Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
File: UrSmj2r_fgaAtvFUQwzudKUDtmg.mft (raw, json)
Hash identifier: +KU195fWjjnEXx6Ay0vPk4SKZQIYvm10/ZyUF8Ej1Zw=
Subject key identifier: F4:61:A9:1C:5E:3F:E6:BC:89:D7:E7:32:BA:C2:7E:40:5B:FE:9B:0E
Authority key identifier: 52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
Certificate issuer: /CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Certificate serial: 019D98BDDB1FB81EF1B6C5B876DF82224BF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
Manifest number: 02EC
Signing time: Fri 17 Apr 2026 00:01:12 +0000
Manifest this update: Fri 17 Apr 2026 00:01:12 +0000
Manifest next update: Sat 18 Apr 2026 00:01:12 +0000
Files and hashes: 1: UrSmj2r_fgaAtvFUQwzudKUDtmg.crl (hash: RBJAJbr+lzV7KBaFigCFnBAkJ+N0sfZX3KFd2wIk6ew=)
2: ikhZPuNFB8TYzV9iARQ45_sL-xY.roa (hash: nilbi5jmsnD7f7iYCwJkWEwiH79gM1wBIWzSk6xYrZM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 00:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:db:1f:b8:1e:f1:b6:c5:b8:76:df:82:22:4b:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b4a68f6aff7e0680b6f154430cee74a503b668
Validity
Not Before: Apr 17 00:01:12 2026 GMT
Not After : Apr 18 00:01:12 2026 GMT
Subject: CN=f461a91c5e3fe6bc89d7e732bac27e405bfe9b0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:8f:18:bf:9f:ab:e2:4c:67:a6:05:c4:ff:22:
b2:e4:a2:7f:89:bc:e9:72:ef:5c:3d:09:74:0d:7c:
9f:0f:a5:09:da:22:fc:a0:e5:8d:13:99:e7:82:41:
eb:c6:37:b0:ae:8e:21:bd:b1:08:ec:f8:1f:93:ed:
4d:d3:24:e0:8f:41:53:04:e0:0c:56:f8:1c:64:ff:
9d:e9:78:7d:8a:ac:7c:2e:d2:db:1b:f4:2c:5e:cf:
08:a7:9b:49:e1:b9:8a:db:f8:43:33:d8:a3:2c:ee:
7b:a6:97:74:e7:31:99:43:be:e9:b4:6a:4c:a2:99:
5a:3f:2e:0b:ee:55:b5:e5:45:db:5d:f9:68:99:5b:
e6:0e:8e:9a:ea:63:5c:a3:ff:a0:3d:f6:92:f9:d0:
06:0e:b8:6e:23:5c:28:8f:b5:eb:11:e9:63:d2:e2:
bc:70:69:ba:02:5a:a0:a7:f1:a2:b0:e4:6d:e5:ee:
3b:11:7d:f4:ed:87:84:75:0e:bf:af:e1:4d:d8:7e:
b9:ff:41:82:3b:fc:f9:15:eb:1c:04:d9:da:50:71:
92:1d:42:7f:94:85:80:dc:ae:ee:30:79:a1:d9:dd:
4d:3f:0a:7f:e3:4b:e0:be:e7:a0:94:47:64:04:d8:
5a:1e:89:26:02:4d:40:f3:7a:9a:36:b1:b8:25:76:
ea:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:61:A9:1C:5E:3F:E6:BC:89:D7:E7:32:BA:C2:7E:40:5B:FE:9B:0E
X509v3 Authority Key Identifier:
keyid:52:B4:A6:8F:6A:FF:7E:06:80:B6:F1:54:43:0C:EE:74:A5:03:B6:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrSmj2r_fgaAtvFUQwzudKUDtmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/952093-6b71-4379-a5ef-0d2c2fe49fda/1/UrSmj2r_fgaAtvFUQwzudKUDtmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:cc:38:4e:d7:02:16:28:fe:6f:3f:89:fe:5c:0c:29:8a:dd:
3c:34:14:12:3d:04:13:4b:79:d3:97:d7:ca:04:0a:e7:63:69:
26:c3:d1:a6:65:e1:fb:90:e5:45:3c:3d:54:ce:02:19:6d:85:
69:1a:9d:39:b6:06:15:70:77:1b:5b:4f:09:74:81:d9:bd:8d:
56:5d:c0:f0:b7:12:a2:96:fd:e1:4e:bb:45:a8:70:b9:7a:b0:
a4:09:99:e3:f7:78:8e:c2:ae:dd:5e:5c:f1:ee:31:bc:83:5a:
4f:fb:fa:63:62:87:ea:6b:9a:8d:b0:a2:39:4c:59:78:eb:6d:
1e:b0:37:65:8e:aa:84:70:6a:bd:d8:06:32:62:eb:a2:67:51:
f5:94:a0:15:d1:2d:ad:dc:d2:8a:c0:20:7a:f0:a0:79:b4:28:
f1:b1:ab:39:22:cd:62:69:53:a9:d6:12:36:e1:83:3d:e6:21:
45:3e:99:d3:ca:84:9c:69:5d:05:f8:ac:c6:50:83:7a:f0:8f:
6b:dc:b3:74:1d:18:85:fb:41:86:4d:64:91:6a:2e:7f:a4:8f:
7d:bc:25:fc:b0:69:16:13:23:92:92:23:ba:57:14:5d:34:42:
74:07:7e:06:d5:df:70:6b:c5:e7:e6:d5:c9:04:98:7e:5c:f7:
20:f8:6f:16
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvdsfuB7xtsW4dt+CIkvxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjRhNjhmNmFmZjdlMDY4MGI2ZjE1NDQzMGNlZTc0YTUw
M2I2NjgwHhcNMjYwNDE3MDAwMTEyWhcNMjYwNDE4MDAwMTEyWjAzMTEwLwYDVQQD
EyhmNDYxYTkxYzVlM2ZlNmJjODlkN2U3MzJiYWMyN2U0MDViZmU5YjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv48Yv5+r4kxnpgXE/yKy5KJ/ibzp
cu9cPQl0DXyfD6UJ2iL8oOWNE5nngkHrxjewro4hvbEI7Pgfk+1N0yTgj0FTBOAM
VvgcZP+d6Xh9iqx8LtLbG/QsXs8Ip5tJ4bmK2/hDM9ijLO57ppd05zGZQ77ptGpM
oplaPy4L7lW15UXbXflomVvmDo6a6mNco/+gPfaS+dAGDrhuI1woj7XrEelj0uK8
cGm6Alqgp/GisORt5e47EX307YeEdQ6/r+FN2H65/0GCO/z5FescBNnaUHGSHUJ/
lIWA3K7uMHmh2d1NPwp/40vgvueglEdkBNhaHokmAk1A83qaNrG4JXbqxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPRhqRxeP+a8idfnMrrCfkBb/psOMB8GA1UdIwQY
MBaAFFK0po9q/34GgLbxVEMM7nSlA7ZoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYt
MGQyYzJmZTQ5ZmRhLzEvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS85NTIwOTMtNmI3MS00Mzc5LWE1ZWYtMGQyYzJmZTQ5ZmRh
LzEvVXJTbWoycl9mZ2FBdHZGVVF3enVkS1VEdG1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMw4TtcC
Fij+bz+J/lwMKYrdPDQUEj0EE0t505fXygQK52NpJsPRpmXh+5DlRTw9VM4CGW2F
aRqdObYGFXB3G1tPCXSB2b2NVl3A8LcSopb94U67RahwuXqwpAmZ4/d4jsKu3V5c
8e4xvINaT/v6Y2KH6muajbCiOUxZeOttHrA3ZY6qhHBqvdgGMmLromdR9ZSgFdEt
rdzSisAgevCgebQo8bGrOSLNYmlTqdYSNuGDPeYhRT6Z08qEnGldBfisxlCDevCP
a9yzdB0YhftBhk1kkWouf6SPfbwl/LBpFhMjkpIjulcUXTRCdAd+BtXfcGvF5+bV
yQSYflz3IPhvFg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:07:46 2026 by rpki-client