /oMz0KbCas1ZoNShgY5zk0KWVk85Kzm3DyU+Pa/9vpY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:9f:45:1c:50:5c:d6:c4:98:4a:42:c8:d9:7f:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5173386f36728184aa003b1d9639fe39c4a12aa9
Validity
Not Before: Apr 16 22:00:48 2026 GMT
Not After : Apr 17 22:00:48 2026 GMT
Subject: CN=fb720c97fc197719617282356040b1e0eb92d9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:dc:30:5f:c4:15:26:fb:b5:22:b5:a6:6d:ef:
42:d6:68:b7:a4:f8:04:95:3f:a7:cf:fa:42:d2:c7:
02:8a:c1:39:94:23:de:9e:43:6f:2b:9f:3f:b7:72:
2f:14:72:f7:9c:3a:4c:b6:9c:3c:70:c0:6d:3e:75:
06:6d:d8:b5:87:45:97:30:c6:fd:89:b4:5b:76:09:
d9:20:be:0f:f8:d3:a4:ac:4a:78:57:6e:7d:f8:93:
44:b9:43:4f:fa:00:5d:3c:90:20:d0:c3:7c:66:8b:
02:b3:ad:d1:1d:c0:45:44:a9:f6:a2:bb:aa:80:d9:
4c:f9:a6:5b:8e:32:85:ee:36:17:5a:be:f0:c7:c6:
cb:02:0b:b3:e4:0e:9c:c8:2c:2d:13:5f:d3:76:8e:
2e:e3:02:7f:1c:c9:08:57:2b:27:4d:50:2e:0a:fa:
c1:08:94:2d:bb:d5:2b:8d:8c:19:32:29:ce:69:30:
53:ff:9c:27:27:a4:d4:e6:b2:1b:23:3a:f3:96:d6:
0e:7c:2c:78:72:03:06:cc:0b:fa:33:22:b5:4d:b6:
a7:ff:9e:7e:68:fd:71:1f:f7:1a:17:6e:7c:6c:e4:
84:46:bf:b4:19:fd:3c:57:30:7f:05:ad:8e:f9:b1:
ff:3a:9f:33:4e:a8:af:61:c6:dc:4a:a3:8f:e3:2a:
55:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:72:0C:97:FC:19:77:19:61:72:82:35:60:40:B1:E0:EB:92:D9:A7
X509v3 Authority Key Identifier:
keyid:51:73:38:6F:36:72:81:84:AA:00:3B:1D:96:39:FE:39:C4:A1:2A:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UXM4bzZygYSqADsdljn-OcShKqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/17c02b-d735-41ca-8229-0cddf79ee90f/1/UXM4bzZygYSqADsdljn-OcShKqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:7d:f3:57:a9:94:55:0a:6b:ba:f6:5d:4d:5a:7c:95:61:04:
17:ec:75:e5:4c:ef:56:d3:02:f2:84:16:d5:3f:28:15:87:ac:
c0:06:8f:75:a1:23:4c:71:17:9f:27:e3:87:56:cf:bf:07:f8:
b2:dd:11:e8:e0:ed:78:39:9b:c7:66:7e:03:2a:9c:c0:f7:37:
37:aa:26:91:c4:24:0c:0c:8a:18:7b:6e:60:db:e7:b3:38:87:
01:2b:a1:da:65:dd:58:4e:a1:e5:c6:11:4e:75:2a:51:65:ce:
e2:3c:4b:18:60:5a:30:6c:36:72:91:ad:9e:3d:23:08:b5:56:
89:f5:31:4a:a9:19:c3:db:ec:d2:eb:8d:7e:f6:7c:e2:af:ce:
35:b7:c9:c8:87:f7:4f:ce:7a:39:09:c6:45:4b:3d:8a:68:16:
c2:fd:91:3d:be:f3:57:db:bb:72:98:8f:a8:1e:78:b6:68:25:
ee:c4:02:76:4b:1c:67:5b:7c:fe:1f:ad:46:40:81:80:51:b6:
0f:74:ba:3e:48:b0:4e:3e:96:05:03:4d:92:4e:a7:54:db:15:
b1:96:1e:ec:c6:41:fc:0c:0e:15:b6:47:0a:f5:21:b0:c5:31:
d3:80:06:c2:5f:51:83:45:27:9d:61:20:33:c3:12:7b:11:d8:
de:cd:33:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:06 2026 by rpki-client