Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
File: UAm8siUutkaQLMv9TJhssMK5E5g.mft (raw, json)
Hash identifier: otvm3POUTzeLPVuT7oMFX9pHWjKss51Zmcoi8vPR8Pk=
Subject key identifier: 38:36:DB:DE:B7:A9:7E:53:06:A7:81:D3:6F:49:27:69:DD:D3:A2:6D
Authority key identifier: 50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
Certificate issuer: /CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Certificate serial: 019DA189F0046C5F5F7939DF164B0A695530
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
Manifest number: 03D3
Signing time: Sat 18 Apr 2026 17:01:04 +0000
Manifest this update: Sat 18 Apr 2026 17:01:04 +0000
Manifest next update: Sun 19 Apr 2026 17:01:04 +0000
Files and hashes: 1: UAm8siUutkaQLMv9TJhssMK5E5g.crl (hash: OWTbGs9nAZ3TOdFo/MAvy7ZAYhwdtqHNGhczbhhaN60=)
2: s2NzqhDpn_MIzIu3sU4Nnz5OdmI.roa (hash: gFIZdnfNAaCxSgU4XX/5DvqZKxy3vUU3BhECHFZPGJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:89:f0:04:6c:5f:5f:79:39:df:16:4b:0a:69:55:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5009bcb2252eb646902ccbfd4c986cb0c2b91398
Validity
Not Before: Apr 18 17:01:04 2026 GMT
Not After : Apr 19 17:01:04 2026 GMT
Subject: CN=3836dbdeb7a97e5306a781d36f492769ddd3a26d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:62:5b:12:30:f2:04:79:bf:96:50:1f:6d:68:
31:ff:5e:ba:18:f8:97:a7:51:9b:41:52:81:ce:d7:
22:28:32:2a:f8:ca:97:1c:57:7b:fa:6b:8c:56:61:
90:1b:ca:a2:c4:89:6d:af:8b:68:20:98:c9:f5:a4:
14:7b:05:5f:51:74:8b:ed:3c:7e:d6:73:d7:9f:7d:
f5:da:53:b9:b7:43:fc:ab:f8:65:05:82:d0:3a:b0:
c5:c8:76:89:32:2b:85:83:a6:92:41:35:78:0c:1d:
4c:05:20:dd:06:03:6e:b8:a0:c1:e8:08:d9:43:7f:
1a:f6:84:48:56:c8:6a:f6:46:f5:de:f1:2d:a2:3b:
ce:fc:ec:13:c1:98:68:1a:16:6d:08:5c:2e:ed:d0:
e8:d3:38:47:fa:f7:32:b0:2c:b5:22:9b:d5:5c:66:
39:73:c5:86:ef:43:72:39:e7:ce:4f:5a:64:c2:62:
04:1b:27:c6:34:15:8a:fa:e0:40:58:ff:ff:4f:5c:
f7:dc:ac:0d:a6:34:dc:05:32:93:cf:68:28:80:37:
20:4e:c7:d5:f4:10:0d:7b:2b:33:3b:82:a1:26:de:
e9:ff:0d:3a:11:52:40:1c:6f:fd:a4:50:4f:e6:87:
fd:e5:cb:41:14:ca:f7:eb:dc:c4:36:73:f1:06:f9:
0e:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:36:DB:DE:B7:A9:7E:53:06:A7:81:D3:6F:49:27:69:DD:D3:A2:6D
X509v3 Authority Key Identifier:
keyid:50:09:BC:B2:25:2E:B6:46:90:2C:CB:FD:4C:98:6C:B0:C2:B9:13:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAm8siUutkaQLMv9TJhssMK5E5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f12d80-deb6-4bf5-853c-d5da858e15fb/1/UAm8siUutkaQLMv9TJhssMK5E5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cf:6a:09:99:c1:3f:0e:48:e5:08:8a:e2:75:8a:73:52:bb:
3f:71:0f:65:e1:0f:67:d5:49:13:2a:67:22:e4:6f:4a:59:af:
15:59:ff:2b:80:b1:8c:42:b1:51:14:4a:df:57:fc:61:96:45:
67:e8:ec:fb:ee:5f:57:92:44:1d:e7:f5:fa:fc:4f:88:b8:5b:
4a:df:4a:a1:fd:39:12:a0:54:81:04:36:af:5a:31:af:30:55:
c0:55:1a:bc:7c:a5:4f:6d:90:e1:b8:f7:28:0f:55:4b:ac:2a:
41:3d:2c:23:55:91:36:5c:9c:44:a9:fe:3c:95:e2:a5:09:6f:
af:92:ed:99:62:de:e6:fa:88:f2:8f:f6:22:d0:63:3d:b9:20:
4c:39:f8:65:80:02:d2:69:14:ba:f0:d7:07:d1:75:79:b8:55:
09:89:9b:f6:ac:bb:25:a8:2d:99:0c:d6:ba:36:c8:a2:1a:e8:
bc:3c:68:08:78:13:a5:62:58:4f:d2:44:04:a9:e6:d9:d9:a2:
40:8d:be:db:0d:00:6c:0b:ef:4a:36:1e:f4:2b:09:63:89:fb:
bf:21:f3:51:a3:b7:b5:b3:fa:fc:e2:aa:44:a1:d3:bf:4a:1b:
6f:1a:95:21:14:82:bf:bf:0e:f8:38:de:cb:ed:49:05:d4:89:
4b:d2:f8:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 23:44:24 2026 by rpki-client