Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
File: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft (raw, json)
Hash identifier: WzqmUbQXjT9bBwYN5EuZQ6V+8fIY4uNFpdovKdfx7EA=
Subject key identifier: AF:68:EA:21:CF:D2:2A:88:CA:51:8C:8B:52:27:B1:AE:E0:45:69:C0
Authority key identifier: 53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
Certificate issuer: /CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Certificate serial: 019D9BBE7010A9502420192D16610135395C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 14:00:42 +0000
Manifest this update: Fri 17 Apr 2026 14:00:42 +0000
Manifest next update: Sat 18 Apr 2026 14:00:42 +0000
Files and hashes: 1: 7pmNInk-dCH6WsuaRDxg2ILy8pg.roa (hash: 2m1FS9YMqm9NTE7E4KU6Pg9M6MzDGeacr6q3JFeGbKM=)
2: U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl (hash: NwgJDNcSBGG/b15S4JIWSOsvYZHIZaOISj4INzZDPdU=)
3: t_7IHQAUEyaUbl5DxXVWHE2bbGE.roa (hash: a851GGpE/WvCnOovf5sLJTvqxcyYbrGtDw0UsU9RPPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:70:10:a9:50:24:20:19:2d:16:61:01:35:39:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d9c969675a27d515d8fab2c63cde0ed056491e
Validity
Not Before: Apr 17 14:00:42 2026 GMT
Not After : Apr 18 14:00:42 2026 GMT
Subject: CN=af68ea21cfd22a88ca518c8b5227b1aee04569c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b4:a8:81:03:96:91:f8:12:44:db:9b:3e:0b:
ea:17:8f:0b:a8:d9:53:96:d2:f1:02:f0:7d:e8:58:
4c:07:66:18:24:36:ed:6a:c7:20:17:67:67:5d:34:
e9:58:32:27:86:d1:22:fc:ee:bc:a1:78:15:59:a1:
b0:76:be:4f:6a:01:1e:14:ff:cb:92:39:ef:3c:f5:
fe:e8:2b:5e:5d:a4:cf:94:87:a4:d4:4b:56:36:cd:
e9:52:15:30:55:22:a6:2d:e8:d0:35:d1:58:1b:b0:
94:8d:6b:c0:31:18:c6:8a:18:f0:f6:0c:24:1f:2c:
83:5b:79:af:18:69:27:34:81:62:16:f4:a3:5e:63:
bb:29:87:37:46:00:21:9d:72:7e:e7:f1:d2:45:d0:
b8:73:68:72:a1:b6:cf:8f:75:30:b0:80:ce:08:86:
98:13:12:88:21:1b:09:f9:7c:e2:50:d1:81:a7:20:
85:bd:1b:41:2f:1d:fe:c4:a0:65:35:95:2b:5c:e5:
e2:e5:99:35:cf:6b:39:d2:6c:5a:fd:1b:14:84:5a:
a0:af:ec:a5:8d:09:bf:c3:10:c7:4b:f1:80:fd:22:
59:47:05:7d:fe:43:8b:4b:8a:a3:e8:c0:a3:b1:91:
2d:c8:d7:ce:4b:8d:4c:89:df:fe:05:1b:3f:61:bc:
c4:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:68:EA:21:CF:D2:2A:88:CA:51:8C:8B:52:27:B1:AE:E0:45:69:C0
X509v3 Authority Key Identifier:
keyid:53:D9:C9:69:67:5A:27:D5:15:D8:FA:B2:C6:3C:DE:0E:D0:56:49:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/99107a-3b1b-4b5e-ae15-f95c60b466a0/1/U9nJaWdaJ9UV2PqyxjzeDtBWSR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:d6:9e:d3:1c:13:4b:40:48:48:eb:1f:b7:03:ae:ae:ff:75:
38:4d:7a:9b:89:c8:ed:6e:f2:fa:77:e2:58:9f:b4:6b:3f:d9:
05:06:ca:7b:ca:ca:3f:41:1f:bb:a0:6c:41:18:f2:be:b3:4a:
af:d5:11:66:ee:b7:6d:30:3f:45:79:d1:b0:ce:41:10:da:74:
19:10:99:a2:06:f5:3f:c0:19:88:ab:15:78:42:d5:77:cb:fc:
ec:c0:ad:87:64:b1:92:7f:cb:2f:5b:a7:00:15:59:b7:32:ae:
7e:2c:db:8b:f3:95:6a:95:d6:a3:9e:dd:8f:4f:35:ee:aa:55:
03:01:f4:d0:74:0a:26:d6:55:6c:fe:e5:20:7e:06:a4:4f:dd:
26:18:9d:ac:b4:ee:64:67:a4:11:77:61:0e:1b:91:2c:d9:2a:
07:8a:cf:17:87:bc:05:1f:ce:24:d1:10:93:1c:6c:ce:37:a6:
c3:8d:fa:ef:cf:86:40:a1:cc:9e:ae:39:44:6e:4c:9d:0d:ab:
14:67:ce:fe:c9:9e:41:0d:62:f0:ad:30:d8:0b:10:b0:d3:62:
94:f5:76:ab:bf:43:13:b4:d6:bb:9e:e4:1f:22:52:a1:a0:7e:
eb:27:83:d1:0b:20:47:2e:ad:c9:78:25:6e:c1:9d:09:29:22:
5c:23:15:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:18 2026 by rpki-client