Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
File: u44vWsfL5iEX2keKwMAnrW2EPFY.mft (raw, json)
Hash identifier: hf3ETxLssoczOTJQIuZR08XjK4ohouF/HYirg74WtWA=
Subject key identifier: 40:60:22:5B:BF:57:EA:3B:4D:6C:18:CC:34:09:14:DE:9C:7C:46:25
Authority key identifier: BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
Certificate issuer: /CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Certificate serial: 019DDA3031774E5CC19D8F1963BA2792D7E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
Manifest number: 18E4
Signing time: Wed 29 Apr 2026 17:01:24 +0000
Manifest this update: Wed 29 Apr 2026 17:01:24 +0000
Manifest next update: Thu 30 Apr 2026 17:01:24 +0000
Files and hashes: 1: EK98MbFFSSPIZHcJY-ZW_UF_ED0.roa (hash: Ug1DIE2wtnkuxo6OV5HarCRpdJ5eCoWMxa7DhgeBQVc=)
2: u44vWsfL5iEX2keKwMAnrW2EPFY.crl (hash: qJxBm3e6pKjoJuDJDYzzKgFlLBbWKveA1UnR02k3qnE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 13:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:da:30:31:77:4e:5c:c1:9d:8f:19:63:ba:27:92:d7:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8e2f5ac7cbe62117da478ac0c027ad6d843c56
Validity
Not Before: Apr 29 17:01:24 2026 GMT
Not After : Apr 30 17:01:24 2026 GMT
Subject: CN=4060225bbf57ea3b4d6c18cc340914de9c7c4625
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0c:c9:96:06:b3:b0:67:ae:4b:68:b7:11:2f:
73:a4:e4:f9:df:e0:96:0f:b9:10:c8:01:e5:28:a8:
15:e6:38:1a:fc:ea:c7:89:7f:bf:9c:89:88:2e:92:
96:10:44:43:ca:eb:cc:7d:43:14:26:a7:6b:f2:38:
e6:9f:e2:2f:e0:ea:5f:7a:86:6b:3b:3d:08:a4:4c:
10:d7:08:29:33:d3:55:59:d5:76:78:32:90:37:92:
36:a1:ff:03:ba:02:d9:9f:cf:d0:a2:91:ae:f8:8b:
d4:66:27:ea:ff:93:b1:89:4d:97:00:5c:24:01:e7:
8d:48:74:c0:38:4c:b2:24:cf:89:75:25:e0:da:63:
cf:3e:01:1a:6d:7e:9d:49:6b:3e:c6:e6:6f:d3:6e:
ad:1b:b2:65:11:bf:41:97:43:2f:f2:c5:bf:1a:22:
8d:ed:0c:db:a8:bb:c6:9b:9d:7d:7e:de:da:b8:aa:
6a:5a:78:49:fb:9c:8d:9f:a8:09:64:c1:3a:cf:95:
0c:32:af:60:55:63:95:e8:e1:0a:10:9f:fc:1b:b2:
d8:05:8a:6e:65:a7:b8:ea:3e:b1:ae:df:51:83:74:
4f:c6:99:89:47:87:c4:c0:ba:8a:0b:59:d2:e6:c4:
8e:b6:72:04:8b:b1:76:3c:ec:9b:c1:6a:c1:29:bb:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:60:22:5B:BF:57:EA:3B:4D:6C:18:CC:34:09:14:DE:9C:7C:46:25
X509v3 Authority Key Identifier:
keyid:BB:8E:2F:5A:C7:CB:E6:21:17:DA:47:8A:C0:C0:27:AD:6D:84:3C:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u44vWsfL5iEX2keKwMAnrW2EPFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d208a0-e436-4896-bef2-3b9db05d2384/1/u44vWsfL5iEX2keKwMAnrW2EPFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:89:5c:df:ce:28:3e:00:d4:9d:f9:70:dd:cd:88:ca:f4:f2:
ab:c5:6e:6d:14:f0:43:03:22:6e:a5:69:44:6c:65:1b:30:e6:
44:3b:ee:16:48:fd:45:f7:ae:a8:bb:e4:15:b3:f2:b1:b2:16:
14:45:47:14:e6:1a:37:ea:04:84:dc:39:8a:ee:cb:23:45:62:
1a:a6:40:c8:36:23:9c:d5:fa:47:ed:d8:d0:f3:9d:9c:85:6a:
23:d5:b3:eb:d7:4c:46:a1:69:b3:79:52:d0:da:e1:0e:b7:57:
23:91:16:41:f8:60:1d:c8:80:7f:6a:b9:43:08:88:57:f8:22:
67:cc:da:4c:a5:b6:87:e6:39:65:51:de:75:b2:bf:6d:74:aa:
f6:aa:9a:00:29:a4:50:a7:6a:d4:49:04:e6:07:1d:1b:8e:5b:
d5:ca:91:04:63:26:cd:f4:42:eb:76:78:4b:f7:dd:0b:43:eb:
39:38:9e:83:3f:11:7e:e3:54:44:e9:a0:bb:aa:e4:e4:15:fc:
03:c0:d5:04:a5:c3:68:a3:99:19:56:9c:fa:fd:fe:4e:49:25:
b1:3a:c5:81:b5:be:e0:e9:c3:c3:dd:5d:6a:57:16:66:4e:a4:
ea:cf:53:87:02:e4:39:3e:12:e7:70:da:3d:cd:58:c7:68:8a:
61:be:e1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 21:14:07 2026 by rpki-client