Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
File: uAc3zhz75lM7WIC2bqniQTzZyCU.mft (raw, json)
Hash identifier: WSrs+JV6bu9InMrKH7xusJU9wmn8lr7QtdeJnEfbYuw=
Subject key identifier: 35:84:EA:A1:02:B2:11:2C:04:CD:D9:96:E7:31:FF:A6:A5:AB:88:61
Authority key identifier: B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
Certificate issuer: /CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Certificate serial: 019D9B510367C440D081D5CDBB1AC78A7908
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
Manifest number: 0E08
Signing time: Fri 17 Apr 2026 12:01:10 +0000
Manifest this update: Fri 17 Apr 2026 12:01:10 +0000
Manifest next update: Sat 18 Apr 2026 12:01:10 +0000
Files and hashes: 1: mvsSWkXsoZaA1ourpWIv5ndzQus.roa (hash: NCT6Fnjfvpm4oH5VP79wsNStA4KElS5NV2qxt3IiN5Y=)
2: uAc3zhz75lM7WIC2bqniQTzZyCU.crl (hash: nv+Pk1vkcsli43UjkMslyaSVQgqlG1T8EjnBfx+2vUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:03:67:c4:40:d0:81:d5:cd:bb:1a:c7:8a:79:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b80737ce1cfbe6533b5880b66ea9e2413cd9c825
Validity
Not Before: Apr 17 12:01:10 2026 GMT
Not After : Apr 18 12:01:10 2026 GMT
Subject: CN=3584eaa102b2112c04cdd996e731ffa6a5ab8861
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8c:f4:1e:5b:53:02:b2:30:b1:8d:6e:81:55:
5e:8d:7b:a5:2f:08:e0:df:9e:c8:4b:e5:20:31:cd:
11:3e:77:3a:2e:18:b3:e2:98:8c:45:d9:c3:dd:7d:
43:86:af:4b:56:f4:47:64:57:7c:04:1b:85:ea:54:
cd:6e:b8:17:97:6a:c6:4c:d5:9d:82:1c:54:4b:38:
90:86:c5:f0:69:28:17:63:c4:14:f3:da:d2:28:b7:
e5:79:61:72:af:7d:db:c8:8e:30:f0:4b:23:e3:49:
d3:ec:f5:02:67:a0:d3:ae:c9:8a:73:1c:d5:c7:e3:
b7:18:b0:03:2d:ee:24:0a:73:60:05:12:c4:79:71:
42:6b:26:69:55:c2:1c:ec:bb:00:64:38:5f:b9:41:
2a:64:be:01:f2:b1:8d:6e:d1:2a:3e:bf:c7:95:73:
c0:71:85:41:90:04:c0:33:4c:d0:9e:a8:7f:a7:a1:
d6:2f:cd:b5:92:d0:23:46:54:91:fe:3b:bf:49:5a:
00:c7:5d:df:33:07:16:12:99:79:06:07:a5:e7:db:
29:92:43:5f:b9:7d:e4:70:e3:c6:5e:98:f1:56:a4:
4e:63:c4:b0:9a:33:85:1c:0c:ad:09:ae:cd:c0:e3:
4c:cc:bf:06:84:a9:ff:1a:aa:26:ad:94:1c:c7:64:
58:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:84:EA:A1:02:B2:11:2C:04:CD:D9:96:E7:31:FF:A6:A5:AB:88:61
X509v3 Authority Key Identifier:
keyid:B8:07:37:CE:1C:FB:E6:53:3B:58:80:B6:6E:A9:E2:41:3C:D9:C8:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAc3zhz75lM7WIC2bqniQTzZyCU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/696f99-f411-4e2e-b26a-4cae54191cd5/1/uAc3zhz75lM7WIC2bqniQTzZyCU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d1:03:04:96:b8:28:d1:69:ef:1d:bc:f7:f3:4a:04:97:0c:
75:12:63:95:b3:b8:ab:f8:b6:2f:61:7d:1d:a4:7b:18:73:e1:
9b:00:82:27:39:2d:31:10:89:5c:6b:58:65:25:e5:03:fb:ac:
8f:93:5b:af:af:8a:90:a1:12:01:db:0e:15:11:24:65:62:0b:
38:b4:bb:c7:24:68:e2:65:e8:52:96:df:6d:a7:33:b7:bf:46:
f8:b3:f1:6c:70:bf:81:87:28:e7:87:be:0a:a2:b2:38:74:30:
7c:f9:5b:e9:22:e9:da:a7:9d:f1:2f:e0:0d:26:81:be:c3:5d:
cb:b8:1c:2f:07:17:d6:c8:a8:91:c2:fb:5d:b8:c6:69:63:23:
0b:6d:11:9a:e3:2c:0e:81:de:e3:28:e3:56:8c:4f:89:26:ee:
76:74:b9:fa:51:e2:01:59:a9:a0:98:14:52:b4:c8:b5:18:87:
67:0f:70:ad:98:8c:70:75:ba:bf:4c:1f:af:87:08:0b:b8:02:
10:7e:78:a6:cf:1e:08:fd:16:59:1c:ea:63:df:50:43:78:be:
5a:73:61:80:a6:92:aa:75:93:98:61:4d:34:4b:ca:3b:53:96:
a2:6b:55:2c:cd:88:e6:81:7f:67:2f:a3:6b:bf:34:de:bf:f1:
63:25:32:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:57:12 2026 by rpki-client