Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
File: uakKhVIqpjnVeIL_2X2xpN2BELg.mft (raw, json)
Hash identifier: EhqnST28jLtjeb77+S6jj7fd5QHVXLsfjaeQvJGe+3c=
Subject key identifier: 48:85:3B:52:DC:25:C0:8B:FD:E8:0B:C8:4E:B7:F6:AB:5A:0D:8B:78
Authority key identifier: B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
Certificate issuer: /CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Certificate serial: 019DA52F5CBCE20D1DC01236B2FAC2BB1B8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
Manifest number: 0198
Signing time: Sun 19 Apr 2026 10:00:37 +0000
Manifest this update: Sun 19 Apr 2026 10:00:37 +0000
Manifest next update: Mon 20 Apr 2026 10:00:37 +0000
Files and hashes: 1: CsUMxPPZn7BWvRnMzKtwzumQlaI.roa (hash: s5cU5GsIZAY3fgBBTrdExxW/NI8apbM5B4zmDqtjvSE=)
2: q-jGore8m3Vj_5C7Ap3AXDg-4xE.asa (hash: ZNqsv7+pLU9fdFw+/1KeKKfY+X5+aMAfnSdQ+ZxMr4c=)
3: uakKhVIqpjnVeIL_2X2xpN2BELg.crl (hash: L5lUAgsRPadxxc27RWhxCfBCQnUCkP+KtXyBvoHZLKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:5c:bc:e2:0d:1d:c0:12:36:b2:fa:c2:bb:1b:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9a90a85522aa639d57882ffd97db1a4dd8110b8
Validity
Not Before: Apr 19 10:00:37 2026 GMT
Not After : Apr 20 10:00:37 2026 GMT
Subject: CN=48853b52dc25c08bfde80bc84eb7f6ab5a0d8b78
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:78:54:d0:ad:36:fb:9a:71:e8:82:1d:06:8e:
c7:52:59:8f:30:6f:52:e1:29:7c:4d:29:1e:e7:e4:
7c:a8:28:f5:b8:b8:8d:3f:6d:b5:00:62:cc:50:3e:
6b:48:90:34:af:a5:70:f3:41:d8:32:fb:48:ee:0d:
ce:b7:36:49:4d:a7:d1:cb:e1:fc:51:06:1e:f8:72:
e2:15:e4:45:63:8b:87:93:43:92:c7:9b:e7:ea:b4:
24:6c:ce:a4:6a:b3:ca:10:e1:4d:04:cb:f4:46:e9:
f1:e2:c4:c1:da:ac:52:3d:c5:16:ea:0c:13:48:d6:
3c:23:27:8a:30:bf:08:f5:c0:2a:81:bf:b0:3f:a7:
34:a8:71:41:ef:92:0e:ef:29:6a:c0:bb:d6:74:a4:
0b:8a:cd:83:20:f9:94:1f:ce:ed:15:59:09:a7:b9:
e7:aa:2c:21:61:33:33:c6:2a:61:bd:63:a9:3a:63:
39:36:b2:3e:21:63:62:95:31:97:2f:46:35:bd:92:
2f:50:b5:c5:84:bc:2f:c0:99:2a:46:e4:e5:66:3c:
15:d7:b5:85:0f:51:b4:07:d8:39:39:79:7b:f9:6d:
66:da:d7:26:74:d4:65:90:95:31:41:05:6b:c5:4d:
6b:55:a1:8a:ab:1a:e5:70:41:2f:de:d2:22:cd:49:
95:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:85:3B:52:DC:25:C0:8B:FD:E8:0B:C8:4E:B7:F6:AB:5A:0D:8B:78
X509v3 Authority Key Identifier:
keyid:B9:A9:0A:85:52:2A:A6:39:D5:78:82:FF:D9:7D:B1:A4:DD:81:10:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uakKhVIqpjnVeIL_2X2xpN2BELg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/cb7604-65c0-4998-a89c-59efc2a3b04f/1/uakKhVIqpjnVeIL_2X2xpN2BELg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:78:e4:85:a9:a1:c7:c9:cc:5f:34:19:6d:66:f8:b6:e7:11:
dc:22:a0:fd:1b:bc:0a:35:6f:7f:85:d1:7c:57:c8:9c:cf:69:
f4:2e:70:bc:ad:c6:b8:df:92:77:60:65:87:8d:bb:0c:1f:b9:
63:64:da:5d:57:fd:98:88:d3:17:92:57:a2:66:34:6d:dd:9c:
10:3a:f8:ef:02:b0:65:eb:f6:b9:82:a0:5c:e7:92:5b:0b:f7:
2f:82:a7:ad:b9:20:ed:72:9c:1c:84:a8:d2:72:3e:2e:ef:9f:
e6:dd:f8:26:9c:83:d2:eb:cc:ce:53:07:42:65:82:52:e3:36:
f6:cf:9d:74:a6:21:7f:b0:2d:7a:92:d2:01:8f:df:be:71:81:
60:a9:72:51:c8:21:69:43:54:56:66:e8:60:9e:30:f1:5a:5e:
44:74:e3:22:cd:60:97:5d:c8:60:8c:d0:d7:c5:ca:4d:01:66:
74:95:77:c0:60:4e:ed:6b:91:ec:0f:8a:70:8a:da:75:0e:38:
34:5f:ac:95:07:54:c3:38:50:2c:7d:cc:4f:0c:d5:8a:f3:86:
e0:ec:b2:ae:29:9c:40:2a:7a:18:21:5e:37:99:70:1d:00:2c:
eb:13:6a:dd:1b:59:44:82:22:27:e3:27:cf:79:f8:5e:e6:93:
b0:7d:0b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:45:12 2026 by rpki-client