Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
File: UIJpb7xB2QYWimDOCUlJAiz2Keg.mft (raw, json)
Hash identifier: 80sJbYKOmURcCQSHAn5I1PkDMY66XlDdpYfj8aABYfM=
Subject key identifier: F3:F5:6D:BC:5A:43:FF:F7:CF:66:A9:55:1A:9D:E0:75:6C:35:15:AB
Authority key identifier: 50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
Certificate issuer: /CN=5082696fbc41d906168a60ce094949022cf629e8
Certificate serial: 019DA41CB6338F3D05F3FA0CE550AB2879C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
Manifest number: 064E
Signing time: Sun 19 Apr 2026 05:00:38 +0000
Manifest this update: Sun 19 Apr 2026 05:00:38 +0000
Manifest next update: Mon 20 Apr 2026 05:00:38 +0000
Files and hashes: 1: UIJpb7xB2QYWimDOCUlJAiz2Keg.crl (hash: 4n7paMbF9LOiLud92/FMtmYtAZtF9woyRckam5nd7SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:b6:33:8f:3d:05:f3:fa:0c:e5:50:ab:28:79:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5082696fbc41d906168a60ce094949022cf629e8
Validity
Not Before: Apr 19 05:00:38 2026 GMT
Not After : Apr 20 05:00:38 2026 GMT
Subject: CN=f3f56dbc5a43fff7cf66a9551a9de0756c3515ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a6:84:b1:f0:51:9c:58:fc:90:ed:3d:7d:16:
f2:1b:76:3f:dc:95:f7:47:73:b2:67:d1:7b:1f:71:
ba:fe:2e:c2:a5:57:bf:ca:b6:a6:b8:8c:85:50:81:
4f:d5:ed:a2:db:3e:33:83:89:95:52:fa:e3:3b:42:
7b:45:d6:c8:70:6a:77:52:1e:6c:34:92:82:fa:b8:
68:7a:d1:33:63:f2:bf:20:65:25:bc:6a:51:79:07:
3e:dd:31:1d:cc:2a:33:72:92:72:0c:3c:be:c8:f0:
46:64:a3:7f:e7:7b:59:57:40:b0:8c:b2:4f:9a:55:
ad:53:78:a3:7c:5c:53:36:bf:b4:b0:11:53:40:85:
bd:c7:7c:da:cb:ea:13:c4:f2:fe:75:d4:eb:d5:42:
07:82:fd:cf:84:c8:6d:bc:07:50:2f:eb:f2:d5:cd:
4c:28:56:67:8c:00:66:62:95:11:7d:6e:a4:43:61:
f9:b6:58:88:6b:c1:38:08:95:2c:f7:46:7a:37:53:
8c:5b:90:93:3c:75:24:35:2a:26:b8:cf:b4:2d:7e:
d5:9c:53:17:7b:42:2f:44:72:b0:dc:97:80:36:c8:
16:0a:66:98:f3:13:f8:67:33:d0:8b:04:eb:16:bf:
11:3a:2a:f1:96:bc:b0:b5:ca:5d:82:3e:eb:2c:67:
fd:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:F5:6D:BC:5A:43:FF:F7:CF:66:A9:55:1A:9D:E0:75:6C:35:15:AB
X509v3 Authority Key Identifier:
keyid:50:82:69:6F:BC:41:D9:06:16:8A:60:CE:09:49:49:02:2C:F6:29:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UIJpb7xB2QYWimDOCUlJAiz2Keg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/a9f0bb-86f6-4ca3-a53f-2e9721d86c3d/1/UIJpb7xB2QYWimDOCUlJAiz2Keg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:3a:2a:ab:1d:7c:c6:51:eb:c3:e7:61:db:19:f4:84:1e:45:
6a:71:79:cf:89:84:13:39:10:d4:3f:f1:9c:2a:73:a6:bb:69:
37:75:6e:a9:81:58:50:78:89:c6:aa:5d:5f:88:f3:29:32:d4:
c2:f6:63:25:51:45:54:d3:f0:cc:90:05:e7:12:cb:6b:c2:24:
a8:46:af:56:f6:8a:58:9d:fc:65:73:ca:db:6f:48:c5:95:af:
8c:cd:46:3b:f3:76:88:fc:cd:f8:cd:80:43:26:b4:19:96:ce:
e3:9b:db:92:14:e9:7a:c6:81:8e:be:c6:13:e0:52:91:b7:e6:
91:fd:8d:16:07:7c:92:18:f5:89:6f:e3:33:be:e6:d1:36:48:
19:22:1d:24:a7:9b:9d:5e:30:cd:95:ac:51:7d:8d:78:ba:6f:
a6:25:60:1f:37:1e:e6:85:35:c6:71:20:1e:c1:e9:1f:16:0a:
b2:be:47:b1:c4:27:9d:3b:88:eb:c3:ed:f1:4c:1a:4a:08:e2:
02:66:32:98:7f:a8:79:09:2b:06:43:22:45:5e:62:89:16:23:
1b:4e:2b:f8:9e:68:9b:fe:21:a3:77:bf:0a:2a:09:c9:ee:29:
06:f2:a3:5b:49:b5:9d:80:4d:d0:07:e7:eb:1c:e0:65:3c:3c:
e7:68:c2:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:40:49 2026 by rpki-client