Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
File: u_pCfUICOv2oiOhBX07c97ffGwU.mft (raw, json)
Hash identifier: UT2YYqLehqX6NxcsOoobO9BBEIvYMHugJTvi0KuL1mE=
Subject key identifier: 5D:BE:27:0F:9A:AE:C7:68:AB:C1:B8:D5:F9:54:60:C0:1A:C5:58:74
Authority key identifier: BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
Certificate issuer: /CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Certificate serial: 019D9773DD18051BD9D977FB2105B83B4183
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
Manifest number: 0B13
Signing time: Thu 16 Apr 2026 18:00:45 +0000
Manifest this update: Thu 16 Apr 2026 18:00:45 +0000
Manifest next update: Fri 17 Apr 2026 18:00:45 +0000
Files and hashes: 1: 1-hnniNiqKhghSmVXCidavYogegc.roa (hash: Jduthbq3o8EtI4RJz3qiljL6aUb5nGCPK55RrxKoNyI=)
2: u_pCfUICOv2oiOhBX07c97ffGwU.crl (hash: 9yygyKiQriIH8zWOGUxHmq0yoZmVazZe8HVHGAmsu20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 18:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:73:dd:18:05:1b:d9:d9:77:fb:21:05:b8:3b:41:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbfa427d42023afda888e8415f4edcf7b7df1b05
Validity
Not Before: Apr 16 18:00:45 2026 GMT
Not After : Apr 17 18:00:45 2026 GMT
Subject: CN=5dbe270f9aaec768abc1b8d5f95460c01ac55874
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7e:88:75:86:af:58:04:aa:a2:b6:a3:76:76:
96:90:a7:9b:a2:c2:79:35:a7:35:09:3f:91:7e:34:
57:77:36:42:b2:19:b8:e0:f1:ce:a2:5d:6d:4d:3d:
55:ca:c0:3b:ec:04:4d:39:89:53:7a:b7:c0:2d:e8:
38:e2:eb:e9:4e:fe:7f:f8:65:21:e3:1c:3c:63:2c:
51:de:df:7a:27:4a:3d:da:de:88:31:52:ad:73:81:
fc:0d:ce:21:77:9f:a8:74:60:19:1e:e7:cb:2a:e1:
b7:9c:95:ea:f5:60:1f:52:e7:13:06:cd:c6:99:c1:
0c:4a:71:95:73:a8:ae:61:0b:9c:08:8e:73:54:5a:
50:63:de:2e:24:18:27:9c:50:26:d5:c1:8f:f4:aa:
7e:41:9c:5c:86:8c:6f:aa:27:5a:0e:75:1e:5d:15:
a5:36:37:a9:2a:9b:77:dd:ad:52:cf:d2:84:a6:a1:
ad:58:34:47:91:f8:f2:41:e0:bb:4b:d0:cb:86:9e:
de:df:11:e4:14:a6:cf:8e:31:d3:11:a0:37:db:7e:
43:51:54:63:94:74:03:b8:12:4a:bb:6d:35:a2:fa:
e4:04:e0:76:9a:2d:43:d4:be:0d:56:d7:97:ee:a1:
94:57:ee:22:eb:d2:76:20:9e:c7:c8:ed:21:78:58:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:BE:27:0F:9A:AE:C7:68:AB:C1:B8:D5:F9:54:60:C0:1A:C5:58:74
X509v3 Authority Key Identifier:
keyid:BB:FA:42:7D:42:02:3A:FD:A8:88:E8:41:5F:4E:DC:F7:B7:DF:1B:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_pCfUICOv2oiOhBX07c97ffGwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/4a79a1-3d19-4de4-be89-8a200691f724/1/u_pCfUICOv2oiOhBX07c97ffGwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:aa:1d:e5:f0:a3:21:8b:c3:81:9e:33:16:9c:3e:5d:1b:c0:
8b:ec:00:eb:b2:a6:a1:31:ff:59:24:e9:98:61:ab:e3:eb:1d:
fa:4b:35:89:5a:e3:e0:db:84:69:88:a4:57:b9:af:8d:63:54:
85:c4:ce:6a:af:b2:a2:a8:7d:c5:5b:32:98:c8:04:b6:1b:fe:
6e:8a:80:6e:9d:11:e7:5d:f9:50:95:e3:64:8e:56:49:50:96:
0a:8c:1a:90:de:91:7b:c6:73:9a:3e:e5:2a:2c:9e:ad:ed:74:
6f:ee:75:58:69:da:41:3d:3a:69:24:39:2b:8f:ad:e9:f8:9f:
c8:83:ca:04:59:1a:1c:00:8f:9e:3f:dd:f1:fb:60:94:d6:1c:
dd:dc:d0:be:96:9a:f9:ad:90:56:4a:f4:81:ee:ff:ea:32:45:
8e:1e:76:99:e4:2e:7e:fb:29:24:e7:33:4b:11:71:41:5a:5d:
32:ea:82:f5:5d:3b:08:40:f7:e2:98:fb:e5:64:eb:22:3d:03:
34:42:00:fd:85:ed:10:65:02:30:36:9a:08:e3:27:ce:62:92:
cc:57:be:4b:ad:e1:09:68:0c:4b:97:a7:51:12:51:ac:14:f9:
81:02:a7:6e:a0:b8:7d:d1:40:89:19:98:3f:43:67:b6:d5:f4:
c5:3b:5f:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Xc90YBRvZ2Xf7IQW4O0GDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZmE0MjdkNDIwMjNhZmRhODg4ZTg0MTVmNGVkY2Y3Yjdk
ZjFiMDUwHhcNMjYwNDE2MTgwMDQ1WhcNMjYwNDE3MTgwMDQ1WjAzMTEwLwYDVQQD
Eyg1ZGJlMjcwZjlhYWVjNzY4YWJjMWI4ZDVmOTU0NjBjMDFhYzU1ODc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyH6IdYavWASqorajdnaWkKebosJ5
Nac1CT+RfjRXdzZCshm44PHOol1tTT1VysA77ARNOYlTerfALeg44uvpTv5/+GUh
4xw8YyxR3t96J0o92t6IMVKtc4H8Dc4hd5+odGAZHufLKuG3nJXq9WAfUucTBs3G
mcEMSnGVc6iuYQucCI5zVFpQY94uJBgnnFAm1cGP9Kp+QZxchoxvqidaDnUeXRWl
NjepKpt33a1Sz9KEpqGtWDRHkfjyQeC7S9DLhp7e3xHkFKbPjjHTEaA3235DUVRj
lHQDuBJKu201ovrkBOB2mi1D1L4NVteX7qGUV+4i69J2IJ7HyO0heFhgiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF2+Jw+arsdoq8G41flUYMAaxVh0MB8GA1UdIwQY
MBaAFLv6Qn1CAjr9qIjoQV9O3Pe33xsFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODkt
OGEyMDA2OTFmNzI0LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS80YTc5YTEtM2QxOS00ZGU0LWJlODktOGEyMDA2OTFmNzI0
LzEvdV9wQ2ZVSUNPdjJvaU9oQlgwN2M5N2ZmR3dVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6od5fCj
IYvDgZ4zFpw+XRvAi+wA67KmoTH/WSTpmGGr4+sd+ks1iVrj4NuEaYikV7mvjWNU
hcTOaq+yoqh9xVsymMgEthv+boqAbp0R5135UJXjZI5WSVCWCowakN6Re8Zzmj7l
Kiyere10b+51WGnaQT06aSQ5K4+t6fifyIPKBFkaHACPnj/d8ftglNYc3dzQvpaa
+a2QVkr0ge7/6jJFjh52meQufvspJOczSxFxQVpdMuqC9V07CED34pj75WTrIj0D
NEIA/YXtEGUCMDaaCOMnzmKSzFe+S63hCWgMS5enURJRrBT5gQKnbqC4fdFAiRmY
P0NnttX0xTtf7Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:22:44 2026 by rpki-client