Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
File: uH9ej-619ec7CXtmZX7tjbl0pA4.mft (raw, json)
Hash identifier: 58q7Mhf0Pg8W1xNe8bugbjv3o7EyAM+Ru2DgmCFfyAU=
Subject key identifier: CB:F8:D1:68:F6:01:CB:85:A2:14:B0:4C:F4:0A:4A:27:91:01:67:39
Authority key identifier: B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
Certificate issuer: /CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Certificate serial: 019D98F4DBF0B0FA01378D433FD1DF2584AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
Manifest number: 109E
Signing time: Fri 17 Apr 2026 01:01:17 +0000
Manifest this update: Fri 17 Apr 2026 01:01:17 +0000
Manifest next update: Sat 18 Apr 2026 01:01:17 +0000
Files and hashes: 1: uH9ej-619ec7CXtmZX7tjbl0pA4.crl (hash: smKPMLVnLYXDdAiuyuH3dSA749hzCuRPMvTKEbB2an0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:db:f0:b0:fa:01:37:8d:43:3f:d1:df:25:84:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87f5e8feeb5f5e73b097b66657eed8db974a40e
Validity
Not Before: Apr 17 01:01:17 2026 GMT
Not After : Apr 18 01:01:17 2026 GMT
Subject: CN=cbf8d168f601cb85a214b04cf40a4a2791016739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:b9:21:33:40:0e:ce:f8:db:88:9d:a3:8f:66:
7a:c1:2b:39:b0:eb:d8:ee:7f:6d:40:34:9f:d9:e4:
f6:5f:cb:82:a3:f9:47:42:f9:1d:2a:c1:06:9b:fe:
b6:f7:d5:f9:53:b0:23:f7:e5:eb:21:ab:11:0a:67:
d7:9f:98:57:8d:bb:8c:c6:a0:69:47:54:a5:3d:95:
b8:61:e8:ab:d0:5f:54:9b:0c:f5:a0:7f:e1:84:91:
42:c5:c1:d8:14:c1:e9:b5:1b:1c:35:28:d5:44:6b:
e7:fe:fa:31:3a:61:a1:64:94:08:88:a5:85:01:da:
0a:8d:88:ee:36:01:b5:22:fc:cb:83:5c:94:6f:dd:
31:e1:63:f5:98:e0:bc:e5:86:d2:a4:bb:5b:73:74:
0e:90:48:c2:e7:9b:bc:ff:79:cb:e3:5e:c5:c6:23:
f9:e1:6f:f1:d9:1b:b7:7f:78:5c:c6:9f:89:a4:ad:
ce:71:1a:38:2a:a1:2a:53:eb:28:bc:a1:df:ab:fb:
b3:97:83:e9:40:5c:96:d2:15:1a:65:0f:45:cd:b6:
00:41:44:71:d4:ce:c9:82:c2:cd:b9:27:c9:b9:46:
42:62:33:ca:54:ff:de:f3:3d:1b:2a:90:d0:76:14:
ec:8b:b2:b0:c0:9a:e1:57:79:d4:87:55:e7:70:4f:
9a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:F8:D1:68:F6:01:CB:85:A2:14:B0:4C:F4:0A:4A:27:91:01:67:39
X509v3 Authority Key Identifier:
keyid:B8:7F:5E:8F:EE:B5:F5:E7:3B:09:7B:66:65:7E:ED:8D:B9:74:A4:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uH9ej-619ec7CXtmZX7tjbl0pA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ffc00d-3316-4286-8932-cc60a5fdeeb2/1/uH9ej-619ec7CXtmZX7tjbl0pA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:96:07:40:77:7a:d1:d0:c7:97:90:76:bf:2d:76:b9:26:47:
87:1c:f0:7c:4a:3e:c3:80:af:09:b8:0b:38:56:87:33:a5:b8:
fc:70:24:48:bd:c5:24:e8:d3:8f:4d:f3:6c:4d:c6:3e:92:7e:
5c:0e:50:b5:51:d1:45:3e:fc:4a:7f:b3:be:27:1f:ab:53:66:
ab:18:d2:dc:ae:25:62:f3:f1:65:76:76:e6:10:49:c5:a1:27:
cb:2d:df:6a:0c:7e:a6:74:2d:66:d1:a1:c6:fb:78:ca:e7:43:
40:1b:c4:4b:05:d0:27:0d:2a:e1:76:39:8a:fb:83:84:e6:dd:
33:6b:71:b2:69:79:42:f8:50:88:8d:7c:16:43:53:e7:91:01:
55:37:6a:7f:a5:3d:f3:ce:f9:af:9e:1d:f5:91:ad:d9:22:7d:
6d:84:6f:07:91:54:ca:d2:42:cb:32:0a:da:fc:d6:b0:55:d0:
65:92:41:8b:a9:6e:16:53:e2:a3:82:4a:6f:0f:89:a2:d2:bc:
95:04:64:fc:26:f2:b4:3c:82:26:cb:b5:fa:b3:07:4b:03:32:
c8:31:ea:d6:43:91:07:89:cb:8a:f7:bc:99:b8:26:50:31:65:
e7:82:6e:b7:1a:ae:52:8b:69:a7:50:d3:d4:96:aa:b2:8d:2e:
78:71:95:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9NvwsPoBN41DP9HfJYSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI4N2Y1ZThmZWViNWY1ZTczYjA5N2I2NjY1N2VlZDhkYjk3
NGE0MGUwHhcNMjYwNDE3MDEwMTE3WhcNMjYwNDE4MDEwMTE3WjAzMTEwLwYDVQQD
EyhjYmY4ZDE2OGY2MDFjYjg1YTIxNGIwNGNmNDBhNGEyNzkxMDE2NzM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7khM0AOzvjbiJ2jj2Z6wSs5sOvY
7n9tQDSf2eT2X8uCo/lHQvkdKsEGm/6299X5U7Aj9+XrIasRCmfXn5hXjbuMxqBp
R1SlPZW4Yeir0F9Umwz1oH/hhJFCxcHYFMHptRscNSjVRGvn/voxOmGhZJQIiKWF
AdoKjYjuNgG1IvzLg1yUb90x4WP1mOC85YbSpLtbc3QOkEjC55u8/3nL417FxiP5
4W/x2Ru3f3hcxp+JpK3OcRo4KqEqU+sovKHfq/uzl4PpQFyW0hUaZQ9FzbYAQURx
1M7JgsLNuSfJuUZCYjPKVP/e8z0bKpDQdhTsi7KwwJrhV3nUh1XncE+aHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMv40Wj2AcuFohSwTPQKSieRAWc5MB8GA1UdIwQY
MBaAFLh/Xo/utfXnOwl7ZmV+7Y25dKQOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdUg5ZWotNjE5ZWM3Q1h0bVpYN3RqYmwwcEE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9mZmMwMGQtMzMxNi00Mjg2LTg5MzIt
Y2M2MGE1ZmRlZWIyLzEvdUg5ZWotNjE5ZWM3Q1h0bVpYN3RqYmwwcEE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9mZmMwMGQtMzMxNi00Mjg2LTg5MzItY2M2MGE1ZmRlZWIy
LzEvdUg5ZWotNjE5ZWM3Q1h0bVpYN3RqYmwwcEE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ5YHQHd6
0dDHl5B2vy12uSZHhxzwfEo+w4CvCbgLOFaHM6W4/HAkSL3FJOjTj03zbE3GPpJ+
XA5QtVHRRT78Sn+zvicfq1NmqxjS3K4lYvPxZXZ25hBJxaEnyy3fagx+pnQtZtGh
xvt4yudDQBvESwXQJw0q4XY5ivuDhObdM2txsml5QvhQiI18FkNT55EBVTdqf6U9
8875r54d9ZGt2SJ9bYRvB5FUytJCyzIK2vzWsFXQZZJBi6luFlPio4JKbw+JotK8
lQRk/CbytDyCJsu1+rMHSwMyyDHq1kORB4nLive8mbgmUDFl54JutxquUotpp1DT
1Jaqso0ueHGVpg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:52 2026 by rpki-client