Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
File: i_UbRkYUeZl2V31e96gHjqgMF0M.mft (raw, json)
Hash identifier: J/a6PWvmauuluWEyjsFFHDXA0zrpw1ZvMzhdQWLaa8g=
Subject key identifier: 2B:8A:D7:9E:4F:2C:DB:D4:B5:7A:36:74:9C:5F:E7:27:5E:2E:01:4E
Authority key identifier: 8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
Certificate issuer: /CN=8bf51b464614799976577d5ef7a8078ea80c1743
Certificate serial: 019D9998EE030CFAFB26BD797FE91807BAC9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
Manifest number: 07AE
Signing time: Fri 17 Apr 2026 04:00:29 +0000
Manifest this update: Fri 17 Apr 2026 04:00:29 +0000
Manifest next update: Sat 18 Apr 2026 04:00:29 +0000
Files and hashes: 1: i_UbRkYUeZl2V31e96gHjqgMF0M.crl (hash: xFDb99u5IgDGYIpLI/Zi8zfzGZtfZOEt9BoQJfd8kOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:98:ee:03:0c:fa:fb:26:bd:79:7f:e9:18:07:ba:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bf51b464614799976577d5ef7a8078ea80c1743
Validity
Not Before: Apr 17 04:00:29 2026 GMT
Not After : Apr 18 04:00:29 2026 GMT
Subject: CN=2b8ad79e4f2cdbd4b57a36749c5fe7275e2e014e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:15:58:9b:ed:bd:18:36:2e:2d:2c:d7:57:05:
a4:4e:3e:ad:cb:63:7b:05:60:d2:2b:0a:3e:c1:c0:
b0:e2:ed:72:74:24:51:e9:7e:bc:09:b6:5e:56:9f:
5f:84:c0:4a:a4:fd:5b:a9:11:a7:4f:58:f5:7c:18:
b8:65:67:7c:53:85:a8:31:a7:aa:ff:2a:81:46:5d:
f9:e9:33:bd:a2:57:7e:a0:98:01:17:fa:1c:5a:e6:
2e:db:65:35:6c:26:63:dc:7b:3e:dd:1e:64:47:db:
28:bb:57:ee:7d:3e:ad:f2:1f:8e:14:96:4e:09:cc:
49:15:80:44:31:7f:3d:61:e0:15:9a:c8:98:88:6c:
8b:dc:3a:b4:98:9b:90:5c:76:c3:11:66:7c:65:5f:
00:52:5f:8f:55:cb:68:82:07:08:b1:51:a1:4c:f1:
b9:97:13:c0:f5:74:4c:20:8e:1f:14:fc:93:07:80:
ea:c4:37:f5:ee:33:5b:86:0f:5e:b6:a0:c4:67:4c:
cd:f0:50:8c:30:bd:f9:cf:33:42:40:bf:7f:83:de:
d7:5a:cc:01:fc:ce:01:cc:f3:9f:87:28:97:93:64:
f3:1c:10:50:e3:46:c4:cd:b7:5a:e9:ce:d2:ce:c7:
73:22:71:4d:ad:91:86:c6:8f:29:2e:f4:e8:25:3c:
c4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:D7:9E:4F:2C:DB:D4:B5:7A:36:74:9C:5F:E7:27:5E:2E:01:4E
X509v3 Authority Key Identifier:
keyid:8B:F5:1B:46:46:14:79:99:76:57:7D:5E:F7:A8:07:8E:A8:0C:17:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i_UbRkYUeZl2V31e96gHjqgMF0M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a38d1e-2b05-49ac-b4ec-d0d313520431/1/i_UbRkYUeZl2V31e96gHjqgMF0M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:65:b1:30:ba:6c:c2:ec:b7:a5:82:e2:9d:bb:ef:0b:e8:d5:
df:8c:fa:ac:78:f4:42:7b:c2:f9:7e:b4:16:8f:c5:6e:53:08:
c1:19:ed:f9:db:39:c5:f0:02:65:f3:59:49:8c:c1:92:8c:91:
62:2d:bd:03:ad:f5:fa:6c:6a:0f:30:84:32:73:a1:d5:02:23:
a4:7a:60:bb:30:18:2e:77:63:56:2d:5e:81:a5:99:96:a0:20:
31:92:4e:39:da:a1:87:b4:e5:47:81:28:82:83:43:fc:d2:b2:
a9:67:3d:cf:be:50:9e:35:4a:53:b6:68:36:b4:e7:1b:d8:f9:
37:3a:44:3d:1c:07:fa:e2:15:fe:ef:d5:a7:c3:d9:0b:7b:ee:
ea:64:c9:e9:60:d6:75:15:c9:1f:0c:89:31:ca:1a:a2:e2:b7:
58:8b:da:6d:e1:ce:2c:7e:52:53:47:f7:f9:dc:c8:61:2c:b0:
d3:d8:b0:ac:66:82:ef:a9:3f:47:74:9d:7e:44:02:44:3c:4c:
17:32:5f:66:f1:7c:02:26:a6:eb:5d:4b:14:a0:7d:4c:24:9b:
c7:e7:a6:c3:4b:ce:c6:6c:fa:cc:25:ed:78:6b:b7:19:2c:67:
aa:40:cf:06:72:7a:c6:6b:bd:9e:30:8b:f4:3e:8a:e6:9f:20:
53:4e:b8:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:59 2026 by rpki-client