Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
File: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft (raw, json)
Hash identifier: ybltAFoV954hQCRYU8KLBD0Bo2qNSFb9t0UDcVDHNbc=
Subject key identifier: 82:5A:3D:D1:13:F8:06:1E:1B:A3:89:2A:43:3E:24:B3:93:6B:59:7B
Authority key identifier: 53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
Certificate issuer: /CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Certificate serial: 019D981884D5B7F5960AD625CC3BB1B491B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
Manifest number: 08A4
Signing time: Thu 16 Apr 2026 21:00:36 +0000
Manifest this update: Thu 16 Apr 2026 21:00:36 +0000
Manifest next update: Fri 17 Apr 2026 21:00:36 +0000
Files and hashes: 1: Tv0ULnXhuU-LX5lHMmtC4uXh3f8.roa (hash: G7sOuhUNSdG8wE7mvWF+cLqHad92elbdv/9zhXuTLxo=)
2: U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl (hash: X/JWg4p9WmIb/51/sJsd8sYRER4XOx08x2swQbyNbOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:84:d5:b7:f5:96:0a:d6:25:cc:3b:b1:b4:91:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53eaa19ca27a6f57f2cbb4e463720b436af17dea
Validity
Not Before: Apr 16 21:00:36 2026 GMT
Not After : Apr 17 21:00:36 2026 GMT
Subject: CN=825a3dd113f8061e1ba3892a433e24b3936b597b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:20:58:7d:b4:13:10:a1:9a:2f:1a:cf:88:88:
a6:0b:35:20:91:00:46:3a:c6:66:be:88:45:10:f9:
6e:64:be:e9:14:4f:40:4c:2c:cb:e5:12:ad:13:b3:
81:87:cb:8b:05:9d:b3:e8:73:24:3d:83:d1:ac:21:
2b:f6:bb:19:cf:e5:11:b3:0e:94:6b:d9:94:3c:29:
8c:5a:2b:62:52:d1:db:75:0d:84:e8:32:16:58:b8:
a9:6b:4a:5b:21:bf:de:e3:9d:2e:32:ce:07:51:a8:
4d:af:cd:0e:88:d3:10:b6:9a:35:41:99:07:a0:df:
0f:0b:d3:fe:1b:39:d6:37:a7:44:d2:ba:ca:2f:da:
b5:11:c9:1b:73:8f:89:d1:fd:45:b8:bb:fc:ae:eb:
37:74:01:ec:4e:38:c4:02:2f:b3:85:a7:24:5b:54:
65:83:3a:93:f1:f6:d2:29:e5:03:de:a8:bc:fc:8f:
83:15:ab:cf:19:3d:34:a1:8c:a4:1e:06:05:6d:dc:
f3:0a:d0:a1:b1:bb:1b:9c:5d:91:f2:29:8e:a1:f0:
5e:7a:18:ec:02:7c:97:5d:0f:92:7d:7f:2e:bd:30:
cb:f8:e9:18:09:5a:b6:a2:44:0a:df:85:61:ea:75:
81:a9:3c:ff:97:d7:62:c9:e9:b3:35:10:48:f2:80:
5d:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:5A:3D:D1:13:F8:06:1E:1B:A3:89:2A:43:3E:24:B3:93:6B:59:7B
X509v3 Authority Key Identifier:
keyid:53:EA:A1:9C:A2:7A:6F:57:F2:CB:B4:E4:63:72:0B:43:6A:F1:7D:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/0d3b2b-e304-4d61-b6d0-27e8f4f1c684/1/U-qhnKJ6b1fyy7TkY3ILQ2rxfeo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:e6:82:4c:7a:2c:40:a0:9b:43:60:9e:3a:60:28:0d:90:b2:
1d:7d:6d:5d:f0:2a:be:07:fb:79:26:f3:66:4b:87:76:db:0a:
2a:8a:11:93:8c:0c:99:92:bb:c9:88:3e:50:a7:f1:17:ff:48:
b1:af:60:22:70:03:b6:6b:e2:c5:3f:1b:b7:7b:16:bb:c6:ba:
42:aa:7e:de:ed:98:50:7f:cc:02:1a:e4:b8:b5:35:1a:cb:57:
a4:62:bf:3d:27:7f:25:f7:9a:7f:e8:3f:09:76:34:cf:4f:98:
fe:09:74:f3:da:e7:a8:5f:28:4e:92:24:16:16:f9:dc:bc:56:
48:1c:da:7c:ae:a2:fe:8b:90:61:ce:8a:e5:67:f2:34:ec:34:
15:2b:9e:2d:f3:e6:a7:1a:4c:ba:65:97:6c:e2:39:08:4b:1b:
45:96:36:62:08:4b:1a:f8:2f:9e:92:3b:6a:3b:6b:40:b7:99:
ff:bb:58:a9:56:ba:77:c3:c3:36:d0:ef:02:d8:37:d3:c6:71:
f4:7b:f0:6c:aa:9e:b9:c3:02:17:0d:02:92:db:6b:49:49:eb:
f6:bc:9d:ff:a5:02:74:28:a3:94:1b:4e:bf:f9:a7:91:80:5a:
26:a5:84:e1:3d:78:e5:d2:0a:b1:a6:8f:6b:18:90:8b:42:ed:
1b:2b:3b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:49:21 2026 by rpki-client