Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
File: UKiPmoNBAa34dwN6UcgdEzqpRuw.mft (raw, json)
Hash identifier: KWN349U2IAbOVs8+tnrTsn0/dEJddRBzCVkMgmj/rZ8=
Subject key identifier: 65:CA:C8:44:B4:62:A4:98:68:8D:98:82:A4:7B:67:8D:FE:1F:E1:53
Authority key identifier: 50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
Certificate issuer: /CN=50a88f9a834101adf877037a51c81d133aa946ec
Certificate serial: 019D9998DCFA9922D5B3F89921E36C15DDE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
Manifest number: 104D
Signing time: Fri 17 Apr 2026 04:00:25 +0000
Manifest this update: Fri 17 Apr 2026 04:00:25 +0000
Manifest next update: Sat 18 Apr 2026 04:00:25 +0000
Files and hashes: 1: J7XTEsifopXt0LyZERZ4bxD_gsA.roa (hash: Il7+0rYxklAhI9+3062Z4W95Cz4Wv/cW8FrtfG8GyYg=)
2: UKiPmoNBAa34dwN6UcgdEzqpRuw.crl (hash: SmxTuQ4Z+PMG76nQwJJG+GuF37BHZzZxBRmsrnCiuMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:dc:fa:99:22:d5:b3:f8:99:21:e3:6c:15:dd:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50a88f9a834101adf877037a51c81d133aa946ec
Validity
Not Before: Apr 17 04:00:25 2026 GMT
Not After : Apr 18 04:00:25 2026 GMT
Subject: CN=65cac844b462a498688d9882a47b678dfe1fe153
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:68:d0:6f:1b:02:a7:7e:12:45:e1:8b:f4:ca:
8c:2f:92:62:c0:10:2c:be:1b:26:d2:8e:ac:43:b0:
40:7b:c5:ba:6d:6f:94:19:34:29:d9:d4:8d:de:5a:
33:db:2f:c5:d8:39:18:5f:6c:96:0d:d4:a1:94:da:
31:19:6d:60:15:71:bf:f8:e5:fa:72:ee:cb:d2:18:
79:a7:72:67:6e:02:04:5a:a3:bc:65:98:a6:c8:62:
d4:22:04:b3:68:c8:d3:d7:ba:63:4e:a1:ef:0b:ce:
6c:7a:42:10:40:cb:45:a7:cd:5c:36:dd:76:63:d5:
9a:51:e2:f2:98:18:73:d8:23:3f:2b:76:ec:fa:a5:
49:ec:1b:66:65:f9:c1:d1:1a:16:55:e6:2c:6c:49:
f5:e1:0e:12:f5:d0:0f:29:5e:48:f0:db:49:7a:0e:
83:b8:9d:82:d6:26:0f:72:81:29:9d:25:bc:d0:cb:
f8:1e:b5:b6:35:26:09:b3:94:41:9b:91:d1:90:83:
c4:13:35:92:67:e1:c1:ae:81:43:ec:45:42:2e:db:
a5:67:af:62:b3:2e:9a:96:02:08:89:0b:85:44:ff:
51:55:c2:94:c4:14:ed:c6:ef:c2:9d:7f:c1:69:a3:
5c:03:7b:ed:cb:f2:91:de:65:cb:c3:fd:63:ea:2f:
12:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:CA:C8:44:B4:62:A4:98:68:8D:98:82:A4:7B:67:8D:FE:1F:E1:53
X509v3 Authority Key Identifier:
keyid:50:A8:8F:9A:83:41:01:AD:F8:77:03:7A:51:C8:1D:13:3A:A9:46:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UKiPmoNBAa34dwN6UcgdEzqpRuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/9760c6-3fce-42bd-bbc8-49fbc30a8f61/1/UKiPmoNBAa34dwN6UcgdEzqpRuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:d0:cd:8e:8c:bc:12:4f:1c:b8:a2:77:67:ab:e2:96:62:50:
7b:fb:0a:ba:bb:f4:41:13:ba:3c:47:c9:f3:ef:40:4c:15:fa:
86:50:03:77:9f:e9:66:29:6d:27:cd:00:1a:c2:51:27:82:01:
da:50:cd:c8:3d:6f:05:f8:60:f8:9b:fe:fa:ca:f7:8d:88:35:
3c:26:a4:44:6a:af:c1:be:f0:25:61:1f:20:4a:3b:48:36:8c:
7c:1a:74:67:db:de:1b:65:14:f0:82:8d:bf:ff:8f:eb:19:49:
74:bf:01:4a:14:6c:13:2c:7e:84:6e:ca:1e:d1:bb:ad:3c:56:
97:0d:19:e2:e9:e7:eb:0d:44:1b:c9:c7:86:5b:59:6d:60:dc:
20:a9:c6:01:30:81:f7:27:49:19:85:30:33:73:78:fb:f8:d2:
a7:6b:cc:4f:c3:a1:6e:1b:22:e7:e9:91:29:2c:2c:36:8e:f3:
98:46:c3:ea:c4:45:df:41:c1:53:1f:5a:4a:6c:44:5d:c7:5a:
ad:d2:c8:fe:b3:4e:a5:c8:f2:a5:58:9e:42:0b:d4:13:f6:70:
37:56:26:26:2f:6b:9c:6e:43:35:44:55:cb:6b:d8:e5:e1:2f:
1e:30:a0:25:fa:8a:ed:ad:cf:5b:3a:fc:73:3b:09:71:c8:0e:
26:47:65:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:02:39 2026 by rpki-client