Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: jvE6Wm6Gut5KlB4g6Z/cw3tPJBNzOIZU0P68DexIofk=
Subject key identifier: 54:96:29:96:28:B5:8B:B9:5A:73:3B:47:4E:78:D3:3C:8E:09:40:0D
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019D992B36E3DD1BF693734A1B445A58B0BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 02:00:39 +0000
Manifest this update: Fri 17 Apr 2026 02:00:39 +0000
Manifest next update: Sat 18 Apr 2026 02:00:39 +0000
Files and hashes: 1: 6wCR-IXi-d6mFq9coQKBvKcWKb8.roa (hash: 3CTCR/QkDS3QC7l1TMcETE6DIffI4EDmk47oroP7Oco=)
2: Wve6Gpo7jKUoWkkK-ID2jmyV7c4.roa (hash: 1lWZa+k/0zeWIBYNmCvAje+cs/RGX75v0KzNg1cs52k=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: UPkcoMYtrjqqTl6D7aWhzDB+8ZVmWUkbn1oZ/TboNfA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:36:e3:dd:1b:f6:93:73:4a:1b:44:5a:58:b0:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Apr 17 02:00:39 2026 GMT
Not After : Apr 18 02:00:39 2026 GMT
Subject: CN=5496299628b58bb95a733b474e78d33c8e09400d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7d:08:c8:43:9e:cb:2f:95:4e:3f:a2:f6:5d:
dd:8c:44:40:c0:cb:d3:4f:e7:b7:6c:fd:ee:2a:3b:
75:b2:64:2a:c3:9e:55:62:6d:ca:d6:98:d4:56:b4:
94:48:5e:e9:fd:d6:0f:27:c0:cb:4c:ee:e2:27:ea:
23:62:25:c2:0f:db:eb:9d:68:21:fe:ca:c7:56:f5:
79:40:69:da:ab:93:ee:99:66:0d:41:38:dc:82:63:
93:e5:5f:be:bb:62:61:a7:ae:71:fa:2f:1e:12:ed:
a4:87:63:fc:67:d7:3b:9d:67:6c:14:4c:46:65:d7:
04:6b:af:bc:49:55:6f:f6:2d:e6:6b:8c:b6:7e:3c:
00:f8:14:85:78:c3:65:6c:5a:21:8e:6a:68:c9:5d:
77:60:cd:c8:5d:3d:01:1a:c4:84:76:d0:18:c8:5c:
61:a4:e9:61:3e:9c:86:e6:41:85:97:82:e6:c6:c2:
78:8f:5e:39:ae:00:e6:ea:45:3a:bf:22:16:ca:9a:
ac:53:2f:9e:20:a4:8c:55:8a:0d:f1:5e:31:66:11:
2e:f1:9f:35:4d:ce:3b:c5:fd:df:03:80:67:01:eb:
b3:1b:52:04:57:55:76:fe:b6:22:64:fb:b1:5f:f6:
aa:08:fe:5e:b2:2c:0f:0d:6b:f9:83:c2:76:21:ce:
a7:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:96:29:96:28:B5:8B:B9:5A:73:3B:47:4E:78:D3:3C:8E:09:40:0D
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:57:c7:3b:69:d4:b5:81:b8:82:91:c7:6f:0e:37:e1:75:21:
f9:b4:40:85:9c:81:cb:ad:79:a1:59:ce:b1:d2:0f:c8:41:93:
b5:89:c5:e3:fc:14:8e:3b:6e:24:3c:fd:0b:f4:3d:47:a1:c8:
63:4d:d4:e7:dc:37:37:3d:67:c1:c5:87:8b:dc:1a:0d:27:fc:
a7:32:a9:29:1b:04:d8:8f:d1:fe:56:8a:b6:07:d7:90:9b:c5:
56:33:2c:b4:d7:f0:4a:3c:cb:18:91:98:4b:0c:88:da:df:df:
e5:40:b1:3c:f9:7f:2e:5d:ee:6e:fa:ca:9b:d0:1d:98:3b:f2:
b2:dd:ae:f0:ae:47:72:15:41:d3:d5:25:e7:52:ba:35:d5:95:
1c:e7:c1:11:d1:ca:48:b3:97:59:ef:36:aa:2b:91:54:bf:ad:
6f:cc:91:3c:84:a8:38:ae:a2:e3:27:41:fc:db:28:2e:9b:45:
b2:c9:7a:96:6f:12:05:32:1e:34:68:45:06:45:4d:9b:06:3b:
3b:2d:05:1a:a5:46:1c:c6:ca:d6:9e:86:f1:8e:9d:31:93:1b:
b3:ab:ec:b7:ff:8b:88:b3:36:41:4e:94:6d:61:88:2d:1f:4f:
e0:2f:f7:19:58:90:1a:bd:09:2b:46:27:37:61:4f:7a:87:fb:
4b:c1:b4:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:05:12 2026 by rpki-client