Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
File: UoG4QfEnaUidX9NDtyukT5DJbzI.mft (raw, json)
Hash identifier: R8yM2c8oMot0Og4wbjwpZF44c1p+XzYVHdLfRNcxwdc=
Subject key identifier: C9:70:85:26:F6:E3:6F:C8:DF:6A:C5:AF:64:9F:DA:2A:E0:B6:25:00
Authority key identifier: 52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
Certificate issuer: /CN=5281b841f12769489d5fd343b72ba44f90c96f32
Certificate serial: 019D9BF5BDBE8CC178A2A3E099D5447AD0CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 15:01:06 +0000
Manifest this update: Fri 17 Apr 2026 15:01:06 +0000
Manifest next update: Sat 18 Apr 2026 15:01:06 +0000
Files and hashes: 1: 5yKK67qkNnZp_BeoLmbY6oEtbzQ.roa (hash: 3BzgmGQESa9eTcM0ODtiMc7GJiSKtttHkfqVjBBtvdQ=)
2: UoG4QfEnaUidX9NDtyukT5DJbzI.crl (hash: aILZ1VYAsuGMUcofbde2mxeyD1oTAfsZBGJuQvnTWJ0=)
3: wJ7_Xvzpdt1CtacBkZyFEU6Rq8w.roa (hash: mYKkkRY5nHeUPjxezloUDprRN7Wi7BEuCqiUJh2cLUU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 15:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:f5:bd:be:8c:c1:78:a2:a3:e0:99:d5:44:7a:d0:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5281b841f12769489d5fd343b72ba44f90c96f32
Validity
Not Before: Apr 17 15:01:06 2026 GMT
Not After : Apr 18 15:01:06 2026 GMT
Subject: CN=c9708526f6e36fc8df6ac5af649fda2ae0b62500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:5f:a8:0b:d5:95:91:a2:20:65:b9:5c:83:9b:
38:6f:ab:ae:73:3a:80:d6:3e:11:26:ec:b4:6a:45:
76:a5:19:e9:97:23:d0:73:be:5c:94:57:c2:6a:d1:
da:7e:59:38:11:2a:c4:ad:6f:87:9c:4a:3b:16:82:
31:14:b6:e9:90:2b:46:f2:02:bd:89:83:3c:c5:2b:
46:b4:fe:1a:e6:83:b9:4e:4c:fb:7d:98:32:86:ed:
5b:f2:3a:87:16:ea:16:6a:2c:64:60:71:c1:79:f5:
bd:f0:f5:cd:6a:d1:b6:8e:df:25:d5:36:c0:4a:23:
2e:43:f5:b2:4c:99:03:82:dc:a9:2f:f3:02:5d:48:
74:8a:af:75:d8:b8:4f:0d:2b:58:09:ad:f4:51:e6:
32:dc:51:ea:1a:a8:91:d1:16:04:03:79:5e:60:eb:
da:03:2e:55:09:fb:a9:6c:2b:5c:cb:ec:3b:e9:8a:
59:f9:3e:d7:ee:99:12:a8:ce:88:62:70:da:e1:44:
b2:a5:d8:1b:be:28:a9:3f:a3:a4:cf:f3:7e:c6:dd:
bc:20:de:89:ca:b5:c7:78:81:c2:e7:12:79:68:b0:
5b:7a:29:2b:c4:dd:dc:d4:30:69:23:a4:1e:e0:e1:
bd:a6:7b:bb:ae:8e:03:04:24:05:4d:1e:e3:32:b1:
13:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:70:85:26:F6:E3:6F:C8:DF:6A:C5:AF:64:9F:DA:2A:E0:B6:25:00
X509v3 Authority Key Identifier:
keyid:52:81:B8:41:F1:27:69:48:9D:5F:D3:43:B7:2B:A4:4F:90:C9:6F:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UoG4QfEnaUidX9NDtyukT5DJbzI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/14225b-bf95-45c9-8d7b-fc25d455af85/1/UoG4QfEnaUidX9NDtyukT5DJbzI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:e2:67:8e:2c:4a:dc:bb:a0:2b:f8:19:01:6e:9f:60:97:6b:
2e:26:c2:e2:23:b5:b2:e5:70:7f:50:b9:f0:7b:20:e8:40:f3:
a2:2f:31:9d:5a:8f:27:25:d2:53:bd:66:30:73:ff:af:ae:d8:
1d:eb:cb:1d:5a:33:c9:21:53:72:3f:cd:3b:ac:69:fb:23:69:
6f:10:fd:01:2c:50:36:48:f8:a2:e6:24:26:f9:98:e2:86:83:
21:b7:cc:21:5d:7f:05:4c:e5:cb:7d:e0:2a:ea:1f:ed:67:be:
54:7a:fb:07:98:ae:0a:93:a4:40:63:89:1b:a6:ae:0d:c6:9f:
8b:02:56:a2:e9:ef:c9:2a:bc:5d:74:a8:81:15:60:0a:a6:d2:
62:f3:74:24:d8:cd:80:87:e5:73:ea:74:c8:a6:65:e9:6b:de:
aa:4e:3d:a8:45:18:4d:18:8e:61:fc:7e:45:bf:55:69:52:df:
44:b3:fc:56:1a:bc:ef:5f:f5:e1:58:a8:05:9c:14:40:a9:ac:
d2:f7:39:af:6c:fc:b9:2e:88:46:b5:e0:4d:b6:c1:24:48:72:
bb:27:f9:06:29:f4:b6:c7:f8:59:6f:9c:b0:e4:cf:20:c8:a9:
8b:ca:e3:f2:57:c1:1b:60:22:45:37:8e:dd:4c:06:d6:2c:b6:
8b:92:c9:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:24 2026 by rpki-client