Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
File: Ul0cSVWy778Anp5Bsecupt_4JLM.mft (raw, json)
Hash identifier: YQbYSbq1yllBOKkMQQKpF6Oo8CVAf3US3gpD+Ipp2RU=
Subject key identifier: 4B:8C:50:2C:47:D3:90:36:68:91:ED:59:4F:78:EE:99:3A:A7:D8:4E
Authority key identifier: 52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
Certificate issuer: /CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Certificate serial: 019D99627FF8735549589E45DF3D20BCA442
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
Manifest number: 0A53
Signing time: Fri 17 Apr 2026 03:01:02 +0000
Manifest this update: Fri 17 Apr 2026 03:01:02 +0000
Manifest next update: Sat 18 Apr 2026 03:01:02 +0000
Files and hashes: 1: Ul0cSVWy778Anp5Bsecupt_4JLM.crl (hash: BVBxjPy7x7UrN+We+Pv/YwBlthEEdrxoZakM6jgOS1M=)
2: XhQkb1zdm1y7HlbvFhOvdL8mB-Y.roa (hash: 6Lf0K5Aehp8CxOSNwmP8Hd5JPrDFUIPDjPGfacsaeDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:7f:f8:73:55:49:58:9e:45:df:3d:20:bc:a4:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=525d1c4955b2efbf009e9e41b1e72ea6dff824b3
Validity
Not Before: Apr 17 03:01:02 2026 GMT
Not After : Apr 18 03:01:02 2026 GMT
Subject: CN=4b8c502c47d390366891ed594f78ee993aa7d84e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:f9:6f:53:7b:01:b4:ac:bb:5d:6c:a7:98:45:
32:3f:42:9b:c0:19:76:dc:93:0d:0d:67:a4:b0:61:
42:a7:62:6d:a6:be:c9:82:e7:64:6a:a7:db:2f:c6:
bd:68:df:03:80:c5:ad:31:19:f1:47:71:9e:13:4f:
6c:5d:43:9d:70:e3:08:4f:46:ba:ea:27:56:c0:98:
12:85:da:41:49:61:68:3d:c7:d4:36:c7:65:d2:eb:
4b:8a:bb:03:f0:8d:5b:4e:97:a0:c3:13:6a:c5:54:
8d:32:bc:3a:e4:41:bf:86:37:4f:f7:0e:a8:12:a3:
6b:d5:0b:a7:34:f4:49:91:6f:f6:a7:e6:f7:f1:bc:
c8:1e:10:c1:57:d8:a6:89:68:20:80:b5:65:b4:84:
2b:d2:8d:4d:b2:15:c9:9b:eb:76:61:1e:43:7c:44:
5b:f3:fa:be:e8:6d:6e:ae:38:da:0c:7f:ed:e8:65:
a4:f8:8d:a6:e4:1d:e1:fa:ef:86:00:64:85:5d:48:
94:96:77:ee:87:3a:fa:a4:2f:a2:5b:81:a5:a8:8e:
63:e2:c7:a1:51:c1:9b:98:9c:81:57:2c:d1:b1:4f:
45:9a:89:11:47:1d:d8:e9:25:1a:dc:7d:53:2d:fe:
0d:e9:12:75:ff:24:fa:3b:0a:c9:64:a9:00:34:1d:
3e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:8C:50:2C:47:D3:90:36:68:91:ED:59:4F:78:EE:99:3A:A7:D8:4E
X509v3 Authority Key Identifier:
keyid:52:5D:1C:49:55:B2:EF:BF:00:9E:9E:41:B1:E7:2E:A6:DF:F8:24:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ul0cSVWy778Anp5Bsecupt_4JLM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8195b3-c475-4ca4-b42d-6627a4eb5963/1/Ul0cSVWy778Anp5Bsecupt_4JLM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:b8:28:d6:33:db:43:64:dc:00:44:9a:13:93:39:fe:3c:ae:
de:10:7d:f9:ae:16:d4:b7:c1:a8:a3:db:e8:53:e1:30:1a:7a:
91:2f:09:a7:2c:22:a9:10:38:71:78:0e:b9:2d:ad:f3:9c:7a:
7d:0b:c6:51:21:9f:28:52:24:6c:08:38:56:73:27:c1:99:4f:
28:f1:f4:25:cd:9c:45:9e:cb:92:14:43:90:77:8d:9e:a1:98:
a4:03:8f:5b:48:aa:08:30:53:87:60:74:5d:1a:e8:6e:06:84:
0b:9e:96:f0:e7:0b:4f:93:0d:95:42:05:19:51:e5:a2:d7:b3:
62:bc:09:09:c6:d6:0d:b3:aa:6d:20:0d:cf:e5:ed:29:55:2d:
7c:43:9b:90:75:32:15:6c:b6:40:d5:ea:1b:68:78:ac:d3:42:
4b:20:f4:36:e2:5d:35:44:40:42:e3:65:b7:16:af:7e:c2:38:
b9:32:5e:54:0b:81:69:8c:c3:fe:07:a9:ae:3a:7b:f3:51:b5:
95:ef:5a:08:2a:65:f9:6e:75:10:3e:a0:9b:85:4c:2c:2f:d2:
5a:c4:66:77:e8:eb:0d:9f:6b:57:82:26:d5:a1:e9:c8:29:f6:
bf:66:fa:85:fe:93:4e:12:df:c5:39:c4:d1:6e:bd:22:e0:f9:
91:41:e3:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:15:27 2026 by rpki-client