Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
File: _UbuR1knBIBFotZs-xySnt8cV3k.mft (raw, json)
Hash identifier: EBzPDLq2Ury+LTJRi5CN044j8m+1lOOjt8p3/2dy8FE=
Subject key identifier: 5D:68:AB:CD:A5:31:7F:2A:DE:A2:F5:1C:40:57:4B:A0:0F:14:4C:AA
Authority key identifier: FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
Certificate issuer: /CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Certificate serial: 019DA1F7FE1F89C8813A7940193A2B3661FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
Manifest number: 0228
Signing time: Sat 18 Apr 2026 19:01:17 +0000
Manifest this update: Sat 18 Apr 2026 19:01:17 +0000
Manifest next update: Sun 19 Apr 2026 19:01:17 +0000
Files and hashes: 1: _UbuR1knBIBFotZs-xySnt8cV3k.crl (hash: fslVLQA/SWByUDQgNHtQMNKollkXKbQL1xqd0qLjDv0=)
2: yncM80S6bhOyfcIc9bG9ql3nGdU.roa (hash: CZfd/HDwLXxhrOBjFBJhlZr9g1pP76QO2+w7mQygA1U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 17:59:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a1:f7:fe:1f:89:c8:81:3a:79:40:19:3a:2b:36:61:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd46ee475927048045a2d66cfb1c929edf1c5779
Validity
Not Before: Apr 18 19:01:17 2026 GMT
Not After : Apr 19 19:01:17 2026 GMT
Subject: CN=5d68abcda5317f2adea2f51c40574ba00f144caa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:13:81:98:f6:74:de:3f:8c:56:3d:48:f2:ff:
49:5d:52:5a:d9:5e:56:3b:e2:07:3d:e9:cd:86:72:
7e:65:94:ed:41:f1:fa:55:51:f2:6b:10:07:55:e4:
7a:b2:3c:94:76:cb:c7:29:bf:1a:8e:60:bc:9d:a5:
02:e6:77:8f:a9:43:7c:28:75:a1:30:8d:15:f8:9a:
cf:f4:be:47:6a:79:7b:e4:80:83:85:8b:6e:a4:57:
a5:a3:92:cc:71:e3:47:5d:d3:e3:35:cf:81:b6:e9:
b3:28:85:03:e6:64:f4:45:62:c5:95:07:34:6a:68:
7d:5a:ad:96:00:ed:7f:2e:c5:bf:92:e4:b3:e4:19:
a4:39:87:bf:ea:76:ac:82:16:0a:f5:58:f3:ee:e5:
2b:b5:88:ba:18:16:0c:4d:69:9c:07:45:b7:83:92:
06:1b:ce:3d:a0:99:af:18:5a:2a:fb:ee:3b:a1:fb:
f2:84:ad:10:98:10:5e:58:c9:71:c5:0d:f5:1e:c6:
d0:c4:2e:1b:2b:28:f2:6e:b2:32:7a:37:29:74:3b:
d7:35:61:c4:15:d9:15:c9:a9:a2:cb:45:02:24:17:
41:41:24:cf:98:7f:a8:21:2a:fb:35:c8:97:b3:44:
9d:82:89:43:99:84:48:7a:28:80:e5:2f:5f:0b:ce:
8c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:68:AB:CD:A5:31:7F:2A:DE:A2:F5:1C:40:57:4B:A0:0F:14:4C:AA
X509v3 Authority Key Identifier:
keyid:FD:46:EE:47:59:27:04:80:45:A2:D6:6C:FB:1C:92:9E:DF:1C:57:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_UbuR1knBIBFotZs-xySnt8cV3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/feea84-9fe4-4cbb-a270-21f15eaf5ee0/1/_UbuR1knBIBFotZs-xySnt8cV3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:19:5e:29:f8:8b:2e:3e:93:8f:1c:04:67:81:36:fa:b4:6e:
87:13:f4:71:f0:fd:8f:1b:47:6c:03:b8:d8:d3:9f:86:3d:38:
f6:11:11:20:78:f8:b8:92:4c:a4:6b:35:00:31:10:3e:dc:74:
89:52:40:b8:f3:0e:2b:64:82:e8:2a:c3:ea:0e:68:fd:20:05:
b8:7d:82:5d:82:80:25:78:f7:fe:11:f6:bb:8c:cc:71:a5:4e:
b4:c7:e4:aa:37:55:8b:31:ed:b4:82:07:44:be:31:72:81:9b:
19:42:38:bc:b6:c4:91:da:ce:80:ca:ac:42:88:08:99:7d:3a:
1c:bc:5a:5e:8f:00:9d:f1:a0:ca:ae:f3:9b:c7:01:02:2f:1d:
d9:2e:99:85:cb:0d:d1:16:b3:a1:72:3e:f2:7c:08:d0:3f:2b:
66:d8:fa:63:cc:1c:57:36:3b:96:92:41:22:2f:51:47:74:8c:
8e:e5:e5:55:35:04:c2:0f:85:1e:03:43:3c:a7:07:7d:9a:ee:
89:41:69:60:34:51:c5:a4:87:be:93:f3:05:ad:ce:91:b5:46:
0e:98:f6:3d:78:b6:bf:b2:5d:8a:9d:2a:8b:ed:c0:10:6f:e7:
ef:5a:c8:ae:d3:80:7b:20:ef:9f:cc:79:1a:70:d3:89:a1:7a:
27:da:c7:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 02:16:25 2026 by rpki-client