Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
File: U70JkochUqhtYNljuH0BgXwA_FM.mft (raw, json)
Hash identifier: +wrvcDeseUK5v1uChXAaSjiuBg02xwiTo5Uk+AYpbJo=
Subject key identifier: 4E:FC:73:D4:2D:20:51:85:4F:A8:8B:8F:5F:88:93:C2:E4:D2:19:60
Authority key identifier: 53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
Certificate issuer: /CN=53bd0992872152a86d60d963b87d01817c00fc53
Certificate serial: 019DCF06FB17AADC3D424068C897E31101F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
Manifest number: 18DE
Signing time: Mon 27 Apr 2026 13:00:34 +0000
Manifest this update: Mon 27 Apr 2026 13:00:34 +0000
Manifest next update: Tue 28 Apr 2026 13:00:34 +0000
Files and hashes: 1: S_bLPS21FFHSFgzqZbLQgGjdapU.roa (hash: ntP7qUH7mD4+qqNvUodX6WEcYgeevuhwX8/sIbaDqz4=)
2: U70JkochUqhtYNljuH0BgXwA_FM.crl (hash: bogb6/RQq27QNMaBtB/x+Bdrq3SmX2GdoAcpx/i0b0Q=)
3: vuogQOiw-NsRjP2TO25Dr4VGU1g.roa (hash: /xeIMQbmMftTFD0OnGKJGQk5eie+bKtG5JesE4wKpZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:06:fb:17:aa:dc:3d:42:40:68:c8:97:e3:11:01:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53bd0992872152a86d60d963b87d01817c00fc53
Validity
Not Before: Apr 27 13:00:34 2026 GMT
Not After : Apr 28 13:00:34 2026 GMT
Subject: CN=4efc73d42d2051854fa88b8f5f8893c2e4d21960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4d:21:ac:e5:8e:90:95:b8:82:41:a7:ca:33:
d0:d5:ff:c0:15:90:35:3f:fd:b6:20:a4:75:46:87:
c2:38:ab:fc:8f:1a:b6:27:84:33:98:c2:ff:a6:88:
04:5e:14:7e:e0:cc:03:85:6c:39:14:66:33:83:32:
0a:0e:1c:fc:88:fa:b6:99:0a:0f:f4:3d:4a:a9:13:
3f:3e:53:4e:e4:19:db:fb:0a:1e:6d:44:f3:09:ff:
a5:32:4f:fb:b6:62:cf:ca:23:bc:0e:cf:14:82:1a:
8f:de:9c:7e:51:e1:2f:5b:76:7b:27:20:6a:c7:66:
4e:4e:aa:ec:7a:88:b4:b2:ee:2a:3d:eb:62:03:a9:
64:f5:2d:c3:e7:46:d3:4e:ff:a8:89:29:2d:d8:55:
44:ef:dc:6a:d1:ca:f6:f6:39:64:11:36:4d:b1:87:
9c:ab:99:43:66:27:11:c5:aa:8a:77:4c:18:f8:de:
22:87:4c:b5:22:29:57:f7:38:e3:57:53:5e:44:ee:
17:24:67:3e:b8:7b:15:a2:b4:58:95:78:90:b4:5e:
95:51:f2:ad:57:17:32:53:71:53:03:e8:13:87:e9:
4b:8e:00:bd:f5:8e:0a:11:bd:99:1b:ae:fa:3b:80:
0d:d6:c9:81:20:6d:3b:b5:56:74:03:3b:6c:35:2d:
5f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:FC:73:D4:2D:20:51:85:4F:A8:8B:8F:5F:88:93:C2:E4:D2:19:60
X509v3 Authority Key Identifier:
keyid:53:BD:09:92:87:21:52:A8:6D:60:D9:63:B8:7D:01:81:7C:00:FC:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U70JkochUqhtYNljuH0BgXwA_FM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/6e264e-d6ce-42d5-b05d-e15f4f8409e6/1/U70JkochUqhtYNljuH0BgXwA_FM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:75:98:9c:04:7b:b3:b2:5e:dd:64:48:2c:50:32:6d:b3:6d:
40:f6:5f:15:40:5b:8c:5a:7f:cb:b6:7d:6a:7a:9b:cb:1a:7c:
13:ac:19:90:40:7c:e9:d9:4d:6b:25:f3:89:16:0d:96:e2:b5:
0b:c5:bf:08:1c:3b:59:dc:41:53:f8:23:d8:72:dd:f0:55:e8:
5c:39:73:7c:12:70:76:ed:a5:92:1f:6b:2c:1c:70:f0:02:cb:
51:02:c4:35:c3:a9:60:73:0a:b4:f3:ac:4f:d5:c5:96:0b:38:
a7:30:45:1f:af:69:03:6e:cf:90:69:d6:44:3f:a3:22:c8:ba:
fb:9d:41:51:f7:e2:cb:77:a3:8f:06:4f:0c:01:59:ee:ab:4c:
c0:dc:2a:de:f9:92:48:c4:e7:9c:90:80:a2:b6:2a:d0:3c:2d:
59:88:74:99:48:39:06:9b:11:9b:16:3c:73:04:31:b7:77:2e:
43:a7:3f:ba:e5:cd:3b:6f:c8:5e:12:67:08:99:d0:b5:38:62:
9f:f4:3f:48:ad:66:3b:23:f4:c3:97:01:77:fa:20:4c:83:37:
84:0b:66:41:3f:51:46:01:1f:a4:23:05:ae:66:1b:e8:44:45:
45:76:48:76:2a:9a:1e:9a:ca:66:bb:b8:9a:5d:62:be:b4:6d:
92:85:24:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 20:13:05 2026 by rpki-client