Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
File: rUQr3aKjUyCpbYBr8WjVuEp21CY.mft (raw, json)
Hash identifier: X71ggHOgILRHHHqhDE006Kd9hKXCLSTcg9jXA6ti0gg=
Subject key identifier: 9C:33:15:D5:8D:9E:74:B3:1A:CF:D5:50:D6:CB:3A:D8:CD:05:EB:97
Authority key identifier: AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
Certificate issuer: /CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Certificate serial: 019D99D099303727B0EF8E0908C973126BD8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
Manifest number: 179C
Signing time: Fri 17 Apr 2026 05:01:17 +0000
Manifest this update: Fri 17 Apr 2026 05:01:17 +0000
Manifest next update: Sat 18 Apr 2026 05:01:17 +0000
Files and hashes: 1: 0ucWFZcFyD58o8zTdzJyfEAC5zk.roa (hash: lMcCuoQ+b6EBN3pFu3tzR6OUCs2zcvSlVr6M8lwbMuU=)
2: bH6tjXnYtUAt8u-NGNT0t-DnFoY.roa (hash: it3vJQNoSAFPdXxbk0rvKR5rwALiR1gzaPHvmGFvmfg=)
3: rUQr3aKjUyCpbYBr8WjVuEp21CY.crl (hash: ubmi3PCh3yNIQlFkQBTUsHhWuC707JIUQLlHnN/Co1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:99:30:37:27:b0:ef:8e:09:08:c9:73:12:6b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad442bdda2a35320a96d806bf168d5b84a76d426
Validity
Not Before: Apr 17 05:01:17 2026 GMT
Not After : Apr 18 05:01:17 2026 GMT
Subject: CN=9c3315d58d9e74b31acfd550d6cb3ad8cd05eb97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:59:31:df:78:0d:e3:a5:03:c2:91:d8:16:be:
7a:0f:be:e9:8a:97:da:b3:7c:59:11:42:79:3e:1f:
5c:56:9c:4b:12:ed:e5:16:32:f5:8c:5f:a9:97:35:
83:5b:8f:4a:57:40:de:5d:9c:a2:39:ac:95:7f:74:
96:dd:22:92:ce:0d:2f:41:2e:90:1e:59:85:f8:94:
05:d8:6d:ad:b0:c9:34:19:4a:81:2f:1d:09:02:fb:
96:a9:9f:00:23:d4:59:45:f9:a7:d3:a8:73:05:d0:
15:5a:67:b2:12:4c:c1:8a:ec:26:fc:31:f8:1c:2f:
a6:4f:6b:5c:b1:40:72:f4:1b:74:3a:f3:98:0d:d2:
60:f0:8e:38:ff:0b:56:c1:95:9b:cb:a0:49:8f:96:
66:5b:d6:0f:47:e3:10:47:b2:af:7d:c6:da:5a:50:
67:c5:80:02:df:04:13:ff:e9:0c:47:49:09:72:61:
cb:3b:19:fc:06:b6:5e:0d:85:63:29:18:42:7e:b8:
dc:60:57:07:b5:41:8f:a4:59:d5:db:95:7c:90:55:
48:4c:c9:e0:07:99:e4:52:73:65:cf:b7:86:ef:4d:
e8:49:89:9c:95:11:77:b9:37:f2:96:1e:8b:32:ea:
73:e3:1c:5d:55:77:4d:6a:74:c1:3a:7e:80:7d:9b:
4a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:33:15:D5:8D:9E:74:B3:1A:CF:D5:50:D6:CB:3A:D8:CD:05:EB:97
X509v3 Authority Key Identifier:
keyid:AD:44:2B:DD:A2:A3:53:20:A9:6D:80:6B:F1:68:D5:B8:4A:76:D4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rUQr3aKjUyCpbYBr8WjVuEp21CY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dd672d-e980-4dca-9195-859dbca38714/1/rUQr3aKjUyCpbYBr8WjVuEp21CY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
df:1b:6e:3c:02:ac:a7:8e:1d:b4:c2:c4:6d:b8:b6:af:1a:af:
fe:cc:79:7a:9b:38:b2:ec:60:ea:08:bd:21:d2:71:57:4b:97:
d4:3d:bd:00:23:3a:78:bc:55:a7:9d:51:e1:90:40:44:e2:0c:
b8:ec:b9:4b:28:46:d6:74:bc:9d:26:ba:a9:cc:f0:01:7b:72:
33:d8:ab:64:a2:06:95:80:8f:e3:da:59:b6:59:c6:3c:bf:5f:
7c:bc:bb:c8:19:19:29:6d:2a:94:2f:93:8a:31:34:fb:22:ee:
58:02:d7:a9:78:5b:f3:9f:79:fe:a6:3f:3b:46:bb:e5:43:4d:
67:60:76:bc:cf:fe:05:25:31:61:18:0b:be:af:f0:aa:f0:fb:
aa:d5:78:f7:09:24:94:00:cd:bf:cc:08:43:22:30:a9:2e:45:
e1:0c:e1:0f:6c:00:f5:a3:85:27:9c:95:da:76:9c:c9:be:dc:
c7:4f:be:90:6b:f8:29:e8:4b:19:8a:35:be:3a:c6:a0:d3:ce:
f6:19:14:bd:2d:e3:ca:97:78:00:72:94:23:86:6a:59:5e:20:
46:c6:3b:b9:4a:a4:ea:94:f6:8a:df:39:b9:2e:73:98:cc:ce:
35:a0:fa:4f:bd:7d:63:65:7b:ba:6e:d1:b6:53:37:0d:35:13:
f3:77:a8:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:33:49 2026 by rpki-client