Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: JQgVtkPcr19HgRE7MGoJwSja4OlimXqJxnGcRAKRGu4=
Subject key identifier: 19:36:E5:6D:AB:42:2D:9D:14:16:F7:15:0C:1A:8C:81:80:87:5B:0B
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 019D29297D133F17B8B128430D710FF8F54C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0D00
Signing time: Thu 26 Mar 2026 08:01:17 +0000
Manifest this update: Thu 26 Mar 2026 08:01:17 +0000
Manifest next update: Fri 27 Mar 2026 08:01:17 +0000
Files and hashes: 1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: MKujkTFEhrjXjiinNm5I2Olgz6+STBv+GdawZLWW9S4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:29:7d:13:3f:17:b8:b1:28:43:0d:71:0f:f8:f5:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Mar 26 08:01:17 2026 GMT
Not After : Mar 27 08:01:17 2026 GMT
Subject: CN=1936e56dab422d9d1416f7150c1a8c8180875b0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:83:0c:3a:f2:25:21:f8:c4:2e:94:8b:60:
6a:de:0c:22:b5:b2:04:aa:4e:38:e8:7f:31:40:3c:
c3:b7:f8:28:62:3e:c3:fb:6c:26:a1:f3:a0:14:56:
96:0b:21:d3:ca:a2:33:91:b6:58:a4:f8:a4:57:5a:
e1:2a:b6:06:06:f2:cf:54:6f:ad:39:72:a1:9f:45:
80:6d:ba:20:d2:fe:04:a5:43:44:c8:0d:fb:7a:03:
1f:db:07:41:a1:cb:a7:c1:89:54:7b:2f:01:35:63:
db:11:9d:2a:0c:9a:a7:89:f6:da:71:cc:26:3f:90:
9f:a8:ce:b8:34:79:4b:ed:18:cf:1d:59:b7:2c:3d:
9f:bb:dd:8c:5f:79:8f:36:62:b2:c9:e6:ec:70:fb:
41:46:1c:50:de:b8:ce:47:01:4d:8f:6e:4a:13:c2:
37:36:f6:70:a8:a0:4b:94:3f:16:eb:9f:78:94:11:
86:cb:e6:18:2f:e0:1e:65:6d:50:83:22:a6:23:92:
09:c7:a1:a8:62:01:47:5a:4c:92:ab:84:5a:c4:c1:
0e:b4:32:e5:96:75:89:59:6d:0e:00:7f:ec:f1:29:
86:70:bf:eb:1b:ea:22:63:45:a2:fc:6a:86:c0:09:
9a:c1:05:43:85:71:c7:bc:8c:fb:4d:1e:8b:5c:4d:
1b:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:36:E5:6D:AB:42:2D:9D:14:16:F7:15:0C:1A:8C:81:80:87:5B:0B
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:c3:7f:00:4b:66:fc:c3:02:9f:ff:63:3c:76:1b:2d:f6:81:
28:76:18:31:85:d9:f3:d9:cb:bb:0e:b0:52:fd:22:e5:13:42:
05:e1:e9:6c:1e:55:32:57:a1:a6:6e:ec:99:20:c7:b7:ae:8e:
32:77:13:f1:14:4f:49:47:4f:4f:fe:b7:c0:2f:70:4f:e2:6c:
a2:39:95:ad:1d:52:07:7a:9f:4f:a8:48:18:62:20:3c:14:85:
87:62:32:59:12:36:10:2a:00:0a:53:2a:94:c0:b1:10:e9:d4:
ec:ea:62:f5:0c:94:61:58:51:d6:34:fe:07:f6:d6:79:64:13:
1a:56:92:a9:f8:a6:48:66:31:c1:5e:92:82:21:1c:79:7e:7d:
a6:da:99:2d:37:3d:75:c5:05:5b:32:b5:e0:cc:50:b7:f2:e0:
c9:53:e4:8a:b3:19:a8:dd:f6:72:34:87:da:5c:6b:47:f2:a8:
a5:84:8f:0f:41:d1:5a:06:7c:62:0c:b4:b6:5a:5f:f7:02:d6:
18:ce:31:6d:53:b6:59:38:d7:4a:96:c0:68:48:ba:24:ad:c3:
7c:84:20:12:ad:85:ec:04:b0:ec:ae:5d:06:3d:f0:0e:01:cb:
33:e9:5b:b0:f5:7e:f5:ef:72:73:33:4e:4a:6f:cb:98:fc:ac:
7e:af:5e:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:08:25 2026 by rpki-client