Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: cdYcZSzPektjpVddJGC8wkl4VW7d+DQ33GiVmWu5zjI=
Subject key identifier: A4:DC:A5:11:FA:FE:37:00:43:48:B1:13:BA:5D:4B:B3:17:AD:1C:83
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019F8F7FB6C75456495F2D44128BB1759EC1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0A75
Signing time: Thu 23 Jul 2026 15:02:19 +0000
Manifest this update: Thu 23 Jul 2026 15:02:19 +0000
Manifest next update: Fri 24 Jul 2026 15:02:19 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: XHUxLyazbL7+tPeq9qYQkkbSXPJT37UHTe2nzo2XRb0=)
2: E6adBVtp7nLxPiQrU3zSgNDba-4.roa (hash: 9PUq5JqVFHdrujt3HOKJApo5N2oaCeMkCMZ1/k+YjXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:7f:b6:c7:54:56:49:5f:2d:44:12:8b:b1:75:9e:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Jul 23 15:02:19 2026 GMT
Not After : Jul 24 15:02:19 2026 GMT
Subject: CN=a4dca511fafe37004348b113ba5d4bb317ad1c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a5:89:51:78:44:aa:61:ca:19:04:b5:5d:98:
43:1f:fb:a0:0b:ec:42:09:11:e7:13:42:38:b7:ae:
9c:52:6c:05:ac:75:d6:0f:1b:2e:24:f5:f5:5a:7e:
e7:55:4c:1b:67:9f:b0:7b:d8:5c:aa:2a:0b:d0:56:
13:d3:76:a0:88:8a:55:f8:6e:3f:c1:dd:7e:ad:46:
f7:73:22:bd:96:5f:8f:7e:87:36:8e:af:3e:4b:e3:
0f:13:56:88:46:06:c8:24:17:4b:b9:70:3d:6f:81:
6e:34:15:fc:1b:df:f9:23:1e:b5:09:c1:17:8a:83:
65:bd:be:a4:f1:4f:57:b2:35:64:87:bf:06:fb:c3:
80:0c:14:a8:ef:5b:e9:73:b3:06:03:79:0b:60:0d:
5b:05:c6:ce:2b:dd:1d:0b:ee:9f:6b:65:4d:e8:2a:
d9:3f:b6:64:6d:60:74:67:83:01:23:b8:4c:36:66:
ec:f5:5d:bc:4e:7d:c1:c5:3c:e7:01:90:85:67:ce:
4e:ed:fd:d5:f7:d7:d0:7f:08:bf:9b:57:de:55:2e:
8f:d0:0d:48:f3:33:aa:9d:4c:2c:aa:c6:76:47:27:
da:59:36:76:a3:c9:7f:af:14:8f:7d:59:ba:0b:ba:
1a:36:77:23:af:ed:fa:28:bc:26:a2:c9:d5:86:f9:
64:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:DC:A5:11:FA:FE:37:00:43:48:B1:13:BA:5D:4B:B3:17:AD:1C:83
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0e:1b:d9:8f:a0:6b:52:2b:34:4e:5b:95:6b:51:fb:a0:2c:
66:c0:b8:24:ce:21:f2:28:dd:d2:5a:84:80:a1:92:fc:3b:ea:
dc:5f:b1:c6:eb:c5:89:d2:12:de:c2:c1:bd:13:7d:c4:85:15:
17:42:43:6a:88:4f:fb:70:28:3a:00:72:3e:4b:c1:7a:5c:ea:
c7:5a:d2:55:8d:eb:91:a1:08:a5:e0:6b:e2:57:04:0b:20:ea:
e9:ce:55:d9:dc:0c:24:1f:d6:2f:a9:81:fa:5a:14:9f:0f:3c:
58:e2:08:a3:23:ab:7b:7a:9c:2a:ac:24:4b:ff:7e:c5:0d:8b:
b0:f0:40:51:d4:a0:d1:aa:56:ca:63:99:1a:86:c9:51:80:58:
36:ed:98:5e:d4:92:dc:a1:77:75:09:51:65:9f:74:82:41:b7:
26:8a:90:0a:9d:4d:1a:03:30:e9:0a:d6:bb:e6:5d:38:80:35:
29:e3:21:6e:37:94:40:60:3a:5a:04:9b:e1:a5:1a:73:36:9c:
93:b2:25:16:3f:d8:48:0a:bf:11:f1:f6:43:7b:d6:3d:38:1b:
55:33:2f:7a:87:5e:aa:7e:97:94:c5:cc:5c:51:d6:c0:3d:36:
07:0a:28:93:0e:d2:6d:22:de:c9:10:10:08:d2:61:d8:8e:87:
79:4e:08:c8
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ+Pf7bHVFZJXy1EEouxdZ7BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTY5ZjBhMjllZjhkOGMyMmQ5ZDZlY2RlM2EzMDdkODk0
ZDVjMTkwHhcNMjYwNzIzMTUwMjE5WhcNMjYwNzI0MTUwMjE5WjAzMTEwLwYDVQQD
EyhhNGRjYTUxMWZhZmUzNzAwNDM0OGIxMTNiYTVkNGJiMzE3YWQxYzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7KWJUXhEqmHKGQS1XZhDH/ugC+xC
CRHnE0I4t66cUmwFrHXWDxsuJPX1Wn7nVUwbZ5+we9hcqioL0FYT03agiIpV+G4/
wd1+rUb3cyK9ll+Pfoc2jq8+S+MPE1aIRgbIJBdLuXA9b4FuNBX8G9/5Ix61CcEX
ioNlvb6k8U9XsjVkh78G+8OADBSo71vpc7MGA3kLYA1bBcbOK90dC+6fa2VN6CrZ
P7ZkbWB0Z4MBI7hMNmbs9V28Tn3BxTznAZCFZ85O7f3V99fQfwi/m1feVS6P0A1I
8zOqnUwsqsZ2RyfaWTZ2o8l/rxSPfVm6C7oaNncjr+36KLwmosnVhvlkNwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKTcpRH6/jcAQ0ixE7pdS7MXrRyDMB8GA1UdIwQY
MBaAFPrmnwop742MItnW7N46MH2JTVwZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11YWZDaW52all3aTJkYnMzam93ZllsTlhCay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZDEzNTlmLTM1NGUtNDU2OC04NDBj
LWFmNTBhNWJlMjgwZS8xLzEtdWFmQ2ludmpZd2kyZGJzM2pvd2ZZbE5YQmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q0L2QxMzU5Zi0zNTRlLTQ1NjgtODQwYy1hZjUwYTViZTI4
MGUvMS8xLXVhZkNpbnZqWXdpMmRiczNqb3dmWWxOWEJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOA4b
2Y+ga1IrNE5blWtR+6AsZsC4JM4h8ijd0lqEgKGS/Dvq3F+xxuvFidIS3sLBvRN9
xIUVF0JDaohP+3AoOgByPkvBelzqx1rSVY3rkaEIpeBr4lcECyDq6c5V2dwMJB/W
L6mB+loUnw88WOIIoyOre3qcKqwkS/9+xQ2LsPBAUdSg0apWymOZGobJUYBYNu2Y
XtSS3KF3dQlRZZ90gkG3JoqQCp1NGgMw6QrWu+ZdOIA1KeMhbjeUQGA6WgSb4aUa
czack7IlFj/YSAq/EfH2Q3vWPTgbVTMveodeqn6XlMXMXFHWwD02Bwookw7SbSLe
yRAQCNJh2I6HeU4IyA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:03:34 2026 by rpki-client