Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
File: UFbHUIQP5cAQOn9RAix87qj-lps.mft (raw, json)
Hash identifier: moeUeBBgN8RS0Vwo+kFXaI1v+rPbsuceJ+RRNth8xE4=
Subject key identifier: 7B:0D:9D:F0:3B:72:17:F8:0C:0C:44:82:7E:88:A4:67:81:C9:BA:0E
Authority key identifier: 50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
Certificate issuer: /CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Certificate serial: 019DCC3D19FD803B2AB47D983699F7841F5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
Manifest number: 18DB
Signing time: Mon 27 Apr 2026 00:00:49 +0000
Manifest this update: Mon 27 Apr 2026 00:00:49 +0000
Manifest next update: Tue 28 Apr 2026 00:00:49 +0000
Files and hashes: 1: 3pROUsGuo7256asAZirwtFY6aCY.roa (hash: ceI+qtS5lvi6YoUYDhE0QVXLVsFmdB8++Mmxjm4VsCg=)
2: 4MWEzdPSupDJZ_Gz5zFt8fSfRP8.roa (hash: fzAcdI2YeHgptFoCa+cHCUdnXZqAYdQFW10Ox2+xnFU=)
3: UFbHUIQP5cAQOn9RAix87qj-lps.crl (hash: Klcy2PuKaleymRx/pp3QyXlKkyg+6fluDVklbbp3rKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:19:fd:80:3b:2a:b4:7d:98:36:99:f7:84:1f:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5056c750840fe5c0103a7f51022c7ceea8fe969b
Validity
Not Before: Apr 27 00:00:49 2026 GMT
Not After : Apr 28 00:00:49 2026 GMT
Subject: CN=7b0d9df03b7217f80c0c44827e88a46781c9ba0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:83:d1:78:05:78:c7:75:ac:35:6c:c4:88:fd:
b2:7f:e2:6f:24:91:64:ef:30:5e:ed:b5:94:95:66:
b5:11:ef:c9:6b:9f:40:ca:07:5b:4e:f9:8f:9c:d2:
51:a0:8c:71:e6:9a:15:db:8a:58:a3:0b:37:e9:85:
42:90:7c:8b:fb:e2:ad:06:28:d2:4e:e1:af:f8:3f:
33:da:0e:a5:10:a2:bb:00:b6:4a:1c:1a:81:5c:e3:
82:8e:9b:f8:00:34:61:2a:35:7e:a6:84:a2:cd:56:
33:6a:a3:40:4f:ae:31:83:1f:a5:44:c4:b4:38:81:
e5:d8:1a:37:6a:91:8a:f9:11:9b:24:82:f8:3c:3d:
5e:2a:65:74:c7:22:2d:5c:4a:ab:bc:26:f0:cb:10:
b7:43:01:e2:29:cb:71:97:d7:5e:d7:43:15:a0:ca:
a9:2a:d9:74:c8:cc:b4:94:b5:79:cc:16:7c:95:71:
22:d9:78:b4:4d:bc:35:e9:3f:66:d3:59:81:42:8a:
3c:bf:6e:17:48:c4:b3:07:f0:45:e7:c9:32:5b:4f:
75:28:bb:23:c3:d6:d4:b1:ff:b6:2c:be:0b:55:fe:
e4:75:ee:7e:f5:c1:74:8f:28:41:22:13:04:d5:5a:
27:b5:ac:eb:4a:91:5e:ed:b2:5b:8f:f6:9b:58:a3:
2e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:0D:9D:F0:3B:72:17:F8:0C:0C:44:82:7E:88:A4:67:81:C9:BA:0E
X509v3 Authority Key Identifier:
keyid:50:56:C7:50:84:0F:E5:C0:10:3A:7F:51:02:2C:7C:EE:A8:FE:96:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFbHUIQP5cAQOn9RAix87qj-lps.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/252968-b8ba-4e19-84d7-3228286da601/1/UFbHUIQP5cAQOn9RAix87qj-lps.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9d:3a:be:70:17:0d:ec:c6:bd:8e:44:77:58:59:2f:26:22:
cd:6a:e1:30:af:59:f3:30:d3:ee:e2:5d:03:9c:7d:51:c0:82:
24:fa:02:6a:48:fe:6d:2e:19:48:41:18:65:17:58:89:5e:9e:
66:b5:17:62:eb:de:0c:63:6e:0a:59:88:7a:e6:01:10:a4:bc:
c4:cd:3d:f8:64:75:0b:d5:13:6e:4d:aa:27:58:81:7a:7a:0f:
ca:81:52:17:a7:11:f3:23:74:7f:f3:29:fb:d9:e5:87:97:79:
e0:71:4a:fd:64:86:ed:b2:64:af:39:88:c5:4d:36:6e:20:8e:
3b:65:1f:03:64:5b:76:ca:15:08:79:5b:01:85:3a:5b:e1:da:
71:39:c7:55:2b:ca:6e:57:51:62:ef:c2:15:5d:6f:46:22:14:
5f:90:5b:25:83:d9:8e:df:bf:c7:e9:24:06:27:f8:1f:aa:1b:
05:db:d8:04:2a:0d:7f:39:1a:50:f0:f7:3c:5e:d4:2d:08:5e:
f4:1e:0f:cb:a9:af:81:ce:56:35:e5:2f:e0:7c:11:1e:ef:14:
48:c9:f0:56:5a:f8:55:20:1a:96:84:84:ac:91:d1:f2:bc:0e:
a7:50:ba:30:cf:2a:48:02:9d:3c:64:26:bd:01:24:c4:51:c4:
8b:8f:43:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:16:17 2026 by rpki-client