Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
File: u__RI8uT4k4CX5UoQhCEApWNSkw.mft (raw, json)
Hash identifier: ViHwBK6sY9WrNKYpuEZe+BoMQavD7fvOEVBYm1IHlVs=
Subject key identifier: AB:74:21:D8:DC:F9:5D:84:D3:DC:E3:20:8A:D0:6F:95:73:52:F6:09
Authority key identifier: BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
Certificate issuer: /CN=bbffd123cb93e24e025f952842108402958d4a4c
Certificate serial: 019D9CD177E406AF2B54D475E0DCC4CA90A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
Manifest number: 1718
Signing time: Fri 17 Apr 2026 19:01:06 +0000
Manifest this update: Fri 17 Apr 2026 19:01:06 +0000
Manifest next update: Sat 18 Apr 2026 19:01:06 +0000
Files and hashes: 1: e9599L9ny9UV4AthdrySgjWWRfY.roa (hash: w2tYDeATkvXbeHWaWyKizc90tHXCmX/rUf5tN2rCNto=)
2: jaE8nn1rO58pvqUua1UrZ-d0dAA.roa (hash: Sx5Ur+2c1QVItDTXbKf1TR4pTl+o+P/WqOx/ljx3+2U=)
3: u__RI8uT4k4CX5UoQhCEApWNSkw.crl (hash: Mzfsu+NNGw1ibFU+TODWJSXQBLD4PxD4n7R57iFAEtU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:77:e4:06:af:2b:54:d4:75:e0:dc:c4:ca:90:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbffd123cb93e24e025f952842108402958d4a4c
Validity
Not Before: Apr 17 19:01:06 2026 GMT
Not After : Apr 18 19:01:06 2026 GMT
Subject: CN=ab7421d8dcf95d84d3dce3208ad06f957352f609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:0d:5c:13:be:14:70:f3:d1:96:ac:51:44:
76:71:b2:dd:1e:8e:d8:dc:28:5d:96:4d:2a:7e:3d:
c0:9b:4d:a0:a5:fe:e8:4b:9d:6a:07:fe:43:6b:c9:
f7:0b:40:cb:69:13:89:87:e4:02:5d:be:18:e9:d8:
7d:f8:69:01:81:af:4a:0f:50:86:87:ea:5a:a4:1e:
0a:ec:a3:9e:24:42:08:93:99:6c:18:9d:49:83:bc:
6e:df:d7:a7:70:df:12:3f:72:f3:47:e4:25:01:6a:
6d:70:d9:3c:cd:ea:d8:ea:b6:80:b9:1f:6e:2f:9c:
aa:ff:75:7f:6d:1d:8f:8e:02:9b:19:f6:89:d4:2b:
37:13:66:30:4e:d5:70:03:10:30:6b:ba:5c:bc:bb:
e3:05:13:16:f9:14:30:89:72:b6:7e:14:62:d4:7c:
8d:32:f7:c2:26:7e:ee:85:4f:7a:6a:74:e2:3b:b2:
1d:f3:ce:2a:12:dd:04:8b:7c:85:44:41:1c:f6:f8:
7d:a6:e1:63:4d:06:e9:40:74:cd:3a:40:00:5f:05:
3a:11:91:92:85:15:21:21:03:20:26:ca:f7:a7:f4:
68:76:38:93:3a:e1:a4:48:cd:a0:1e:22:de:46:19:
ba:45:f8:53:ce:88:cc:cb:21:9a:99:96:4c:1f:bf:
5c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:74:21:D8:DC:F9:5D:84:D3:DC:E3:20:8A:D0:6F:95:73:52:F6:09
X509v3 Authority Key Identifier:
keyid:BB:FF:D1:23:CB:93:E2:4E:02:5F:95:28:42:10:84:02:95:8D:4A:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u__RI8uT4k4CX5UoQhCEApWNSkw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5dcfc9-57da-407f-a6b2-ac4a4061746d/1/u__RI8uT4k4CX5UoQhCEApWNSkw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:c9:7d:30:65:43:32:7e:fa:f7:58:b0:d8:27:03:9b:88:12:
a0:b5:8b:e4:71:49:cd:54:bc:89:39:85:ff:3d:8c:ca:70:2b:
55:bf:05:25:2f:c4:c7:50:ea:4c:48:57:2c:95:e2:ba:f5:b7:
43:bf:f8:8f:6d:88:25:46:65:cc:1a:a8:f8:ee:06:5f:c8:79:
d4:45:cc:e7:36:72:0f:17:60:c9:51:9c:1f:14:8e:89:39:57:
d6:88:f8:91:bb:8d:82:ef:84:3c:d0:79:f5:c6:ba:85:cb:a5:
1f:a9:9c:5d:f8:eb:c8:ce:31:6c:52:85:3d:b6:7b:15:cb:aa:
65:c3:26:88:5d:fb:ca:ad:51:c8:2f:d9:a8:1b:63:43:32:ab:
37:f5:31:9b:f3:40:37:09:1a:2c:6a:8e:74:51:06:f4:cd:b7:
87:42:a8:b5:c5:30:89:a4:dc:b9:ed:88:b2:b4:36:69:84:b5:
12:28:81:53:64:e0:b8:05:2a:9d:cc:2b:db:f7:02:8b:a2:8b:
de:d0:4f:0b:be:79:3f:ca:30:82:bb:16:42:50:aa:6e:06:e6:
08:64:49:57:5f:ee:a5:f4:3f:f2:f4:95:1f:30:d7:f1:12:e7:
df:43:fb:9e:2d:79:1e:d7:db:24:35:c5:33:f0:90:1c:db:c0:
b9:65:d7:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:30:16 2026 by rpki-client