Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
File: UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft (raw, json)
Hash identifier: 7ETG8s1bqbkF5+ZUhlZYwqPzDIRkiUAHPI7Ylmh+1u0=
Subject key identifier: F2:8B:73:C0:95:A6:A2:6D:E8:5B:75:81:96:7E:42:FD:C8:92:81:ED
Authority key identifier: 52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
Certificate issuer: /CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Certificate serial: 019DCFE32322373CA67FD0F3AB8617E29636
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
Manifest number: 1242
Signing time: Mon 27 Apr 2026 17:01:02 +0000
Manifest this update: Mon 27 Apr 2026 17:01:02 +0000
Manifest next update: Tue 28 Apr 2026 17:01:02 +0000
Files and hashes: 1: MA1FZ0Kd9wdwMtmBadU0hhtttm0.roa (hash: QAEnbojUEEoHhXNLCPe+Qwxb4hVhw+T32YK80jDjtFM=)
2: RnXeifK4Zy4z7Hr-0Qy9PPM8URc.roa (hash: HgjgyZAigQ/nEaAqI1161JCp8LT44pVwgm+Zp8Usqxs=)
3: StMbJtvRlQO14wUNmurXIGj_dCc.roa (hash: nRl9T6KCGuQWggl4v4cSteE2c3YQrGkaeT7wlEMK0FI=)
4: UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl (hash: 4Wxm9IwhZlhBDqOLSHVxY5BppMYHDTpOsd0B/JfKNF4=)
5: Z8pxDWhAuztTIIzKExdxnSnHjTs.roa (hash: 1hBbd5uxBcduETbV3q1xDGuzk2oS13nrjozvxJvpvno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:23:22:37:3c:a6:7f:d0:f3:ab:86:17:e2:96:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52a165dc3aafbe2c62e265ff104327a3e675f89f
Validity
Not Before: Apr 27 17:01:02 2026 GMT
Not After : Apr 28 17:01:02 2026 GMT
Subject: CN=f28b73c095a6a26de85b7581967e42fdc89281ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:39:1c:21:50:fc:66:dc:99:9f:6a:b3:ec:96:
89:54:55:a1:c2:56:75:04:6a:55:69:eb:67:3a:23:
93:7a:bc:9e:7a:59:ce:16:4c:c4:a8:a6:0d:c9:55:
36:16:3d:89:ca:54:ec:ab:86:1f:d2:19:24:a9:68:
bf:6e:36:53:fe:4a:ef:b9:e3:7f:9f:cf:f0:c7:37:
44:3a:e4:82:64:2b:4b:bf:fe:72:2f:68:17:ba:fa:
d0:96:89:f0:cf:9c:ed:d8:bc:92:34:c3:2b:01:aa:
de:c6:73:36:8a:eb:6a:ce:c3:3f:a1:2b:96:36:67:
2a:79:83:4c:cd:9d:4c:61:9b:f8:bc:96:10:a7:47:
31:19:99:9b:7a:59:86:42:5d:54:16:4b:06:57:07:
7a:21:af:c1:c4:88:40:8b:97:c8:40:a6:cc:00:a9:
4e:f7:4d:e7:c1:9b:5d:95:f6:3c:da:64:f7:56:04:
59:01:d5:79:6f:bd:0e:22:d9:7f:9f:56:3d:a7:e0:
d6:ca:0e:05:63:fe:1a:62:c6:6b:e2:22:99:64:41:
ca:cb:c0:e6:4e:a7:6d:11:eb:17:9a:c0:c1:38:84:
be:49:2f:2e:9d:5c:46:11:29:92:f8:4c:f1:cf:a7:
0c:7b:3d:01:b8:3b:39:52:3d:21:7d:2d:c0:ca:06:
71:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:8B:73:C0:95:A6:A2:6D:E8:5B:75:81:96:7E:42:FD:C8:92:81:ED
X509v3 Authority Key Identifier:
keyid:52:A1:65:DC:3A:AF:BE:2C:62:E2:65:FF:10:43:27:A3:E6:75:F8:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UqFl3Dqvvixi4mX_EEMno-Z1-J8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/80aceb-50e2-40c0-a852-e298b41b6c81/1/UqFl3Dqvvixi4mX_EEMno-Z1-J8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:2b:fc:97:7d:28:1b:49:45:ba:96:77:c9:ab:b7:d3:0e:2b:
17:cf:8b:7b:1d:02:d1:ba:c3:70:2f:39:1f:d5:3b:56:f0:37:
01:91:02:9c:e0:d0:45:7e:37:5c:5c:2d:5d:8b:a3:a3:98:a4:
22:81:e5:22:6b:83:32:67:3a:3c:e3:78:f5:bf:b0:c0:a6:12:
ef:1b:96:c8:9e:fa:0e:57:37:35:6f:55:2b:05:6a:79:d5:cf:
8a:2e:ed:4e:29:d0:f2:39:25:10:32:a3:c1:8a:b7:13:31:fe:
43:c9:3f:17:56:a3:dd:8e:7c:b1:66:7b:06:c1:58:cd:b3:38:
bb:31:2c:09:9f:4b:a0:99:8f:b4:23:70:6c:d9:73:1a:82:e8:
7b:e8:31:41:9c:27:1d:e5:72:a5:a7:d6:15:81:e1:03:d6:c0:
74:52:e1:9d:ee:a6:31:78:13:35:4f:bf:00:00:1b:ff:98:d8:
bb:2b:31:b0:c1:5b:36:d6:0a:0f:82:ba:be:1f:26:1f:1b:12:
84:a5:10:b9:9e:29:a0:3b:f1:1f:1d:be:e5:70:05:37:4a:07:
9e:c0:a6:ce:c5:fb:4b:43:44:60:a5:cf:7a:f5:12:5d:7b:8d:
c4:4f:ed:d9:c3:6f:04:c5:61:4e:2d:27:f4:5d:8c:79:04:48:
e9:aa:91:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:52:57 2026 by rpki-client