
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
File: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft (raw, json)
Hash identifier: +9hoyDes6O2pWVf1lmLdz16AXIqrjLdXV/3JOnmEAgA=
Subject key identifier: 47:A2:72:69:E6:4F:C0:FD:82:69:31:81:D8:5F:B9:A3:9B:B1:2B:C4
Authority key identifier: 50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
Certificate issuer: /CN=509df728d1b46634054972d2945fda58073b5762
Certificate serial: 019DCD86DC352352D256D9D1D5DB53B9B46F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
Manifest number: 18E2
Signing time: Mon 27 Apr 2026 06:01:00 +0000
Manifest this update: Mon 27 Apr 2026 06:01:00 +0000
Manifest next update: Tue 28 Apr 2026 06:01:00 +0000
Files and hashes: 1: UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl (hash: trY7JGrFR8TJqJvHteI+YNeAFzVk1Kw9Uj+dIGQP1EA=)
2: YiTZyM0LJDlibzSScA19n-r_1NA.roa (hash: xUwCbyrQAmjQ9KEmQXtJqtnkqDlVNHnF+1vzDoqaWUE=)
3: iLi7f9ZUhRFIePAx_CbpyKFYVLY.roa (hash: +jK5YhwAWuiSD7jiuyksRnOSQ26Q7wRKEX5irQTiJO4=)
4: jaFu9pBfM8muxEa6Z1M7bqPV5TY.roa (hash: D7hQEIQMJfA1ZdopDczTPfE2hg2zaIc0IFSTi8hUD0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:86:dc:35:23:52:d2:56:d9:d1:d5:db:53:b9:b4:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=509df728d1b46634054972d2945fda58073b5762
Validity
Not Before: Apr 27 06:01:00 2026 GMT
Not After : Apr 28 06:01:00 2026 GMT
Subject: CN=47a27269e64fc0fd82693181d85fb9a39bb12bc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:84:c0:2b:c1:11:66:9e:6d:07:c4:93:cf:
cf:2d:36:e2:d0:ba:bb:69:81:ba:ac:d8:93:4f:b7:
bc:11:12:87:c1:99:43:e1:a5:ae:10:e8:8f:74:a1:
64:73:c1:03:67:0b:61:3a:d5:ca:44:c3:65:1e:c7:
99:87:b1:44:5e:88:7e:a7:4e:7d:c2:95:30:c7:4b:
2d:0f:89:e5:e4:21:37:71:9d:38:cf:06:88:0c:6c:
2b:8b:8d:10:78:42:50:d3:f3:82:5a:54:2d:eb:04:
be:90:d8:b3:99:0d:a6:be:42:2d:5a:d8:d6:63:03:
ca:dd:75:dc:c8:d1:45:2a:cc:7d:12:a5:45:a0:1c:
62:0f:6c:41:e4:ae:52:15:6e:14:61:4a:16:90:d0:
cb:02:7c:06:97:30:02:0c:48:54:34:11:d2:c9:f9:
2a:f6:51:0a:98:9b:4d:1b:75:d1:f9:ea:7f:c6:78:
79:14:8f:6f:05:98:23:2e:3f:55:8b:34:70:5a:75:
12:e0:3d:d1:52:97:6e:c2:be:7b:cb:dc:58:fb:a9:
f1:de:4c:8b:5a:26:cc:3c:90:36:8c:b9:20:79:9a:
8c:64:8b:23:cb:f1:31:28:f3:00:84:e0:52:5d:58:
e8:7e:c4:b8:d6:d9:42:9e:7c:25:c0:fb:10:73:cf:
97:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:A2:72:69:E6:4F:C0:FD:82:69:31:81:D8:5F:B9:A3:9B:B1:2B:C4
X509v3 Authority Key Identifier:
keyid:50:9D:F7:28:D1:B4:66:34:05:49:72:D2:94:5F:DA:58:07:3B:57:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/acfcb6-d78a-448a-a761-dd3b4f8381c4/1/UJ33KNG0ZjQFSXLSlF_aWAc7V2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:bf:73:c8:16:4c:7e:f7:00:28:66:f9:dc:1e:99:8a:f3:40:
1d:2c:ca:a0:a7:75:33:1e:96:5d:86:68:6c:82:06:d0:7a:a9:
8f:1e:15:80:ee:7c:f2:3b:68:3a:5a:92:48:85:8b:55:17:9e:
0c:70:4e:e7:6d:d3:33:09:46:67:f5:75:cc:5a:85:3a:cb:92:
02:3a:36:80:48:fa:8e:64:55:d6:47:f9:ed:14:d4:8e:e7:04:
ad:6c:34:cc:87:02:cb:d6:9d:f1:33:86:f2:df:76:89:26:6e:
93:c9:5c:97:51:6f:22:94:e2:af:01:43:9a:a9:14:33:ee:bd:
38:9a:f3:69:13:ca:26:ae:2d:10:d9:76:cc:f0:22:62:54:12:
76:0c:52:88:37:6a:ea:7c:61:89:e7:4d:bb:73:61:21:08:50:
99:11:d3:40:48:80:d3:f1:6c:49:da:6f:46:4e:b9:f6:c8:05:
e3:ed:d3:ec:eb:ac:eb:32:f0:d6:eb:ed:c2:ac:4f:73:c7:6b:
83:44:89:52:ed:76:ba:7e:97:08:a0:97:5a:19:fd:0b:9c:a7:
c0:81:dd:b6:bc:0d:1c:48:d5:bc:03:0b:45:89:27:c3:c6:9b:
79:17:0b:cd:e6:15:f4:74:61:2d:84:07:d7:30:d2:65:22:d9:
c5:48:b6:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:38:50 2026 by rpki-client