Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
File: Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft (raw, json)
Hash identifier: N5SERx57jKb0zvUB0jC2XF0GgaNbi+ZiB0QCZ/L/cP4=
Subject key identifier: E1:43:D3:54:D9:D4:93:1C:23:10:F5:2B:61:4C:80:BA:74:9E:10:B3
Authority key identifier: 53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
Certificate issuer: /CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Certificate serial: 019D992B7405684C1117B19DD16C39CB93E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
Manifest number: 0A7E
Signing time: Fri 17 Apr 2026 02:00:54 +0000
Manifest this update: Fri 17 Apr 2026 02:00:54 +0000
Manifest next update: Sat 18 Apr 2026 02:00:54 +0000
Files and hashes: 1: 9F2eSvzEg-NwJPxH3jLBMFwvvso.roa (hash: 1nmqFaGNPZFiIGtm1pYBrJj5MMAV9XVtAtKjbh5pTPc=)
2: Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl (hash: hYMe8MNhykWuDwx7n461YdVnFL+Jw4q+YWeVsBEHhSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:74:05:68:4c:11:17:b1:9d:d1:6c:39:cb:93:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=531d55a869f105af6abcdfa0ca406af1f49b24f1
Validity
Not Before: Apr 17 02:00:54 2026 GMT
Not After : Apr 18 02:00:54 2026 GMT
Subject: CN=e143d354d9d4931c2310f52b614c80ba749e10b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:48:cc:91:71:11:02:dd:6c:a1:53:54:e9:66:
9a:55:75:58:10:ed:ea:bc:94:c2:61:f7:ed:2a:49:
fe:c7:a0:54:07:39:c8:57:2d:a1:ea:c2:3e:a6:4a:
d6:d5:88:f4:a4:8e:39:6b:71:c7:76:07:ac:45:e6:
f2:95:19:19:d6:6e:ad:9a:fd:98:61:39:78:56:4e:
b4:48:30:aa:59:b5:fe:1a:5e:e7:d1:b9:c6:73:8f:
6f:7c:d8:36:d5:73:f4:86:08:85:c2:4e:95:c8:a5:
60:89:f2:7e:31:86:15:06:8b:2b:00:f5:c8:eb:1f:
45:8e:31:51:71:60:66:0b:3f:20:24:67:3b:9c:e8:
ee:0b:48:38:05:06:4d:c4:6f:1a:2a:55:8f:c8:95:
56:7c:78:b3:8e:a4:68:39:31:fe:5a:8e:17:ff:fb:
ca:e9:3b:82:cd:60:51:3f:3e:ad:10:42:19:11:69:
3a:8c:49:0d:c4:e9:7b:46:6d:63:c6:25:c0:56:cf:
31:14:ce:c1:c3:66:d7:a8:af:f5:93:b3:f2:f3:30:
b2:ee:83:8b:07:77:c7:12:0d:d5:c0:a9:58:63:65:
1b:6d:e3:b9:6d:ac:37:1a:f0:03:a3:f0:cd:b6:0a:
47:6f:f1:61:20:4b:d5:70:d9:42:c1:48:de:f1:bd:
f1:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:D3:54:D9:D4:93:1C:23:10:F5:2B:61:4C:80:BA:74:9E:10:B3
X509v3 Authority Key Identifier:
keyid:53:1D:55:A8:69:F1:05:AF:6A:BC:DF:A0:CA:40:6A:F1:F4:9B:24:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ux1VqGnxBa9qvN-gykBq8fSbJPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/eec2cd-36de-4f96-9fb2-4dc1ef89044b/1/Ux1VqGnxBa9qvN-gykBq8fSbJPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:6d:07:86:b3:d2:7a:9e:ff:94:32:9a:a4:e9:d8:8d:e7:53:
2b:89:d4:3c:af:05:7c:f3:ed:0c:eb:76:35:4c:2d:ea:e0:57:
96:c9:15:b4:85:80:c3:1d:78:56:d4:c6:2b:01:a4:ac:52:33:
02:cb:1a:e8:c8:7e:e7:39:0b:bc:4b:67:48:38:ea:51:5d:0a:
15:77:36:fa:55:60:f9:d4:37:60:3a:5c:ef:05:bc:35:e9:e0:
c3:dd:a3:f7:df:ce:9e:2c:65:36:c5:32:4a:79:90:01:f4:88:
19:fb:04:2f:7c:42:05:99:d3:f9:57:e6:10:70:1d:fc:cd:32:
ea:79:91:c0:f2:15:56:90:21:be:04:f2:95:e7:12:1f:7e:64:
b7:27:2f:84:19:57:12:07:8f:62:0f:73:03:1a:c6:48:bf:90:
d0:48:12:f1:a0:62:6c:5b:9a:24:ab:a6:d3:60:22:0f:af:ca:
b6:06:37:5b:70:15:11:8b:be:98:d9:3c:99:a7:05:d2:42:cc:
5d:76:27:e0:46:f6:d9:e6:6d:a7:40:75:3f:ba:17:bf:6f:91:
09:93:cf:24:7c:9e:dc:62:6f:c8:7f:17:27:ca:58:4a:63:d0:
1e:af:b2:bb:54:6d:34:fb:fd:65:83:05:1f:05:5e:9e:b6:48:
58:2e:09:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:36:44 2026 by rpki-client