Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
File: uqpkzSnJTM3hREj2GhcsdjseQFA.mft (raw, json)
Hash identifier: kTgGDNSeWoL86H3negQaZc9oIUFN6irpgNAr4KLEZHY=
Subject key identifier: E9:49:FC:0B:F6:C3:4D:1E:1A:9B:42:25:2D:D7:C4:DF:FA:F9:D4:12
Authority key identifier: BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
Certificate issuer: /CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Certificate serial: 019D265EE5C673D4DA95752A9AB9AC7AA450
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
Manifest number: 08DF
Signing time: Wed 25 Mar 2026 19:00:46 +0000
Manifest this update: Wed 25 Mar 2026 19:00:46 +0000
Manifest next update: Thu 26 Mar 2026 19:00:46 +0000
Files and hashes: 1: ZYYW2YyeBb0Vke3KSj4OjgEGFfc.roa (hash: u7pN5ljdbNEvOih+IElC9REF80H4zBHq4YEQ5TRtftU=)
2: uqpkzSnJTM3hREj2GhcsdjseQFA.crl (hash: jKmh4sddz3XK6x/wSbTf9dF2xmT4xOC6Ka39/Rj35iw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5e:e5:c6:73:d4:da:95:75:2a:9a:b9:ac:7a:a4:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa64cd29c94ccde14448f61a172c763b1e4050
Validity
Not Before: Mar 25 19:00:46 2026 GMT
Not After : Mar 26 19:00:46 2026 GMT
Subject: CN=e949fc0bf6c34d1e1a9b42252dd7c4dffaf9d412
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:cc:b0:17:81:33:d0:e2:74:e9:59:a9:72:aa:
2d:ce:a9:22:63:4f:eb:cd:ec:51:9b:55:42:05:07:
2a:4e:27:f8:7c:94:df:42:71:45:ba:9e:2d:b1:8e:
89:0e:91:35:2c:13:5a:a9:9f:f9:0d:1b:8d:f8:43:
e3:8e:d1:5d:04:cb:b9:0f:a2:bd:d3:11:ab:0a:10:
61:23:e1:43:f7:02:07:8f:e6:a8:dc:46:98:72:5f:
df:e8:66:cb:0e:ab:fc:30:45:7f:95:4e:3c:40:6a:
c9:9e:41:18:21:af:a2:5a:9a:25:ef:34:4e:b6:de:
eb:88:25:66:ae:b2:b3:aa:90:e0:07:30:b6:4e:a8:
c3:5a:89:57:51:27:72:cb:2a:a5:7c:63:0a:c8:ee:
2c:5d:28:4c:20:f4:f1:5a:15:9a:c8:bd:6b:eb:cb:
f4:27:8e:24:77:18:8b:50:4e:1e:8f:1a:c5:98:26:
1d:29:cb:3e:c5:f2:06:c4:ce:5c:aa:39:e2:8b:cd:
e7:09:ca:2b:00:45:9a:15:a5:f0:18:42:9e:1c:e6:
1b:3c:1f:d9:b7:9f:ba:41:b9:fd:a0:32:e8:33:14:
f1:64:5a:22:25:6d:39:5b:75:b6:61:df:c0:21:29:
c8:dc:86:4f:57:83:e2:f9:43:f6:6c:9c:7d:89:9b:
b9:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:49:FC:0B:F6:C3:4D:1E:1A:9B:42:25:2D:D7:C4:DF:FA:F9:D4:12
X509v3 Authority Key Identifier:
keyid:BA:AA:64:CD:29:C9:4C:CD:E1:44:48:F6:1A:17:2C:76:3B:1E:40:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqpkzSnJTM3hREj2GhcsdjseQFA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/71f439-2b1b-4ef0-b6a5-8fcaa6936c6c/1/uqpkzSnJTM3hREj2GhcsdjseQFA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:09:b3:f8:0f:8d:68:50:af:ef:55:e7:f2:2b:7b:2a:58:f8:
e1:1a:61:9b:53:40:b6:12:e4:7f:5a:9e:d1:af:45:a8:22:ec:
44:77:eb:e1:37:13:43:2a:9b:d4:cd:e8:ab:7c:f3:38:fb:5c:
79:41:b8:ed:1b:10:6b:53:ec:e5:7e:71:3d:78:9b:74:e1:c0:
f9:25:d1:13:e3:a2:6e:c6:4e:0e:d0:7e:09:15:35:de:ee:1d:
4b:dc:6d:bc:f3:af:ed:74:d5:d3:06:b7:11:71:f8:a6:55:73:
50:b7:6c:34:6d:b6:0d:8a:05:f0:a1:b1:73:61:eb:ae:4f:10:
53:cd:db:d1:0a:67:0c:c3:78:1a:b4:c4:6f:1b:cb:fe:e8:85:
9c:fe:93:7f:bc:4f:97:2c:d7:76:fa:27:44:bd:12:55:1c:1b:
6c:5e:97:04:08:2f:a3:fd:46:07:d7:ca:6e:a6:8e:61:e7:93:
6a:43:c5:fe:42:59:a3:5b:91:74:1d:c2:41:2d:f0:58:f9:6e:
60:b3:9b:2c:50:fc:bd:39:34:d0:7e:be:9f:ef:5a:01:67:31:
68:0e:47:71:9d:3c:c5:a1:e8:85:07:c9:f2:97:d3:4f:77:03:
87:33:9c:14:aa:ff:6e:ec:37:91:e7:7f:81:04:c0:30:e3:32:
f7:31:56:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:58:29 2026 by rpki-client