Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
File: UF4vLV5wk_-NQAOgK30-ExznChI.mft (raw, json)
Hash identifier: gWLt2GC6qI/74+IrX2cwG22ETQqYk6c5JWW5va++8wQ=
Subject key identifier: CF:32:E5:DC:51:E9:DD:23:CA:DF:72:9A:2C:69:58:00:38:6E:7D:F0
Authority key identifier: 50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
Certificate issuer: /CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Certificate serial: 019D9B8777B1115BDFF896AD76FCBC4B3595
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
Manifest number: 0F52
Signing time: Fri 17 Apr 2026 13:00:39 +0000
Manifest this update: Fri 17 Apr 2026 13:00:39 +0000
Manifest next update: Sat 18 Apr 2026 13:00:39 +0000
Files and hashes: 1: BBEExDLi9wN2ArwpnoUathyZ5G4.roa (hash: DNC51vwYFelu0Iw03W6o2j0OpPGTm67rvC5dlIgn/R0=)
2: B_hvqyRv6JLmJCV1iTWTImKLqvw.roa (hash: TWMSz8xRjNA5aPk12IuqB7yBAlzSjyaKWTWQ7yxehNE=)
3: UF4vLV5wk_-NQAOgK30-ExznChI.crl (hash: yUX2KZnrXdZf6vChfz0z2PC6qhwkJqI7PRl+ObU9Wck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:77:b1:11:5b:df:f8:96:ad:76:fc:bc:4b:35:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505e2f2d5e7093ff8d4003a02b7d3e131ce70a12
Validity
Not Before: Apr 17 13:00:39 2026 GMT
Not After : Apr 18 13:00:39 2026 GMT
Subject: CN=cf32e5dc51e9dd23cadf729a2c695800386e7df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f4:a0:52:0c:94:e2:ea:c9:98:c6:f8:45:fd:
14:59:e1:cf:2b:7c:93:f2:87:9b:69:e0:21:50:fd:
b8:19:2f:cd:81:4f:96:d1:a8:95:43:db:62:3a:e7:
5f:42:bb:05:81:3e:5a:39:72:68:b9:2a:78:9a:a7:
0a:65:d1:39:e6:39:ae:a2:c2:36:ef:49:f4:20:9d:
71:a6:f6:cf:f3:de:e7:30:fe:3d:da:ce:64:0c:33:
42:83:01:b7:ba:55:62:a9:33:fb:b2:50:f4:14:2d:
28:3c:03:a9:9e:d0:ca:b2:47:8d:bd:15:66:88:72:
f3:28:4b:6e:1a:05:af:d7:c5:3e:48:7e:98:69:36:
70:30:3b:7a:5e:a9:be:b9:81:34:e7:86:04:2d:92:
32:b5:a6:87:33:cb:47:53:65:c9:eb:73:64:b8:4f:
93:81:45:3b:2d:0a:e9:be:80:d5:18:a6:bd:c2:90:
28:34:8d:3c:84:38:fd:88:75:41:b4:7d:58:7d:57:
d5:a4:83:cd:a4:89:22:7d:19:07:5b:6b:43:37:d8:
c5:99:82:e3:2e:dc:a0:bc:7a:dd:51:5f:92:84:c7:
48:84:12:40:5a:86:4c:02:ec:4f:c1:c9:6f:3b:f1:
e2:1e:8b:7d:16:7e:1b:77:11:cb:26:7e:aa:7b:07:
f1:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:32:E5:DC:51:E9:DD:23:CA:DF:72:9A:2C:69:58:00:38:6E:7D:F0
X509v3 Authority Key Identifier:
keyid:50:5E:2F:2D:5E:70:93:FF:8D:40:03:A0:2B:7D:3E:13:1C:E7:0A:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UF4vLV5wk_-NQAOgK30-ExznChI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5a7731-ef54-4501-86f4-98e9e2510bb6/1/UF4vLV5wk_-NQAOgK30-ExznChI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:5c:ed:f5:79:72:31:fa:54:90:cd:c4:03:08:84:35:92:dd:
9a:cf:cc:e2:03:01:46:77:ec:e0:b2:3e:17:4e:a2:c9:52:c7:
4e:5b:f4:a5:dc:d4:09:10:c9:7d:4c:32:e9:a9:c0:53:8d:08:
f7:b0:6e:c8:50:a7:d4:a1:2a:80:8a:a6:df:8d:d6:be:e8:ea:
56:4a:cc:e1:f3:54:8c:d3:c8:72:aa:91:5a:30:89:e6:90:de:
8c:e9:c3:6c:20:86:b2:ee:cc:f8:ae:48:e7:24:a8:ea:af:59:
27:e8:ea:23:65:22:c4:fe:c6:3f:a6:8f:70:33:4c:17:1a:f3:
e3:4e:8c:35:79:5d:30:84:95:4c:82:c0:71:06:fb:8b:df:e9:
b2:52:b0:d0:5b:54:f6:00:5e:1e:9f:f5:4f:5b:dc:b8:e3:7e:
25:15:83:06:7a:9a:ab:94:2c:89:31:62:9e:9f:5b:10:b3:24:
ba:0a:04:d9:38:31:ce:aa:a4:9f:82:09:05:6a:4f:80:16:d8:
b0:19:e3:59:7f:b9:f2:81:1f:0a:97:66:21:c8:cd:97:6e:81:
86:23:45:3d:b1:3e:d6:d0:1b:eb:42:29:4f:3a:52:14:23:ee:
76:be:5b:64:e1:49:29:11:e2:6b:bf:e4:30:90:09:95:2c:b6:
8c:e9:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:40:46 2026 by rpki-client