Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
File: ud8VbuGLaVjUMGtjEbSghnY-_2I.mft (raw, json)
Hash identifier: pak7mPBzM1vrH87sg3m+IKLHiyQ3r4EYGpwvdv6Tcx8=
Subject key identifier: D8:72:DD:21:2D:D6:C7:68:A9:C0:AC:9E:C6:2A:1E:BE:2C:E9:24:19
Authority key identifier: B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
Certificate issuer: /CN=b9df156ee18b6958d4306b6311b4a086763eff62
Certificate serial: 019DCD18D03607ADE0DCA6F683967DCFFC59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
Manifest number: 14EA
Signing time: Mon 27 Apr 2026 04:00:48 +0000
Manifest this update: Mon 27 Apr 2026 04:00:48 +0000
Manifest next update: Tue 28 Apr 2026 04:00:48 +0000
Files and hashes: 1: 189oV8GncXIuUHjeoI_E8INYiQs.roa (hash: 0A49Lxa8+HmOmnCCbU77IrfpJ/mis7ETSIxuX6hEu0Q=)
2: T_XFNeZT8y3cvlmC-FDGyTbQPEQ.roa (hash: yPf4MjNnJsPVmh5cf0exZFQpxpGLZw774YP/hVrhXHU=)
3: ud8VbuGLaVjUMGtjEbSghnY-_2I.crl (hash: KcgjPtOFa820q/IzLo8Nbu2kxetmXKTG+ccco+CnkYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 04:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:18:d0:36:07:ad:e0:dc:a6:f6:83:96:7d:cf:fc:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9df156ee18b6958d4306b6311b4a086763eff62
Validity
Not Before: Apr 27 04:00:48 2026 GMT
Not After : Apr 28 04:00:48 2026 GMT
Subject: CN=d872dd212dd6c768a9c0ac9ec62a1ebe2ce92419
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:20:36:d2:2a:2a:15:ed:26:33:fa:58:fb:12:
cb:a1:a6:02:f0:e7:f5:71:ff:36:52:7b:82:58:2b:
23:39:13:ff:9a:c2:e5:39:78:3c:4e:2e:16:47:cb:
c3:97:d8:09:4b:55:4e:c6:a3:52:6f:e8:9c:62:1b:
cb:ad:31:d6:7d:3b:a5:d2:9a:5b:3e:0a:1e:a7:ee:
ae:7e:cb:23:ea:43:f0:ee:a6:f8:34:ea:e6:a7:a4:
e5:e2:24:e6:09:ef:42:b4:13:cb:3c:bc:97:c9:37:
0e:26:0d:9a:af:03:76:9e:30:15:a7:31:df:e0:99:
31:db:54:5a:c2:82:5d:0b:f2:d6:9f:0f:f9:2e:05:
c1:4c:a6:7c:a6:fd:04:b8:7d:9b:26:c8:5f:81:06:
89:fd:87:9f:95:6c:7e:b3:31:7f:3c:e5:1e:68:a3:
d2:f5:9c:e8:60:9f:f6:c7:65:9e:ec:2a:02:f7:87:
f2:6c:b0:90:25:f3:d0:46:4b:29:34:9c:13:9a:2c:
d4:24:68:14:9d:26:bd:05:86:b0:91:1a:81:11:cd:
2c:f9:7e:07:8e:64:f7:83:97:3c:51:59:98:2b:fd:
df:0c:2a:ba:f4:2b:29:7d:0d:b0:fa:39:da:8c:5b:
1f:ee:d2:56:5d:c8:e8:09:68:f5:ee:3b:96:bb:79:
c6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:72:DD:21:2D:D6:C7:68:A9:C0:AC:9E:C6:2A:1E:BE:2C:E9:24:19
X509v3 Authority Key Identifier:
keyid:B9:DF:15:6E:E1:8B:69:58:D4:30:6B:63:11:B4:A0:86:76:3E:FF:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ud8VbuGLaVjUMGtjEbSghnY-_2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/d6461f-17e3-4986-a5f6-72a4b3a9bb44/1/ud8VbuGLaVjUMGtjEbSghnY-_2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:07:d2:59:73:25:bc:c6:2b:38:f4:e9:b9:8b:06:68:28:08:
31:d5:43:71:75:f3:fd:34:9f:6c:f3:0c:69:a6:2c:66:bf:1f:
24:b2:3d:b9:f2:b8:99:af:f5:cd:f5:8d:c9:8d:a2:75:e9:55:
f4:24:92:b4:0b:70:d1:88:b0:97:fa:c2:41:bb:d4:c7:62:bb:
e5:26:72:d2:7b:3d:79:32:9b:d3:a2:d3:f1:14:a8:35:a5:43:
56:ab:73:fc:36:89:f2:67:11:b5:d6:3c:12:24:ac:5e:df:3b:
64:9a:ef:d8:d3:e7:ba:7b:de:0f:9d:23:7b:fd:19:83:b8:9c:
51:1f:1a:ec:6b:2b:ee:2c:dd:03:4b:79:58:1d:c3:59:93:99:
09:be:a2:6b:3d:58:7e:fc:d5:1e:27:38:07:3e:9d:b0:cb:fc:
0f:ee:26:1b:2a:bd:39:52:1b:04:6f:f0:02:b1:fd:8c:10:fb:
0a:57:8c:42:f5:93:db:ad:60:0a:f4:2f:de:8c:c8:8f:35:4b:
22:8f:a2:bc:dc:73:d9:de:93:fb:e1:cd:d4:c3:a5:cf:1b:3c:
ea:94:23:3d:3e:52:18:3a:e3:4d:ea:92:b4:18:de:46:9a:a7:
21:35:cf:ee:51:a7:98:77:38:4b:1c:a1:2a:9d:25:69:b8:35:
e0:3f:2a:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3NGNA2B63g3Kb2g5Z9z/xZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI5ZGYxNTZlZTE4YjY5NThkNDMwNmI2MzExYjRhMDg2NzYz
ZWZmNjIwHhcNMjYwNDI3MDQwMDQ4WhcNMjYwNDI4MDQwMDQ4WjAzMTEwLwYDVQQD
EyhkODcyZGQyMTJkZDZjNzY4YTljMGFjOWVjNjJhMWViZTJjZTkyNDE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxCA20ioqFe0mM/pY+xLLoaYC8Of1
cf82UnuCWCsjORP/msLlOXg8Ti4WR8vDl9gJS1VOxqNSb+icYhvLrTHWfTul0ppb
Pgoep+6ufssj6kPw7qb4NOrmp6Tl4iTmCe9CtBPLPLyXyTcOJg2arwN2njAVpzHf
4Jkx21RawoJdC/LWnw/5LgXBTKZ8pv0EuH2bJshfgQaJ/YeflWx+szF/POUeaKPS
9ZzoYJ/2x2We7CoC94fybLCQJfPQRkspNJwTmizUJGgUnSa9BYawkRqBEc0s+X4H
jmT3g5c8UVmYK/3fDCq69CspfQ2w+jnajFsf7tJWXcjoCWj17juWu3nGUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNhy3SEt1sdoqcCsnsYqHr4s6SQZMB8GA1UdIwQY
MBaAFLnfFW7hi2lY1DBrYxG0oIZ2Pv9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYt
NzJhNGIzYTliYjQ0LzEvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9kNjQ2MWYtMTdlMy00OTg2LWE1ZjYtNzJhNGIzYTliYjQ0
LzEvdWQ4VmJ1R0xhVmpVTUd0akViU2doblktXzJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzAfSWXMl
vMYrOPTpuYsGaCgIMdVDcXXz/TSfbPMMaaYsZr8fJLI9ufK4ma/1zfWNyY2idelV
9CSStAtw0Yiwl/rCQbvUx2K75SZy0ns9eTKb06LT8RSoNaVDVqtz/DaJ8mcRtdY8
EiSsXt87ZJrv2NPnunveD50je/0Zg7icUR8a7Gsr7izdA0t5WB3DWZOZCb6iaz1Y
fvzVHic4Bz6dsMv8D+4mGyq9OVIbBG/wArH9jBD7CleMQvWT261gCvQv3ozIjzVL
Io+ivNxz2d6T++HN1MOlzxs86pQjPT5SGDrjTeqStBjeRpqnITXP7lGnmHc4Sxyh
Kp0labg14D8qfA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 12:39:44 2026 by rpki-client