Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier: 0nUZnUWgAPEhemAykQ+Tcb/M1t07uOKFkCTWI6hH4Zg=
Subject key identifier: 14:D7:FD:F8:BF:93:E9:0C:95:67:34:6E:E2:27:41:A9:97:DF:C8:10
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 01A0D3F06F6AD471F599DE24BDCB3106C8A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number: 0AC8
Signing time: Thu 24 Sep 2026 15:02:24 +0000
Manifest this update: Thu 24 Sep 2026 15:02:24 +0000
Manifest next update: Fri 25 Sep 2026 15:02:24 +0000
Files and hashes: 1: E4sPSePQU0Utg0rJy2Bu8An_0ws.roa (hash: lddKB3Pjbr9HauWjyZqgv8uF8Jy8PbuIeHF9FT0DhEQ=)
2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: Hxhp62WZRHQz4OMYIOt0t4co3kTFYltIMmD3kmdgxZw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:f0:6f:6a:d4:71:f5:99:de:24:bd:cb:31:06:c8:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Sep 24 15:02:24 2026 GMT
Not After : Sep 25 15:02:24 2026 GMT
Subject: CN=14d7fdf8bf93e90c9567346ee22741a997dfc810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:24:62:1b:ff:66:16:32:29:db:2a:0e:f5:
3f:8f:ec:a4:ed:46:fb:d9:00:5e:66:90:57:89:7d:
d3:cd:4b:7e:30:08:80:f4:28:37:0c:56:6a:9f:23:
ed:8c:f6:84:9a:fa:7a:0b:0a:18:bf:4b:57:08:b8:
03:ce:e3:59:57:49:be:07:0c:77:1c:10:be:e1:bd:
d7:8c:f6:9a:00:32:87:fd:c4:9e:32:f6:ba:c9:f3:
22:c2:b7:5f:aa:76:fe:80:2a:b8:a1:c4:04:6d:9d:
c0:de:a3:fc:09:94:a0:03:bf:88:97:b1:88:4d:59:
50:12:84:3e:52:d8:56:06:82:c7:71:24:8f:4c:33:
29:e4:0e:b0:c2:a3:ff:17:b3:9a:96:68:70:49:a6:
a9:07:13:22:9f:01:66:0e:d0:81:9f:c5:0d:06:6f:
33:35:11:19:51:7d:8e:6c:3d:fd:14:f3:c7:49:7c:
e1:11:24:1f:a9:34:ea:1c:70:a0:54:0c:de:3b:42:
46:a4:db:32:a3:51:f5:c3:2a:c8:ab:7f:cd:68:e3:
02:55:dd:c2:57:38:39:94:c5:ea:8a:5c:14:65:cb:
b0:9b:53:3e:5c:2f:a7:ce:06:b5:d9:5e:1a:f8:b1:
9b:20:6e:e8:22:a4:97:af:b9:f7:bf:46:eb:11:b1:
e1:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D7:FD:F8:BF:93:E9:0C:95:67:34:6E:E2:27:41:A9:97:DF:C8:10
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:22:dd:34:24:b2:d0:ca:d1:c2:74:97:a3:46:65:1b:65:6a:
0a:9a:c6:7e:11:18:e5:35:9f:73:ae:e4:7f:b6:ae:9d:ac:3d:
46:cb:84:ce:72:52:32:e1:c0:37:e1:cf:9b:f1:bf:ae:74:53:
a9:bd:de:59:0a:29:05:bf:5f:d8:a0:30:ec:64:48:ff:86:4b:
64:f5:ab:48:9c:3c:9c:52:81:59:07:5b:bb:f5:50:9b:fa:66:
30:e6:04:3f:b4:50:68:46:1a:0a:dc:d1:3c:f5:d1:b0:05:2a:
8b:0a:2f:64:c6:08:39:24:92:72:39:81:fe:d7:c2:60:29:99:
df:f5:dc:ed:ce:93:77:63:39:f9:9b:14:26:23:7b:bf:34:43:
fa:6b:b0:15:43:54:5a:ef:33:2c:22:ef:54:22:43:55:e5:8b:
80:9f:f8:77:d5:d6:bf:2c:57:9a:eb:9c:1b:7c:00:25:d0:16:
ae:a6:e7:e7:cc:4f:a7:a0:d4:50:05:0b:b3:00:e7:42:f1:26:
0a:98:79:c1:67:dc:8a:75:e9:48:5d:62:dd:1a:d3:b2:83:49:
49:ad:17:f2:64:04:a9:2e:b0:85:d6:34:88:7f:1f:f6:ec:49:
31:6e:6a:43:27:d1:8b:20:e6:b3:db:da:1e:89:f7:8a:b5:e9:
8d:c3:a3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:01:13 2026 by rpki-client