Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
File: UnksdxTtV0Vtc1XkoEubqL7VfkI.mft (raw, json)
Hash identifier: nEWx5X4+nxwK8Vf5KUuwMcs0/GfvBnTEry31cbHEfMk=
Subject key identifier: 96:79:5C:AC:2E:A7:81:FE:5A:1B:B4:50:C6:C3:70:71:DB:4B:D0:58
Authority key identifier: 52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
Certificate issuer: /CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Certificate serial: 019D99628CA068FFA61E04EA582477C2A6B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
Manifest number: 096F
Signing time: Fri 17 Apr 2026 03:01:05 +0000
Manifest this update: Fri 17 Apr 2026 03:01:05 +0000
Manifest next update: Sat 18 Apr 2026 03:01:05 +0000
Files and hashes: 1: UnksdxTtV0Vtc1XkoEubqL7VfkI.crl (hash: 3JfGmFKZNp4KhgzX2H6pmk8VdRVO8wSOTaQmtEfwGd4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:8c:a0:68:ff:a6:1e:04:ea:58:24:77:c2:a6:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52792c7714ed57456d7355e4a04b9ba8bed57e42
Validity
Not Before: Apr 17 03:01:05 2026 GMT
Not After : Apr 18 03:01:05 2026 GMT
Subject: CN=96795cac2ea781fe5a1bb450c6c37071db4bd058
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:65:d4:09:09:c9:f8:83:1b:7f:e0:43:75:ce:
db:fa:d8:66:53:2b:90:12:b1:b8:97:72:51:ba:41:
9a:c0:71:9d:6e:e1:bf:da:27:fb:8d:a2:c6:b4:b7:
0d:e2:43:ef:69:33:b5:6b:13:48:a7:b3:17:fb:fb:
00:81:7c:4a:e4:22:91:05:a0:59:4a:27:af:cd:a3:
7e:76:ab:a0:92:5e:6b:6b:15:ae:4a:e3:d7:cb:8b:
18:d1:98:6c:c1:8e:5c:de:f8:76:90:3b:17:d8:1b:
be:0d:b4:19:1b:c0:a7:a8:78:9f:df:ef:ba:c8:6a:
85:d4:e5:05:0c:39:73:97:cb:69:fb:07:00:f0:4e:
42:b0:d8:d5:50:44:58:34:55:5f:4f:1e:3a:83:e8:
a2:c9:f0:34:60:91:06:c1:49:61:57:60:05:44:dc:
52:e0:ed:91:e4:9a:04:b1:0e:ce:e3:c1:24:04:8a:
e5:12:34:3b:8b:42:4c:1e:57:6a:80:5b:93:94:dd:
bf:a3:99:b3:d3:86:b6:ed:4d:49:49:a0:18:eb:fa:
4e:da:95:fe:87:42:c7:8e:e2:ca:91:06:8f:f6:9c:
11:4c:e8:ce:8d:f2:51:e8:b6:9a:13:08:a5:23:24:
78:b4:ca:56:d4:cb:79:bf:dd:99:dc:e9:f8:55:f3:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:79:5C:AC:2E:A7:81:FE:5A:1B:B4:50:C6:C3:70:71:DB:4B:D0:58
X509v3 Authority Key Identifier:
keyid:52:79:2C:77:14:ED:57:45:6D:73:55:E4:A0:4B:9B:A8:BE:D5:7E:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UnksdxTtV0Vtc1XkoEubqL7VfkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/cda8b3-81eb-4cf4-b4c7-7bde2fd76382/1/UnksdxTtV0Vtc1XkoEubqL7VfkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:54:c9:91:04:49:49:38:54:de:3f:fa:3f:19:ae:a2:38:76:
9d:bc:0c:f7:c2:66:6c:93:03:53:f6:c8:00:b2:89:68:c5:c0:
b9:64:51:a4:bf:47:76:11:8a:96:89:83:6d:e0:3e:ec:e2:c7:
d9:0e:15:45:98:0a:7d:b3:4a:56:51:86:97:d4:9f:be:6f:51:
13:d2:1c:64:74:ff:d5:2a:92:9d:63:99:c4:72:5f:5b:9d:44:
34:19:f8:54:d8:b1:2e:94:74:32:e2:89:00:60:9c:90:ae:c3:
35:30:7a:e3:68:47:8b:8c:69:07:cf:93:2f:8b:96:58:13:cf:
74:5a:db:1f:45:63:32:b3:04:bb:76:30:79:8c:02:95:d9:30:
ee:05:55:0d:91:c4:f7:57:d3:4a:4c:c2:0f:31:8b:91:3b:82:
82:de:5a:c8:11:19:17:4a:34:44:36:87:a7:0a:1b:63:21:1f:
3a:80:f8:03:0f:e1:39:29:57:9d:3d:df:bd:4a:d2:47:c2:32:
a6:d6:c3:93:53:24:52:fa:ed:5e:31:d1:ee:b1:f1:aa:2d:c3:
18:d9:87:2e:ec:e0:cc:74:27:5b:d6:10:16:a5:11:05:8c:1f:
a9:7d:1d:a6:da:10:61:8e:76:a4:cb:29:9b:c9:1a:b1:81:23:
c7:cb:21:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:27 2026 by rpki-client