Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: f8LqsPBkoYiWU9uUd8yjiAS1fdvgRSYfYKDwPtwf0P0=
Subject key identifier: 42:79:3F:F1:9F:3B:7A:13:E2:B5:FD:C1:A3:E2:25:90:25:51:1D:EF
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 019E205A6F0992CE8AC8A2CD37F6DE23EBDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0D80
Signing time: Wed 13 May 2026 08:00:57 +0000
Manifest this update: Wed 13 May 2026 08:00:57 +0000
Manifest next update: Thu 14 May 2026 08:00:57 +0000
Files and hashes: 1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: 2n7KsaLWwFp068TTO/iAr85BnFqCx4+25/1OWZ6EXkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:5a:6f:09:92:ce:8a:c8:a2:cd:37:f6:de:23:eb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: May 13 08:00:57 2026 GMT
Not After : May 14 08:00:57 2026 GMT
Subject: CN=42793ff19f3b7a13e2b5fdc1a3e2259025511def
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:82:ca:37:7c:3b:10:f3:02:01:f6:74:e0:be:
1d:6d:a2:fb:b8:17:40:3c:f0:b4:84:96:96:e3:f5:
47:52:d3:e5:eb:8e:73:dc:e1:e9:90:34:94:f2:f2:
2d:19:f8:c6:32:cf:51:87:1c:5a:5b:d6:2d:ba:82:
7f:da:eb:f9:d0:c2:1a:1d:f6:55:97:00:c3:72:42:
02:68:2d:12:4e:31:de:42:f8:c3:e2:7e:d2:9e:79:
27:ad:2e:68:54:b6:b7:22:84:57:68:e2:36:ec:46:
e1:7c:40:3d:4e:68:0c:41:f9:dd:bc:22:5d:19:49:
74:50:b1:73:cc:56:3c:c7:90:cd:76:7c:5e:60:17:
fc:03:09:bc:77:f2:53:84:a7:87:b2:a5:eb:0f:1b:
da:23:19:80:9b:58:da:a6:0c:c8:d4:b4:9a:c6:94:
89:98:ba:f7:e4:d2:d9:86:7e:60:fa:30:1b:c0:af:
a8:16:26:3a:49:8c:72:62:1f:a6:b0:10:cb:ad:b7:
2c:40:e2:e2:54:31:a1:ba:8b:9a:99:c7:60:d4:7f:
74:6d:b7:b2:42:2e:d7:8a:56:bb:d0:b5:18:f7:28:
c4:7f:59:0e:f2:42:ca:a3:f5:bf:43:a3:41:88:d1:
bd:10:08:7d:23:6b:d9:20:e9:19:17:64:58:08:cc:
48:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:79:3F:F1:9F:3B:7A:13:E2:B5:FD:C1:A3:E2:25:90:25:51:1D:EF
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:39:73:1e:0c:56:c5:7d:cd:3e:0a:97:5a:4f:d5:73:50:57:
80:2d:b5:9c:5e:33:68:7c:f2:e1:b4:67:7e:07:00:ae:7a:b9:
47:24:24:0f:0e:44:e6:1e:85:94:cf:71:85:ae:27:ef:5b:c4:
f1:be:3b:86:f5:b3:f9:44:38:6f:5f:83:0a:34:ee:09:3f:3e:
25:9a:4a:44:5d:a8:07:d1:ac:a3:65:a6:17:96:6f:25:ec:51:
bf:bb:68:30:d7:ec:b4:a2:13:a1:1c:35:86:10:7b:c1:0c:bd:
7c:c3:0a:b0:c1:a7:15:59:bb:ee:8b:02:72:c3:0a:77:b1:85:
18:2d:78:ca:22:3b:80:dd:3b:b5:b1:54:31:21:c8:95:12:93:
6a:b2:9a:4e:af:cc:7c:4a:02:af:41:a5:e7:e7:47:f0:d0:81:
e5:bd:57:3e:c2:2c:45:7c:36:6d:c4:2a:bb:bc:06:e9:ca:0e:
e7:2c:07:d5:31:22:8c:ee:d7:8c:71:ea:9f:06:db:a5:2e:11:
6f:0c:46:9c:38:9f:05:4b:81:a7:83:1a:37:19:cc:25:fa:48:
58:5d:51:37:a8:de:c5:1e:aa:c7:15:d3:d7:aa:55:1b:ca:b8:
2b:c9:5b:0e:f3:28:e8:df:49:4d:f5:a8:52:38:97:99:67:39:
26:f7:2e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:13:35 2026 by rpki-client