Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
File: uytI9kNYARx4QtPOxcstRwaLg20.mft (raw, json)
Hash identifier: gnXyCUmFoGL5wcMBuPV5I3R94+Q51KRbQr8dUxyPFPk=
Subject key identifier: 5C:ED:34:79:0C:F0:6C:51:49:D8:41:B6:9A:08:1B:19:98:AE:1F:84
Authority key identifier: BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
Certificate issuer: /CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Certificate serial: 019D9AE3867CF8A5101675B7BC037D09C089
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
Manifest number: 18D5
Signing time: Fri 17 Apr 2026 10:01:35 +0000
Manifest this update: Fri 17 Apr 2026 10:01:35 +0000
Manifest next update: Sat 18 Apr 2026 10:01:35 +0000
Files and hashes: 1: NM07OftKQkCH2joVcvMTn-HHTmY.roa (hash: rU/LdGSeAxe5BfVN3XEqDaj1sPRpRHFtD8l5ShzGTNQ=)
2: kLGeIFwIepUgbnOKoqHRUYefBPQ.roa (hash: F4tTQgdXduDuBtHDnLeKsOpcxeDgSOzzu6aJ7AclprY=)
3: uytI9kNYARx4QtPOxcstRwaLg20.crl (hash: 8JyFMksOg3hex+0HmEQN9CFuIGS/Yyc/dw7DicISyoA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 10:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:86:7c:f8:a5:10:16:75:b7:bc:03:7d:09:c0:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb2b48f64358011c7842d3cec5cb2d47068b836d
Validity
Not Before: Apr 17 10:01:35 2026 GMT
Not After : Apr 18 10:01:35 2026 GMT
Subject: CN=5ced34790cf06c5149d841b69a081b1998ae1f84
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:f8:bf:bf:e3:e7:ec:f1:93:b2:d9:a1:d6:47:
f0:2c:44:cb:6c:ca:a2:18:c1:13:5b:8c:be:2a:1f:
22:99:7f:a3:b2:ba:36:a7:99:db:f8:8a:20:8c:62:
3f:4f:39:0a:c8:7a:4f:1d:45:6d:b4:cd:a1:1e:f1:
b2:8a:1b:a7:e5:6b:0d:4a:56:fa:0a:18:9c:fd:b7:
2f:0a:2d:97:5f:0f:a8:f1:24:a1:ed:5d:12:67:bb:
ae:ef:67:97:0c:0a:89:61:a7:c8:f3:cf:fd:d6:7e:
e3:79:04:70:d8:f4:a6:cf:a7:63:ec:f1:35:35:26:
e3:e7:65:ed:56:c4:6a:7f:dd:76:da:82:ad:39:87:
e2:1c:54:98:7a:c7:e0:92:ad:78:63:f5:a4:5c:ba:
cb:fb:fd:e4:0b:21:c8:a5:e6:03:97:68:30:77:c4:
c2:7b:47:e2:68:60:66:db:9c:a7:28:59:90:7c:58:
06:af:b0:49:03:c3:6d:8a:17:a8:f3:fa:5d:8e:37:
e8:4d:6a:51:8c:db:73:0c:28:0c:f0:ab:14:2b:f3:
85:c0:aa:58:3c:f3:85:6d:d6:96:bf:a0:37:0e:b5:
80:3b:92:c9:cc:ea:61:f5:98:a9:05:3a:07:05:cf:
4e:10:42:22:3c:a2:6e:a5:67:cc:06:e3:02:59:7b:
d6:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:ED:34:79:0C:F0:6C:51:49:D8:41:B6:9A:08:1B:19:98:AE:1F:84
X509v3 Authority Key Identifier:
keyid:BB:2B:48:F6:43:58:01:1C:78:42:D3:CE:C5:CB:2D:47:06:8B:83:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uytI9kNYARx4QtPOxcstRwaLg20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/f66b6b-cdde-40cb-a182-c5229863aeba/1/uytI9kNYARx4QtPOxcstRwaLg20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:a8:e1:39:39:c2:fa:a9:38:e6:27:34:b9:87:c5:f5:2d:b0:
6b:f0:43:70:a1:7a:91:4c:2f:e4:4b:cc:03:0b:c6:3f:1f:a0:
16:d1:5b:33:f2:30:16:4e:86:07:a5:88:b7:2d:57:fa:0d:51:
9a:a0:02:a8:b2:dd:fd:81:dc:7a:87:c8:ed:51:02:74:28:e8:
8e:57:42:e3:6a:56:49:6d:81:89:a0:f1:3a:72:1e:15:44:18:
e4:50:d1:bb:9d:62:77:fe:6c:55:a1:b8:df:83:18:80:5c:7e:
43:e4:5f:8f:35:82:cb:d5:3a:3b:e0:03:14:3f:b7:e7:f9:1f:
69:5a:05:b8:32:eb:04:b5:96:b9:5a:b0:91:94:1d:59:a2:74:
f6:0a:aa:98:1b:7d:34:a9:a9:92:08:3d:25:5a:fe:05:82:bf:
9c:1c:5f:f6:9e:86:7f:20:e6:82:1d:47:62:fc:fe:cd:4e:2b:
7e:56:36:a4:2a:77:b4:4c:ee:b2:2a:f7:4e:c3:83:84:9d:f6:
6a:58:7d:91:83:72:60:88:bb:9f:61:b3:a9:3d:7e:a3:45:9f:
d1:f1:0b:f2:24:b6:63:5b:f2:a1:d4:da:cb:cc:40:ac:39:6a:
88:43:d1:83:c9:4a:ab:2e:cf:ab:cb:f8:84:33:a2:41:1f:c8:
1e:6a:e0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:54:12 2026 by rpki-client