Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File: uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier: ei/IEIvDBoz2t+PyEIW+UN1DfjK2usKHH9lm7tszhqo=
Subject key identifier: 94:83:B8:C7:B8:80:BC:01:D8:26:24:30:C0:F1:FD:D0:E7:B7:67:D5
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 019D254CD357A6655226D0C8A6683B23D592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number: 09BC
Signing time: Wed 25 Mar 2026 14:01:24 +0000
Manifest this update: Wed 25 Mar 2026 14:01:24 +0000
Manifest next update: Thu 26 Mar 2026 14:01:24 +0000
Files and hashes: 1: 8lFiF1wAdPJ2hAxovfgzct_NPm4.roa (hash: Ym4lP51eot+4QlKi10WZ3Du5yp0u/4cXY/HYDj8vrhg=)
2: PQBF4mCa3EW8hiGZFACvo7VeAB0.roa (hash: 3SzioKnDZBjphhsMENR4RFeejxxcRYepmgMK0cqKv/c=)
3: RVqYqDFmLejp9z4p1E-tMkToPRs.roa (hash: r6z1fF1ZfXzZ4I9UfejqbJBDfNW9+C1iyzRk4WH7X5A=)
4: _PZxNVK3ihOQkmmWbE5y4TLIF2A.roa (hash: /xcnI68M7th+zMKJZ1ErNPWPaooK8PDshecxHkOyACQ=)
5: kXDi6qKHYQmt9htj9gX1rGIvybE.roa (hash: BHmjuxB6GlGS1nMnX38rPfHra7EH7TtxG/dDB/NIFmE=)
6: p4qnaEPq_svZSkXF-klfpg0p65s.roa (hash: tQNh+Gvsr0x1n4TN4e64P96eE9wuPHIZl8JmB3MbPK8=)
7: tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa (hash: DBCyB76gWKM0oz1E9E5WPf89Ch3ozcREuCeQGSM5Iw4=)
8: uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa (hash: SKB6ihyC1p2ZsFPesOzaFpazYcPyR0Cg//z7zQtbDxA=)
9: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: R2YlqFG0mUQq7DYuPZLhtbiw7xhZGcRYvidOobbkV7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 14:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:4c:d3:57:a6:65:52:26:d0:c8:a6:68:3b:23:d5:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Mar 25 14:01:24 2026 GMT
Not After : Mar 26 14:01:24 2026 GMT
Subject: CN=9483b8c7b880bc01d8262430c0f1fdd0e7b767d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:aa:21:e5:2d:8b:47:ec:39:e5:f9:6e:7e:ab:
99:e8:ed:b0:60:3c:bb:c1:79:b7:31:93:26:6a:4f:
ca:fb:83:44:7f:7c:b5:23:c4:a2:f5:dd:aa:c2:ee:
31:46:b7:21:04:e6:a0:5c:c2:32:aa:28:ee:01:d2:
99:e4:0d:81:48:90:b4:13:e3:a8:e9:d2:5b:f3:08:
d7:44:90:1a:50:cd:59:7b:60:0a:2c:a9:93:fe:eb:
30:e6:12:8b:72:a0:ea:31:b1:c2:d5:f2:32:ea:9f:
ab:ce:bf:09:38:6e:ac:8b:1b:8b:f9:e5:87:06:60:
dc:6a:79:84:db:48:6c:70:3a:6c:fc:96:89:32:bc:
9a:ce:bd:de:6d:29:1a:16:cf:91:99:e2:48:23:11:
28:0a:62:0a:df:77:a3:58:d6:be:07:f3:b4:89:33:
9b:6d:3f:0c:d0:2d:0a:c0:3f:e0:40:cb:90:a4:60:
b6:11:8a:ee:a5:84:84:e4:a2:fb:99:93:8b:67:c0:
fe:f0:17:7d:9d:54:41:63:72:12:cd:8d:b6:30:8b:
e7:26:ea:ad:56:63:71:fc:d7:54:8e:09:71:f3:94:
ef:d1:50:21:c9:5e:a8:89:19:cf:7a:b4:e8:1e:66:
8e:40:e3:39:4a:71:61:f2:c7:1c:2b:1f:c5:d9:f6:
34:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:83:B8:C7:B8:80:BC:01:D8:26:24:30:C0:F1:FD:D0:E7:B7:67:D5
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a3:23:3f:0b:cd:a8:6a:6f:d6:be:60:10:77:57:33:b9:4f:
b6:52:16:aa:00:e6:ee:a2:63:12:ad:fa:b0:98:e3:af:1b:78:
cf:e4:1f:d3:09:2c:48:31:88:d1:2e:e4:5e:0d:3d:a8:a7:c3:
c9:3d:3d:77:03:5d:19:66:a0:4f:3f:77:14:d4:52:5b:81:78:
0a:4a:48:fe:54:70:3f:3a:93:f5:47:1f:62:98:26:70:20:1d:
1e:a3:db:4a:59:27:51:c6:59:9d:76:ba:50:a1:bb:e6:c9:20:
6a:4d:3f:c9:43:f0:66:4e:99:ad:16:75:97:b4:fe:fe:26:7e:
e0:fc:c6:89:e6:0c:de:a1:ad:1c:16:30:5d:06:98:00:d3:ec:
e8:2c:49:fe:fa:61:bd:66:06:8a:77:22:d3:5c:66:46:35:6f:
7b:85:be:0d:39:c2:29:d3:a7:28:2f:bf:0f:0a:97:02:47:31:
c6:03:eb:2d:c9:c7:a6:c5:2d:8c:b6:e4:3d:76:77:b2:d0:c8:
7a:ac:80:7e:1e:55:68:7b:f6:28:06:fc:7c:6f:01:97:00:7c:
5f:be:6b:71:32:0e:8a:f3:42:92:cf:60:b4:13:a3:22:f4:b4:
57:e1:3b:c0:6f:78:50:cf:fd:78:8a:2a:39:03:c7:22:04:1d:
3a:59:50:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:22:15 2026 by rpki-client