Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
File: UAqdaSWQfcZs55keuULmgLE5E6k.mft (raw, json)
Hash identifier: nz8g894t0zgNuQG0L1ObJ1U/m2ML4VXkHRX32OgHxms=
Subject key identifier: 93:63:EA:DB:5B:3B:44:CA:5F:21:10:AD:00:07:BA:34:B6:D6:A6:54
Authority key identifier: 50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
Certificate issuer: /CN=500a9d6925907dc66ce7991eb942e680b13913a9
Certificate serial: 019DCD4FEECF22BACC771AC43663054C065A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
Manifest number: 22
Signing time: Mon 27 Apr 2026 05:01:00 +0000
Manifest this update: Mon 27 Apr 2026 05:01:00 +0000
Manifest next update: Tue 28 Apr 2026 05:01:00 +0000
Files and hashes: 1: UAqdaSWQfcZs55keuULmgLE5E6k.crl (hash: 2a84PIsQOF/Yi6lfLbHcz1h6tuJ/td/WogpX9EZ+dFo=)
2: XTRFNK15Srj4Dxkx9BJpGhvon9c.roa (hash: 2JtlFPv4dLd8U4gLpBv5lJb7jlDjsUb3MwUWDpaLfmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:4f:ee:cf:22:ba:cc:77:1a:c4:36:63:05:4c:06:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500a9d6925907dc66ce7991eb942e680b13913a9
Validity
Not Before: Apr 27 05:01:00 2026 GMT
Not After : Apr 28 05:01:00 2026 GMT
Subject: CN=9363eadb5b3b44ca5f2110ad0007ba34b6d6a654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:3e:52:cd:8f:59:28:6a:13:04:6b:a7:81:
6b:a5:6e:4c:d6:13:ed:96:c7:f2:0b:e9:88:4f:78:
12:83:60:4d:31:41:5c:33:55:fb:f0:71:33:96:8d:
72:29:45:0a:c2:a6:b4:12:cd:9c:fe:39:6d:9b:f7:
ba:1f:51:57:9b:37:59:a7:03:cf:73:4f:e9:5a:86:
72:2c:fa:31:e0:5a:86:a9:46:f2:9c:60:db:73:f0:
81:f1:63:af:b0:22:d0:d5:2b:0c:28:77:cc:f4:f3:
6b:78:a8:9c:41:01:78:4c:24:ed:37:32:2f:6c:37:
78:b3:14:ff:19:4c:ab:c9:04:df:ef:ed:8a:3d:e5:
a7:8c:a3:c5:e6:a8:a5:d6:d9:25:d6:2e:92:b4:b4:
ac:8a:43:7e:4c:c9:57:bc:0a:44:27:f2:fb:2d:a1:
c5:ab:8b:1a:85:c2:36:e2:27:5d:98:8e:68:2d:a9:
a4:1a:30:18:fe:00:bb:12:b7:88:dd:3e:ed:73:a0:
3e:d7:fc:15:d9:ee:14:3c:77:7d:80:b3:77:f3:fd:
91:9f:80:3c:2b:a8:82:6a:95:29:8d:78:21:9f:96:
ef:66:54:54:74:5b:9c:9e:1d:a0:50:50:01:73:b9:
f2:e1:53:f7:bc:65:5c:60:e1:e4:cb:ac:96:f8:cd:
0c:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:63:EA:DB:5B:3B:44:CA:5F:21:10:AD:00:07:BA:34:B6:D6:A6:54
X509v3 Authority Key Identifier:
keyid:50:0A:9D:69:25:90:7D:C6:6C:E7:99:1E:B9:42:E6:80:B1:39:13:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAqdaSWQfcZs55keuULmgLE5E6k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6b5fee-96ad-46ee-bc23-ed3d2760dcbd/1/UAqdaSWQfcZs55keuULmgLE5E6k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:58:17:c0:44:ad:70:b5:93:82:4c:9f:fa:b6:e8:02:6f:45:
97:19:16:90:a8:b8:05:2e:4f:c4:78:e0:9b:66:fe:40:dd:65:
70:b7:6a:54:98:ab:46:eb:15:62:5d:20:e8:ba:2c:79:5b:d1:
c9:66:26:a7:80:40:ae:9d:80:b1:88:a1:8f:f9:78:c8:dd:34:
1d:90:c8:af:9d:c0:21:e8:cb:85:32:d7:f4:08:c3:25:bc:ff:
79:d6:c9:5a:b2:2f:1f:d8:22:fe:e8:a3:30:50:ee:d9:e3:10:
50:ae:33:95:cd:80:be:9f:5a:95:56:72:19:02:65:dc:24:6f:
34:6a:87:45:08:44:57:d7:ad:93:9d:95:6c:7e:2b:91:59:3b:
af:32:f7:3c:cd:fd:d1:c8:52:61:72:45:3e:7b:b4:ad:20:34:
4b:ac:d8:e8:2a:ef:41:86:24:b9:e2:bc:64:b7:39:cb:c0:be:
7b:2a:7d:7d:fc:b1:e9:9d:08:10:8c:b1:c8:2b:d6:5a:26:83:
83:bd:fb:f0:eb:5d:7f:56:8b:f8:ee:7d:c8:dc:d0:20:15:02:
e7:6d:c1:84:6e:b8:1a:44:f1:b8:1b:f6:60:01:7b:01:fb:3f:
c9:cd:58:2e:e1:5c:d6:11:16:ce:ee:6b:96:d1:56:24:50:cf:
90:12:cc:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:08:32 2026 by rpki-client