Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
File: 1-uFrST0qEol8r0dXuxigLuws3hc.mft (raw, json)
Hash identifier: k6U9+ljqVPPkl+BGbVtGXHcjvmLohP2K4LpcYWYLp0s=
Subject key identifier: 21:EC:7E:19:4F:3E:A8:80:1E:9D:C1:24:1D:57:57:9A:16:CA:34:5D
Authority key identifier: FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
Certificate issuer: /CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Certificate serial: 019D985071CC76D3ED1A5B13289FDC5DA222
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
Manifest number: 18C9
Signing time: Thu 16 Apr 2026 22:01:42 +0000
Manifest this update: Thu 16 Apr 2026 22:01:42 +0000
Manifest next update: Fri 17 Apr 2026 22:01:42 +0000
Files and hashes: 1: 1-uFrST0qEol8r0dXuxigLuws3hc.crl (hash: t0YJewnY2OoOJMX/5Y9U3EVg3oUJN1Y+y3YiuXFkmq0=)
2: 5K9Oh9VZsr3HOBptEMVsjoP_e_Q.roa (hash: YLy3at+4CK7XbYpoK63TH6Fci1Db7Ppm/QM9MlBVSzc=)
3: 7IcPHrXROTuNTf_SahmIzDpYk_c.roa (hash: L5UDzTnOOmL94lsJB5GitXxrT2tqiHBlNusXsGvxUwU=)
4: 8MABlsDBV8LP0o72Ps6uS8md-EE.roa (hash: fXmqgSgl411LYZCpGZdGkCF4TgXdZdFuZkTr9EWcmVw=)
5: fgjW20ZQ04xgq_qRpAWkrcJGzFo.roa (hash: pmOI3CWB5wHFkABDYT1l6+9Xm8dMktyYSLlosvObWto=)
6: ypRDxsb3_AxTrENYh76-1Wq0x3s.roa (hash: AXPwQ40+ytvDYVbgMoQ9hylazSVqs3q0IglBPe/qi70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:45:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:71:cc:76:d3:ed:1a:5b:13:28:9f:dc:5d:a2:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae16b493d2a12897caf4757bb18a02eec2cde17
Validity
Not Before: Apr 16 22:01:42 2026 GMT
Not After : Apr 17 22:01:42 2026 GMT
Subject: CN=21ec7e194f3ea8801e9dc1241d57579a16ca345d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b0:3a:23:2b:10:eb:37:e0:14:75:15:06:70:
44:e9:63:a8:9a:2e:2c:b0:1d:f8:8d:a4:82:39:20:
ae:72:76:d0:1e:0c:5e:c0:d6:e0:d0:9b:40:18:07:
08:7d:8c:e1:3d:2a:89:b7:af:3a:5c:42:54:4b:89:
13:f6:b4:a0:8f:1f:61:4e:69:51:a5:62:8a:00:bc:
44:41:6c:26:a0:97:9e:7c:b5:c6:ba:6b:65:76:4b:
b3:35:cf:a7:e1:bc:93:51:3c:35:86:98:5e:69:ad:
fd:ac:71:27:9c:75:cf:f9:17:dc:f6:0c:86:24:b7:
c7:24:df:e8:c7:42:a4:55:ed:7f:70:cf:7c:44:e3:
a7:17:be:c8:f6:38:01:f6:74:c4:ac:3f:d6:52:b1:
87:b3:85:44:e3:34:1b:37:eb:d7:7c:94:89:4c:9f:
94:75:1f:f3:27:90:1d:56:27:d5:ac:33:ef:3e:8f:
6d:01:21:6a:6e:d0:ef:95:ec:48:34:9d:9c:95:70:
37:1d:68:c9:d0:da:60:90:74:ad:f4:53:33:cc:96:
fb:49:4c:92:21:52:7d:b3:49:2f:17:1e:d6:cb:08:
d6:35:0c:dd:88:f1:9c:d4:f7:0e:85:9c:ff:b3:c0:
03:e8:6a:40:b0:17:52:6b:27:fb:ca:e3:ca:54:6a:
e2:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:EC:7E:19:4F:3E:A8:80:1E:9D:C1:24:1D:57:57:9A:16:CA:34:5D
X509v3 Authority Key Identifier:
keyid:FA:E1:6B:49:3D:2A:12:89:7C:AF:47:57:BB:18:A0:2E:EC:2C:DE:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uFrST0qEol8r0dXuxigLuws3hc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/293d36-9da2-4405-8de3-4afd8254ae43/1/1-uFrST0qEol8r0dXuxigLuws3hc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:07:2c:95:3f:38:76:23:88:aa:9a:4c:75:08:73:78:34:7a:
3d:8e:ee:ba:74:88:f7:9b:5d:b7:8b:93:cc:98:9e:6b:cc:7c:
58:0e:bc:4b:df:61:b7:c7:5d:27:27:25:d0:eb:1b:6c:7a:27:
e5:0c:91:a2:fb:e6:21:b8:41:25:41:a4:64:44:4e:b8:d1:08:
02:cb:f1:be:47:49:93:f1:7c:23:95:49:8f:cf:fb:22:64:05:
3c:58:8b:06:eb:b5:1c:de:f9:23:39:04:e6:8a:6a:32:00:ea:
ab:6a:2d:aa:9a:34:63:80:29:13:13:a4:03:77:66:94:20:61:
5b:19:88:ee:a2:4b:e5:d1:39:d7:1c:f9:2c:2c:bb:34:77:38:
c2:fa:47:15:67:b0:58:90:48:b9:cf:0c:d5:99:c9:cb:30:32:
c7:0e:5c:43:06:a1:bf:fd:f7:6f:89:a1:33:ad:b6:83:18:2e:
06:b7:84:0e:92:79:2a:20:83:34:1a:38:75:27:97:6e:ed:3e:
49:fb:e0:9e:4b:93:21:b7:b1:43:fd:b0:b7:31:89:b5:8f:9e:
be:3c:73:5c:ee:c7:2f:73:c2:e2:56:cf:93:7f:f8:ed:53:fa:
65:42:23:35:bc:da:2f:47:b2:b0:98:00:58:15:57:b8:03:b1:
35:7b:58:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 23:55:53 2026 by rpki-client