Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
File: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft (raw, json)
Hash identifier: bOyxHeqENZhFr/np+mhLyjFcVAM6YyW3JUcSl3vCXqI=
Subject key identifier: 63:6B:C2:71:57:98:10:31:8A:87:08:F1:14:42:C3:8F:56:90:94:2A
Authority key identifier: B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
Certificate issuer: /CN=b68f940f1cc577f370f28428850dc7bf7418f121
Certificate serial: 019DB27D2C7EBEDAA0120656FC7EB2D22739
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
Manifest number: 1057
Signing time: Wed 22 Apr 2026 00:00:40 +0000
Manifest this update: Wed 22 Apr 2026 00:00:40 +0000
Manifest next update: Thu 23 Apr 2026 00:00:40 +0000
Files and hashes: 1: ILGhz3ePO9oxIjIbV8ykYhaN2H4.roa (hash: VOXzwbv4ZGeGv9kyp7nhD/yFTySLzaFzJgbxt6Ep0+U=)
2: eU85RU0taQL8h-5P8OgU9OyopXY.roa (hash: 9O8C8fNo7lE1aPgGPT+DIp3qar7x4bHGxqk5sLTXTcI=)
3: to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl (hash: 7dp3g6atAbiISs2SkDJu8xr7WMQJtW8sZEeicvAmxD8=)
4: w1gMt94WQ5eAPDOTWGJbst0F5fM.roa (hash: qfjHzZsPbhZdXrk21Rq3gvOAzicOO4wsSfCE26q4PYc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:7d:2c:7e:be:da:a0:12:06:56:fc:7e:b2:d2:27:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68f940f1cc577f370f28428850dc7bf7418f121
Validity
Not Before: Apr 22 00:00:40 2026 GMT
Not After : Apr 23 00:00:40 2026 GMT
Subject: CN=636bc271579810318a8708f11442c38f5690942a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:82:1b:81:75:ce:3e:4f:2b:56:f1:73:5f:66:
4a:1e:18:06:04:c5:91:46:31:92:c7:69:5d:87:d2:
02:4a:1e:e7:ba:d8:c6:39:d7:ad:16:c3:36:05:76:
71:7c:40:3d:67:29:b7:7e:15:0b:03:42:21:55:55:
cb:f9:de:00:fb:f1:c1:8d:dc:6b:0b:4d:89:2d:fc:
5c:d9:d3:b4:a6:64:10:c3:4c:36:8d:c6:5d:fe:d8:
14:f1:8d:e6:19:58:6e:18:ac:80:6e:b8:17:ac:ca:
46:c8:60:78:36:6f:84:11:aa:c8:b2:7e:ca:34:5b:
71:c4:ff:e5:e1:b9:dd:d4:6e:92:96:78:77:0b:0a:
5f:42:ef:b1:18:bf:4d:80:bc:72:ec:60:31:2c:08:
b1:6b:e8:4e:fb:d0:42:ec:ed:8c:ba:f8:b2:3c:2f:
a3:cf:1f:9a:a4:11:bd:ab:fe:95:26:10:a8:b8:3d:
14:08:d3:cc:42:5b:ed:4b:ce:b4:60:d1:86:6b:d6:
e8:e5:bd:9f:88:60:fa:f4:62:a9:b7:ce:4b:9f:49:
71:36:19:83:1c:cd:c5:4e:4d:cd:60:8f:b5:25:bd:
af:82:f6:3d:7e:55:4e:d3:0c:c1:f1:f6:6c:2e:79:
1d:97:ca:a2:88:04:ee:21:3c:47:b7:d8:4e:0a:8d:
6e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6B:C2:71:57:98:10:31:8A:87:08:F1:14:42:C3:8F:56:90:94:2A
X509v3 Authority Key Identifier:
keyid:B6:8F:94:0F:1C:C5:77:F3:70:F2:84:28:85:0D:C7:BF:74:18:F1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4b2c23-f535-4b6d-a445-e04dac61ce9d/1/to-UDxzFd_Nw8oQohQ3Hv3QY8SE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:bb:ae:b5:ef:f4:54:38:e0:7f:91:51:b4:56:9a:75:f7:bc:
c0:1d:3a:c5:06:b4:37:3a:9d:4b:23:ad:0a:b9:74:4c:96:78:
0f:0f:a9:22:b1:e5:fd:e2:be:46:32:77:06:7a:28:11:5a:82:
41:4d:f7:b8:d1:86:b1:bc:7b:e4:54:1e:8f:c5:3b:31:c9:a9:
2c:0f:85:05:77:6e:82:67:82:3c:e8:e7:b8:5b:c4:b0:df:ed:
a0:5a:34:23:2c:8b:90:73:07:ab:02:43:da:e9:a3:59:bb:77:
64:97:74:cd:8e:ad:4d:ae:53:31:35:0e:48:8e:73:69:ee:4b:
47:ce:17:4c:a2:70:b5:eb:7b:f6:64:38:85:9f:e3:36:db:9c:
9c:a4:b8:2f:10:56:38:cd:17:ef:5e:52:28:7e:6a:92:11:0d:
df:cb:1f:70:e5:a6:1a:93:eb:52:0b:b4:27:5d:8a:4a:5c:6f:
3c:fa:ab:17:20:75:ec:32:10:e0:b0:12:cf:af:5c:22:41:d3:
c2:9d:9f:6e:12:2a:ed:4f:9d:14:5b:85:a7:bb:4e:76:7e:e9:
e9:26:de:0e:3a:04:e5:d5:96:06:e3:5b:51:ee:8c:41:7b:fc:
0e:97:85:ba:c3:4f:4d:07:56:44:a0:85:85:8b:97:38:27:9c:
3e:af:83:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:14:53 2026 by rpki-client