Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
File: uDlzvOShkjp1HTapHUR-DFwWmP0.mft (raw, json)
Hash identifier: 5KNixHkRgyXGoGflxAEstUCL5H+p7PL6W1tL7iZXQIs=
Subject key identifier: 9F:67:9E:86:8C:47:76:27:35:93:21:EE:89:69:6F:16:E4:6C:13:06
Authority key identifier: B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
Certificate issuer: /CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Certificate serial: 019E32CF4FD0803311251EE930DC741872F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
Manifest number: 0D17
Signing time: Sat 16 May 2026 22:01:47 +0000
Manifest this update: Sat 16 May 2026 22:01:47 +0000
Manifest next update: Sun 17 May 2026 22:01:47 +0000
Files and hashes: 1: 4N1exzvYfH7iE3XY4NkPBimqLIM.roa (hash: c+7gSoTuyWnGec0RjEFD0HIqznoI8BAizF0+vITBQtw=)
2: Bryd42xc20l8yGYzsCePWUyIRpQ.roa (hash: SfEAMcqg1lAI6lIUE6EnsEoR1LWkzVlNk7fPcXSOd1o=)
3: uDlzvOShkjp1HTapHUR-DFwWmP0.crl (hash: Gux4+yKKTPpsJa3ln39x1h27XngJWbos7z+YYlLMlIY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:cf:4f:d0:80:33:11:25:1e:e9:30:dc:74:18:72:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b83973bce4a1923a751d36a91d447e0c5c1698fd
Validity
Not Before: May 16 22:01:47 2026 GMT
Not After : May 17 22:01:47 2026 GMT
Subject: CN=9f679e868c477627359321ee89696f16e46c1306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:41:fe:25:78:da:d3:9e:c1:1f:15:11:ce:15:
cc:0e:53:e6:54:f3:a5:6a:0e:f5:76:a8:1d:1b:15:
a4:b7:71:c7:c1:f1:0e:f1:f2:67:ff:4b:8c:e2:47:
9e:7f:6d:49:2f:bf:9c:83:15:70:59:97:23:fa:de:
be:e0:71:65:d5:9b:b6:43:00:9f:8d:5a:70:c2:38:
61:93:0e:ed:66:27:17:14:2e:59:9f:24:62:b0:34:
09:2a:9c:07:7c:f5:1d:b0:9e:b0:d7:39:3b:1e:3f:
c8:3e:82:b4:a5:15:2f:ac:b0:8a:ce:c1:d1:76:ee:
15:06:60:7f:b1:61:8e:1f:5c:07:d0:ed:32:e1:3d:
29:41:80:a9:eb:f6:e6:1d:df:30:8a:60:41:8f:e0:
7c:e4:8a:28:a4:56:5c:32:cd:18:29:55:52:eb:c9:
43:6d:4d:dd:00:5d:54:96:dc:38:07:bf:2d:04:84:
42:28:d2:e8:b5:24:05:99:11:f8:5d:d7:77:4c:6b:
d3:02:db:92:bd:7b:b9:fc:48:3d:27:21:0c:b0:4b:
de:e0:7c:50:04:bb:11:f4:18:7b:ee:7c:9a:63:37:
1d:9d:45:33:54:fd:f9:06:ef:76:32:40:cd:a9:78:
67:50:2b:ca:f8:de:b6:ce:3c:5b:35:5c:14:dc:95:
d3:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:67:9E:86:8C:47:76:27:35:93:21:EE:89:69:6F:16:E4:6C:13:06
X509v3 Authority Key Identifier:
keyid:B8:39:73:BC:E4:A1:92:3A:75:1D:36:A9:1D:44:7E:0C:5C:16:98:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uDlzvOShkjp1HTapHUR-DFwWmP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/d916da-8d84-4934-95d7-d8506c95fed8/1/uDlzvOShkjp1HTapHUR-DFwWmP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:84:58:c3:4a:75:cd:96:ab:e5:82:cd:e4:b7:dc:82:9e:a7:
79:1b:92:1b:6f:96:eb:5b:a9:3a:e4:ca:8e:94:31:51:40:44:
08:c2:28:55:46:46:88:10:7e:f2:f0:25:e9:9d:4d:56:aa:f1:
72:03:b7:4c:a6:25:9c:11:cf:43:14:c3:2e:aa:0f:83:ec:1e:
53:5b:b3:14:36:7e:cb:6a:f0:59:e6:b4:ec:a9:b5:ab:1c:5a:
59:f9:33:3a:18:01:57:9d:c8:24:41:af:fc:2d:6b:97:27:6f:
4f:4b:1a:9f:1e:2e:8d:f3:d0:6b:c0:5d:da:31:d8:14:85:c5:
98:e6:ac:76:64:5e:1d:3b:a8:8c:06:d5:5a:cb:6d:30:4d:74:
b5:42:b5:63:2e:e6:59:3c:fe:64:f2:e8:0f:b6:1d:ab:0b:21:
67:4e:ce:cb:82:d8:bd:2b:82:5a:1f:21:a0:1e:5f:5e:4e:30:
99:ef:8a:40:77:9b:45:0f:82:1e:12:ce:ba:70:e0:04:da:50:
e3:0f:a6:de:05:ba:30:39:77:91:76:d6:6b:df:f9:35:eb:53:
a9:19:75:4e:d2:1f:ea:d1:9d:f9:81:55:1f:25:c4:0d:fe:6f:
bd:49:77:f3:58:4e:f4:c3:d2:07:7e:5d:6f:7a:d5:5d:1b:9a:
46:c7:3c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 23:29:58 2026 by rpki-client