Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: Fr9BuiM5DZSrcXAgXZTHfk737hW8/HIZRf6bPON8s8s=
Subject key identifier: 10:31:1B:03:73:33:92:93:87:DF:5A:EB:9F:04:3B:BA:D7:D9:D3:68
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 019D9B1966D883610EB16339E777E7701F78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 11:00:26 +0000
Manifest this update: Fri 17 Apr 2026 11:00:26 +0000
Manifest next update: Sat 18 Apr 2026 11:00:26 +0000
Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: kGXlTo7JIcWA+BntR9VN7eSPcvEwhqMtAxbB08LrkWA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:66:d8:83:61:0e:b1:63:39:e7:77:e7:70:1f:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Apr 17 11:00:26 2026 GMT
Not After : Apr 18 11:00:26 2026 GMT
Subject: CN=10311b037333929387df5aeb9f043bbad7d9d368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:59:3f:44:f6:e7:0e:46:fc:44:04:a3:9b:
33:2a:20:eb:b3:c8:84:d7:fa:0d:a7:3b:40:51:dc:
66:60:00:fc:06:9b:ce:46:d3:e9:2c:24:ab:78:04:
8c:d7:ec:43:60:c5:26:65:1e:92:65:70:72:81:f3:
63:6a:6a:d8:eb:cf:7e:ee:99:27:27:23:bd:a5:b4:
95:ba:c5:17:77:76:21:fb:58:95:35:7c:1b:4e:be:
72:63:71:87:15:36:9e:37:6b:49:15:bc:f4:c7:50:
6b:87:fe:89:0f:22:46:3a:ae:df:e0:4f:de:be:c6:
cf:6c:fb:26:7f:0c:28:83:f4:82:fb:d3:93:3f:b2:
19:39:a9:9e:f4:2e:7e:d2:dc:45:92:d3:a2:35:15:
f1:72:51:bc:ec:ce:31:80:6c:05:36:18:82:77:5c:
67:61:a3:66:5f:60:8e:69:c9:de:ed:1e:7d:e0:5e:
2b:91:94:80:f9:f1:31:5d:f7:5a:ac:1b:df:c1:d3:
0d:ee:4b:97:8c:ed:21:ec:95:4d:62:19:3d:0f:be:
92:61:67:ea:94:43:91:39:38:05:a4:56:fa:34:5f:
82:75:be:18:95:ae:b2:4b:b3:88:b0:e1:fc:35:f6:
ec:7f:54:d6:07:60:f0:ff:a5:b5:02:bd:00:63:4e:
d2:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:31:1B:03:73:33:92:93:87:DF:5A:EB:9F:04:3B:BA:D7:D9:D3:68
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:44:db:e1:c6:85:13:5d:89:50:87:59:a1:9c:10:b2:41:8c:
25:ef:d4:26:81:08:b6:01:2b:ac:bb:91:23:f2:11:08:ac:1a:
9a:b2:60:e6:36:ae:a8:45:6e:4f:9e:6d:d7:ec:8e:d0:28:a1:
be:6a:de:ca:38:7e:36:f1:e2:5f:c7:83:e3:66:1b:3a:6f:42:
49:47:1a:22:a2:ec:ec:7c:45:81:e4:08:b0:0b:ba:46:5d:95:
89:87:c2:a2:b4:8c:14:eb:8d:0b:38:fb:d6:5a:77:f7:91:c3:
d7:1a:70:39:e9:1d:ad:02:56:6b:5b:26:02:85:2d:10:5f:a0:
6a:58:f4:ed:be:a5:71:1e:6f:34:dc:a8:9d:ea:db:f9:6a:f1:
26:e0:64:b0:22:f0:25:b5:1e:36:4a:6a:70:8b:5e:18:cd:f3:
83:c3:63:c1:ab:de:12:27:07:a0:64:94:08:78:53:35:18:9d:
9a:72:67:75:ae:0c:bc:7a:9e:69:5d:76:5e:50:18:8f:2c:5f:
22:2a:5f:07:f0:bb:af:11:74:1c:ac:ea:1c:5d:15:96:d9:a3:
d3:62:2b:c8:05:d6:e8:89:f4:f4:10:5f:76:c9:7a:97:dd:a9:
94:c2:fc:e3:48:d2:14:c3:7b:88:9d:79:19:64:f9:c3:90:c6:
c7:44:dc:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:25:18 2026 by rpki-client