Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
File: Uez5urycprrpCFzikvscLMGNNE8.mft (raw, json)
Hash identifier: JijMRrfuDCVVIhnvaxTPLdcSa1mUBfBocRcL1yb0aYw=
Subject key identifier: 54:50:2F:E8:C6:EE:B3:3A:26:97:66:50:C5:4C:B0:53:79:4C:E4:C5
Authority key identifier: 51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
Certificate issuer: /CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Certificate serial: 019DA678FFD36A3EECC8AE18E8154E28C08F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
Manifest number: 18D6
Signing time: Sun 19 Apr 2026 16:00:40 +0000
Manifest this update: Sun 19 Apr 2026 16:00:40 +0000
Manifest next update: Mon 20 Apr 2026 16:00:40 +0000
Files and hashes: 1: Uez5urycprrpCFzikvscLMGNNE8.crl (hash: YaLPajTzkMIQSALL5Kw/KcgVgU4IYzWwr35W0qohhY0=)
2: kIMbXdJtsDQKax2xphZaFN7nTGo.roa (hash: 0ama1VpnrdgMASVoDbU/VZGJ8RaYQqmTeKUTSxZsyFA=)
3: mhFszU5SEmptr5GI0ZcCS5h2GPE.roa (hash: nvx25tg/A55YxF5P3zlSkrAozJAeP8DAEDZ0+PHZPRw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a6:78:ff:d3:6a:3e:ec:c8:ae:18:e8:15:4e:28:c0:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ecf9babc9ca6bae9085ce292fb1c2cc18d344f
Validity
Not Before: Apr 19 16:00:40 2026 GMT
Not After : Apr 20 16:00:40 2026 GMT
Subject: CN=54502fe8c6eeb33a26976650c54cb053794ce4c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:5a:e9:3e:31:83:b2:1b:4c:f4:bf:9e:8a:8b:
d6:2f:e8:42:8f:cf:44:64:82:3b:50:ee:12:39:b7:
24:86:a4:21:0e:74:60:d8:83:73:db:3e:c7:4f:f6:
bf:db:18:ca:1c:d4:2b:30:a9:5d:bc:1d:7b:58:eb:
5a:dd:1b:ce:66:2f:53:1f:6e:d8:fb:62:83:7d:6d:
7c:98:d2:da:38:8d:c6:34:57:91:2f:29:4c:33:be:
d0:6c:a9:6b:41:f4:75:37:c2:b4:03:e3:bf:e5:f9:
32:cf:fb:2e:de:d7:82:c3:e3:17:e4:f3:dc:47:7e:
f8:7a:60:e9:d9:73:50:25:a7:3c:96:c3:e5:31:66:
72:01:33:b2:97:53:73:cd:31:69:e7:46:0b:8e:0e:
91:15:cf:06:4f:2d:b9:61:b5:6e:e4:a8:04:6a:ac:
4c:3b:21:57:06:b7:35:6a:65:c2:f6:ea:92:cb:86:
cd:69:ec:9f:e2:cd:07:22:b2:4b:3a:2d:80:d0:92:
dd:66:28:94:fc:0d:7a:4f:92:db:ac:dd:82:9d:07:
64:eb:08:b6:33:74:89:0e:c5:2f:04:5b:1a:d7:33:
72:be:71:78:43:c5:f8:22:f7:39:79:65:41:66:a0:
ca:b3:63:ad:d0:f2:ba:24:6a:90:80:95:5a:72:8b:
85:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:50:2F:E8:C6:EE:B3:3A:26:97:66:50:C5:4C:B0:53:79:4C:E4:C5
X509v3 Authority Key Identifier:
keyid:51:EC:F9:BA:BC:9C:A6:BA:E9:08:5C:E2:92:FB:1C:2C:C1:8D:34:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uez5urycprrpCFzikvscLMGNNE8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/fb04c8-7057-45b7-a34c-dcfc6a9e0dc7/1/Uez5urycprrpCFzikvscLMGNNE8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:69:43:30:5b:55:df:15:dc:b5:a2:49:a3:39:53:04:94:d7:
ff:ad:76:9a:68:b3:44:5a:e7:75:27:4e:4f:96:fa:af:81:9d:
e9:ee:17:dd:48:25:3b:96:5d:95:13:bd:10:c3:27:73:17:26:
f5:a4:11:78:0c:a2:3a:4f:ee:00:cc:63:9e:0a:be:90:05:a2:
68:28:07:d2:ef:46:a2:5f:40:b5:7b:7a:76:91:67:6d:90:07:
30:db:aa:2f:2b:11:46:51:a6:39:4f:e7:f3:3e:aa:ae:8c:0e:
35:c0:be:0b:ea:a2:66:f3:dd:30:ad:ab:18:db:4d:bc:99:17:
d0:30:e7:ab:2e:34:dd:b8:65:4e:7c:49:d1:6b:eb:73:88:9a:
02:b8:d2:ce:b1:dc:c3:33:80:41:e0:09:3c:f7:60:0a:60:05:
c2:b2:b6:31:dc:47:0f:5e:35:b5:f9:7e:06:05:1e:61:a7:2e:
11:6d:5e:5c:b6:2a:90:ed:4f:8a:95:1e:6e:6c:e7:4f:23:b4:
3e:0c:47:d0:85:9a:85:f2:38:6d:7a:de:f3:2e:b5:1c:f9:66:
93:0f:a0:48:af:22:99:74:f1:3f:e0:ea:6c:c1:43:ee:a4:b5:
87:ca:5c:18:ed:40:0e:9a:eb:b5:d6:2f:e4:44:b1:6a:7d:0e:
40:81:0c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:00 2026 by rpki-client