
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
File: uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft (raw, json)
Hash identifier: zMM904dfAmSwR9n4jlxLT1YN35Hy8BFNINsj6lI2/YY=
Subject key identifier: 13:3D:45:5B:BA:6E:90:B8:2D:70:43:0F:F0:56:03:41:A1:4F:B5:C0
Authority key identifier: BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
Certificate issuer: /CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Certificate serial: 019D98866FE82C173E186F9C4F0266F75A6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
Manifest number: 18C1
Signing time: Thu 16 Apr 2026 23:00:40 +0000
Manifest this update: Thu 16 Apr 2026 23:00:40 +0000
Manifest next update: Fri 17 Apr 2026 23:00:40 +0000
Files and hashes: 1: dwIfNutOF5SxDnHE2ip0RRB0Wh0.roa (hash: gXhE8k/fw7vLGXFxBW+3kIf0O3u5m7PjyaKQg10z4O0=)
2: uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl (hash: DldxORjv5+CD8+oKnF7++TAz9X2CSXl+pMZS+3kplZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:6f:e8:2c:17:3e:18:6f:9c:4f:02:66:f7:5a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb22cf4c71a95911bd6046d05c0a8ba1646c9ead
Validity
Not Before: Apr 16 23:00:40 2026 GMT
Not After : Apr 17 23:00:40 2026 GMT
Subject: CN=133d455bba6e90b82d70430ff0560341a14fb5c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9a:8b:47:39:9e:c0:ea:9f:1b:34:7a:28:29:
51:b9:51:20:a1:f1:59:9e:99:3f:0a:a1:7e:d4:38:
ad:37:c1:62:ae:a7:3d:c8:b0:16:e3:b2:d2:2e:d1:
09:6e:2c:6f:96:08:28:2c:de:1f:c2:7d:5e:e7:8f:
db:60:69:1e:34:be:16:99:53:04:da:57:b5:aa:c6:
f3:d4:1e:83:54:a6:fe:7b:71:d1:dc:a9:8d:d7:bf:
a1:fe:65:e3:64:4e:f6:b4:03:2a:f1:5f:fb:bd:d0:
34:83:73:81:19:c2:cb:53:30:bc:40:68:2a:61:54:
4a:d7:4e:fd:ea:47:1e:52:25:22:26:28:ff:42:35:
fb:77:68:5e:6c:b7:f5:3e:ea:b4:87:a7:2f:4e:31:
06:ca:41:a9:86:ff:69:76:31:f9:65:fd:8a:e8:23:
c6:ff:85:22:46:aa:6c:35:5a:13:b6:40:aa:3a:35:
14:a6:ff:d8:84:43:27:ce:09:8a:21:95:f1:a3:d4:
bf:11:97:47:99:90:10:5c:7b:6e:38:05:90:61:c6:
9f:e8:6a:9e:ec:54:30:80:4f:1b:3d:ec:2d:6c:3b:
27:1e:1e:bc:19:d0:30:23:0d:d9:80:e2:3a:8d:35:
1e:87:c0:85:e6:cb:4d:a1:aa:8a:42:da:3d:d2:37:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3D:45:5B:BA:6E:90:B8:2D:70:43:0F:F0:56:03:41:A1:4F:B5:C0
X509v3 Authority Key Identifier:
keyid:BB:22:CF:4C:71:A9:59:11:BD:60:46:D0:5C:0A:8B:A1:64:6C:9E:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uyLPTHGpWRG9YEbQXAqLoWRsnq0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/ae825f-6f54-43ea-9b83-bbaec7505d97/1/uyLPTHGpWRG9YEbQXAqLoWRsnq0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:66:9b:89:33:3d:0d:35:99:3d:ac:50:03:f7:87:f7:81:8d:
0d:d1:e0:16:a6:43:70:4c:c5:32:21:33:b4:0c:fa:99:24:d0:
e0:4e:c7:4b:27:46:64:de:fa:bb:33:40:02:de:32:ff:9f:cd:
6a:7c:4d:c5:56:19:4b:d2:dc:90:be:4e:4c:d0:82:96:85:42:
ca:22:9a:7b:be:4f:ef:63:cc:78:b7:f9:e2:10:23:2b:6c:43:
f2:8f:23:79:87:67:27:42:eb:53:cb:a9:40:28:12:05:6a:e3:
30:ab:97:7e:ca:78:33:ef:58:88:f3:4f:c8:14:93:2d:07:9c:
5d:2a:d3:c7:df:f5:f9:c4:8b:6f:65:b6:14:b0:18:c0:ac:34:
5c:35:1e:6a:c1:43:85:f5:fd:56:bc:05:1a:cd:9a:a9:dd:d6:
1d:1b:89:c6:71:9f:07:47:73:0a:7b:61:ed:32:93:c2:87:90:
3f:ae:6e:be:18:3b:37:7b:7e:5b:ad:1a:7a:42:42:d1:46:7b:
9f:ed:fe:74:df:10:6b:e2:7f:e0:e7:b3:72:25:47:fa:1e:ad:
ca:d4:b5:3f:fd:5e:0f:86:4f:ab:57:0c:5b:de:46:92:5f:27:
f5:9a:8e:fb:99:95:c4:f3:2b:f3:51:59:51:98:0c:05:65:83:
36:ed:e0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:05:52 2026 by rpki-client