Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
File: U-r4Oizdyf0L4onM-vMrMjMEz04.mft (raw, json)
Hash identifier: Bt43xo5mnuDvVzP7SsdtnJLk49C+WJUnp5X78YWe5fY=
Subject key identifier: B1:19:A7:6B:62:67:EA:5C:11:DB:7D:39:3F:9E:9B:6E:FF:6C:F5:2E
Authority key identifier: 53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
Certificate issuer: /CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Certificate serial: 019D9998ED92229D5C802341AB2EB8F0F75D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
Manifest number: 0F8F
Signing time: Fri 17 Apr 2026 04:00:29 +0000
Manifest this update: Fri 17 Apr 2026 04:00:29 +0000
Manifest next update: Sat 18 Apr 2026 04:00:29 +0000
Files and hashes: 1: U-r4Oizdyf0L4onM-vMrMjMEz04.crl (hash: F0URybg542mZe8lcVNahKS4jFfaStPprWKc+rmCT0lo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ed:92:22:9d:5c:80:23:41:ab:2e:b8:f0:f7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaf83a2cddc9fd0be289ccfaf32b323304cf4e
Validity
Not Before: Apr 17 04:00:29 2026 GMT
Not After : Apr 18 04:00:29 2026 GMT
Subject: CN=b119a76b6267ea5c11db7d393f9e9b6eff6cf52e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:bf:91:f4:49:f2:47:78:f9:b3:b1:5a:fc:80:
1a:7a:7d:ef:49:4a:32:fb:a9:4f:05:24:e1:d7:9e:
d1:ac:8a:a3:87:1c:9b:0e:40:8d:bf:fa:34:09:26:
f1:15:cb:d8:17:52:b7:a1:0c:02:4e:36:38:2e:d6:
04:5d:df:78:c3:94:ca:48:f2:27:07:e1:34:73:e1:
5e:f0:93:a7:9c:b0:01:6c:a2:47:a3:ae:75:a7:a5:
08:c4:88:40:5c:65:0f:de:43:38:34:52:ec:61:85:
ac:da:86:d0:84:90:4a:ca:62:63:a6:11:d1:6f:d0:
1f:9a:ea:f1:a1:82:f8:31:8e:7a:66:87:06:5a:54:
8a:0b:bf:c5:b7:76:16:b3:45:bf:17:7e:57:d0:4d:
c8:db:2e:2d:11:7d:f4:43:76:0b:69:b7:2f:fd:1f:
1c:61:43:be:39:8c:24:84:dc:dc:13:e7:79:7b:36:
4b:00:c6:05:2e:37:b8:26:61:51:c7:66:ad:7f:d0:
57:2d:8d:de:3f:34:9f:19:cb:e6:ba:26:8f:6d:d5:
ac:e7:49:83:bb:7b:42:2c:56:7a:13:2f:1f:f2:6d:
ef:34:3a:77:f2:a3:9c:30:06:b3:0b:98:04:fd:96:
06:cc:cc:89:0a:b7:2a:d2:b3:30:87:f7:3e:1a:f8:
49:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:19:A7:6B:62:67:EA:5C:11:DB:7D:39:3F:9E:9B:6E:FF:6C:F5:2E
X509v3 Authority Key Identifier:
keyid:53:EA:F8:3A:2C:DD:C9:FD:0B:E2:89:CC:FA:F3:2B:32:33:04:CF:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-r4Oizdyf0L4onM-vMrMjMEz04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/2c3038-9c45-43e8-b69f-b84cff188f55/1/U-r4Oizdyf0L4onM-vMrMjMEz04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:4f:7d:66:3a:6c:1d:e9:10:06:6b:d5:c4:73:69:99:66:5a:
8a:43:fd:cb:67:54:c6:a9:b4:16:a9:53:8c:60:c8:ae:33:fb:
d9:c2:97:f1:2c:90:a9:2d:c2:31:4d:bf:02:2c:00:6e:3c:29:
5d:7b:91:0e:8b:29:06:40:86:b7:5f:21:75:25:67:8a:5c:a9:
99:91:e3:8b:27:46:12:6c:32:5b:20:29:f1:89:28:ba:e3:01:
30:11:6f:0a:57:8d:06:fa:dc:8e:ad:33:14:a4:a9:55:f8:aa:
97:2c:56:a3:86:4d:09:20:c2:4c:af:df:8f:9a:ad:1b:78:b5:
c0:24:16:61:64:48:83:80:bd:48:eb:73:8b:e3:72:d7:bf:8c:
3d:c2:ae:c8:c9:f2:33:d3:50:22:d3:1e:a3:2a:74:af:51:d9:
19:2a:f0:eb:40:22:15:ff:0b:cb:eb:e2:6a:07:23:0e:52:df:
2e:0e:2f:f4:2d:42:ee:63:2b:85:2a:9c:eb:04:68:c1:0e:38:
1e:8c:cc:21:7c:4c:00:b1:c4:96:ef:aa:0e:e1:55:e7:e2:dc:
5e:92:20:1e:10:ca:dd:f0:19:60:19:2c:07:68:d8:88:1b:28:
af:b7:da:47:f6:35:4a:c7:0d:75:7d:2f:4c:d6:c0:c3:9b:fa:
25:7b:fb:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:04 2026 by rpki-client