Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
File: uSEnfz55VKSvVSCpkEL7CJOvgE0.mft (raw, json)
Hash identifier: QuzOotZHQJrJI6J1qEMfSYZUKQ/GZC8GxmzGX0lY9no=
Subject key identifier: C3:68:02:D5:6A:12:9D:6A:5F:40:86:82:62:3B:F2:62:2E:DE:A1:19
Authority key identifier: B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
Certificate issuer: /CN=b921277f3e7954a4af5520a99042fb0893af804d
Certificate serial: 019DCF070ADB27E479499BCABFEB78ED5412
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 13:00:38 +0000
Manifest this update: Mon 27 Apr 2026 13:00:38 +0000
Manifest next update: Tue 28 Apr 2026 13:00:38 +0000
Files and hashes: 1: 7XorW7ITUOWgP4pU38fX3RKpcv0.roa (hash: dhKstKlCZm4b7W0PXvIWJClLT8IvcIHMNCKR+Y++DYI=)
2: hTUAMk4ivW-zcf6qV0iH6m50Tko.roa (hash: VBCrCjN466HYq/3fbWnNr2nU6AFrUJpSz4d+MsDsH6k=)
3: po2AjEIA0cEB2DRz3ItNN0tLtJA.roa (hash: emEIyu5B7Cay8ES1oJZR9gyFPVy8pKl4tqO8qQcgwDQ=)
4: uSEnfz55VKSvVSCpkEL7CJOvgE0.crl (hash: MCUKXDpDHukWO8WzVStnQggqOu9mCpWFVzF+bP3QHu0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:07:0a:db:27:e4:79:49:9b:ca:bf:eb:78:ed:54:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b921277f3e7954a4af5520a99042fb0893af804d
Validity
Not Before: Apr 27 13:00:38 2026 GMT
Not After : Apr 28 13:00:38 2026 GMT
Subject: CN=c36802d56a129d6a5f408682623bf2622edea119
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:38:00:d0:fe:b3:5a:c0:9c:2f:ae:f7:0b:94:
dc:68:92:67:3d:c1:b2:11:b5:7e:e0:1d:b5:1d:d5:
42:a2:d4:12:e2:39:34:7d:49:63:57:01:38:ef:14:
78:60:0f:80:c7:51:73:cc:f7:b8:a3:05:d4:38:e7:
4d:79:75:2c:9a:f2:08:b5:92:ef:18:54:d2:b7:40:
c2:e4:d7:a5:af:af:d5:0d:1d:8c:de:90:73:97:a0:
1f:bd:c0:65:15:10:92:5d:21:30:95:e8:f8:82:16:
0f:93:2e:bf:15:d7:13:09:9f:aa:12:58:61:b3:59:
94:24:94:0d:a6:ee:ac:83:b0:ff:df:f5:b9:66:40:
81:99:3a:bd:85:f0:01:2c:0d:99:df:91:69:8b:fa:
bc:38:08:af:3f:20:99:7c:f1:c1:71:84:a2:bc:4b:
13:69:e2:42:10:2e:a1:e4:8f:84:30:f3:09:7f:0e:
a0:0e:ea:01:c7:80:c1:b7:be:2b:9c:e8:ce:e5:30:
e5:48:fd:83:da:ac:48:e2:ab:96:71:bc:89:18:ed:
c9:a0:07:ce:4c:65:93:2f:dc:35:57:f0:5e:c0:8f:
d8:f3:da:25:9a:60:89:1a:2c:cb:aa:7f:c0:14:70:
03:25:3a:c3:1d:7f:27:f8:4e:a6:6b:5c:0c:35:a8:
ee:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:68:02:D5:6A:12:9D:6A:5F:40:86:82:62:3B:F2:62:2E:DE:A1:19
X509v3 Authority Key Identifier:
keyid:B9:21:27:7F:3E:79:54:A4:AF:55:20:A9:90:42:FB:08:93:AF:80:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uSEnfz55VKSvVSCpkEL7CJOvgE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/8ccbcc-cd51-44ae-8f05-36fd233514f9/1/uSEnfz55VKSvVSCpkEL7CJOvgE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:94:75:fc:e9:2b:fa:b3:6f:de:3e:5f:87:cd:15:b7:69:f9:
30:cc:d8:7b:e9:b1:99:fe:3c:a8:ad:ab:99:50:ad:2d:36:aa:
de:17:0f:68:b9:3c:ca:26:2a:05:72:d8:05:fc:b7:60:9d:d8:
12:13:6b:17:eb:21:93:3a:a2:0c:4f:8f:c1:71:56:a5:48:e5:
0b:39:85:93:44:61:13:0c:97:cf:43:70:49:8e:48:d6:d9:d7:
43:ae:fc:da:57:39:b6:ac:3d:3a:9b:f0:83:5b:e8:03:38:45:
3b:9b:3c:ad:42:95:98:05:f7:38:ee:ec:cd:da:81:9a:17:6a:
e1:9c:44:65:b9:fe:48:3b:ae:ad:70:ce:cd:8b:03:92:bd:7e:
91:85:49:1a:d6:dd:2d:a6:31:3a:34:c4:05:6e:9d:4c:4b:d1:
e5:a9:73:b6:d3:bd:40:86:56:ba:0e:69:44:00:0a:af:52:b2:
4b:31:35:0f:66:27:cf:e4:d0:ac:31:c4:70:49:c5:66:22:57:
8e:30:1e:d1:ec:10:5e:62:ed:e8:47:82:51:58:72:87:fe:a5:
c2:f0:da:45:89:ba:0c:38:85:9b:70:f4:42:0d:bf:92:41:46:
3d:4a:6b:4e:8d:c0:78:f2:e2:df:d9:de:ab:c3:e6:74:89:39:
b9:c0:c1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:30:20 2026 by rpki-client