Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
File: U1UECuknhr8XJ7a07MEJO4p0Aes.mft (raw, json)
Hash identifier: mjnjNRuT6QPCdqPatM3uWJ2qdY91AGB21u6RSB/vuR0=
Subject key identifier: FA:A9:1B:44:95:FF:C3:2A:BD:17:4F:6D:39:80:59:A3:56:3C:47:6A
Authority key identifier: 53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
Certificate issuer: /CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Certificate serial: 019D992B612FFBA0A8174BB1D176BC76E93F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
Manifest number: 0D24
Signing time: Fri 17 Apr 2026 02:00:50 +0000
Manifest this update: Fri 17 Apr 2026 02:00:50 +0000
Manifest next update: Sat 18 Apr 2026 02:00:50 +0000
Files and hashes: 1: U1UECuknhr8XJ7a07MEJO4p0Aes.crl (hash: gRiHqYPXF/3HXXOm8u3uTc5N79F9j0AptaffB18uUxQ=)
2: hb1tf1cv2DqeNoOeMed75lCHkr0.roa (hash: 2osj3Tca5M4y8jWIziarmiD4CXLpdYxZP6w7GJCWBu8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:61:2f:fb:a0:a8:17:4b:b1:d1:76:bc:76:e9:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5355040ae92786bf1727b6b4ecc1093b8a7401eb
Validity
Not Before: Apr 17 02:00:50 2026 GMT
Not After : Apr 18 02:00:50 2026 GMT
Subject: CN=faa91b4495ffc32abd174f6d398059a3563c476a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:60:cf:ff:55:52:53:02:80:97:4d:fa:cb:d2:
54:4e:dd:db:77:73:7c:20:f4:c6:4e:b6:30:03:c8:
db:59:7f:ae:9d:fd:7a:ad:fb:27:11:59:2e:26:f5:
f5:c7:08:ca:4f:af:e7:52:07:fd:13:fb:f3:3e:76:
52:b6:d5:51:a5:7b:f6:b3:4e:e0:28:c4:e7:de:c3:
f1:1c:b8:14:1a:ba:9b:c0:07:a8:a2:e9:6d:32:0b:
8d:44:9a:d3:4b:99:be:f0:92:67:14:c2:6c:25:24:
00:cd:2d:c3:75:31:65:0b:92:16:bb:76:6f:18:a3:
bd:d6:37:7a:97:f0:81:7e:2b:6b:7a:29:92:91:54:
87:c2:e2:cd:40:2e:ae:86:d6:40:cb:c5:69:33:6f:
15:d8:e1:82:6e:3f:01:da:f0:bf:0d:0e:1a:b7:16:
a8:bd:ad:c8:aa:90:98:4b:ae:33:35:eb:39:47:90:
97:86:1a:23:44:39:c4:1f:95:f7:fd:f5:2a:ca:36:
f0:2f:a3:45:c8:6e:a1:da:44:ed:a8:e3:01:be:22:
5d:ae:0b:1d:82:5b:a8:24:4c:67:9b:3b:5b:80:2d:
7b:c6:24:5e:34:8c:31:0a:84:3e:90:ce:00:b7:7b:
54:6d:4e:82:c7:21:50:05:1b:4b:5e:1c:8d:29:d4:
f3:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A9:1B:44:95:FF:C3:2A:BD:17:4F:6D:39:80:59:A3:56:3C:47:6A
X509v3 Authority Key Identifier:
keyid:53:55:04:0A:E9:27:86:BF:17:27:B6:B4:EC:C1:09:3B:8A:74:01:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U1UECuknhr8XJ7a07MEJO4p0Aes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/af5657-c8b2-4855-82a7-1dd57e3f3d97/1/U1UECuknhr8XJ7a07MEJO4p0Aes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:3a:8b:b0:b1:ad:20:0d:1c:0c:9c:0a:91:7d:4c:4a:f6:c5:
2c:18:7d:cd:07:0b:2e:1c:60:61:9f:97:52:b7:05:2c:ca:8b:
15:ae:2e:8e:08:f6:ef:9d:60:10:13:50:18:7b:15:d7:1f:e9:
14:a5:34:a3:f3:bd:72:0b:e2:c0:90:71:15:3e:dc:88:dd:61:
cd:00:ef:d4:1b:c7:66:81:03:ae:11:40:1b:e0:26:2a:6b:3d:
a7:d9:c3:1b:1f:da:88:88:33:84:37:bc:82:0c:0c:31:fb:19:
01:cb:93:99:6f:67:1c:08:e5:18:11:5a:de:9d:6a:67:90:b8:
b2:db:61:be:0e:2f:97:ce:d0:4e:fb:09:45:54:7e:60:10:42:
42:ed:3c:fe:ff:a9:5e:82:5e:d2:e3:fe:af:7c:15:6c:e5:15:
8e:c6:45:d3:65:d6:4d:f0:7a:5d:c1:6e:bc:c5:74:7a:69:89:
ec:a9:dd:79:59:af:6e:5d:a7:0f:6b:d3:57:24:85:4e:cc:ac:
99:9e:06:05:e3:31:b2:4d:34:04:fd:8e:36:65:ce:be:12:fa:
c1:88:5c:9e:12:da:55:f7:50:d2:39:f2:6f:c0:b4:af:15:64:
db:c7:d7:5f:19:00:99:e6:7b:42:d1:1a:6e:f8:6d:fc:7c:76:
c6:96:1b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:50 2026 by rpki-client