Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: 4MNJ1W7iVPSJsEeWn9BtYPRybIEx2WH8K3rfPT5+e+g=
Subject key identifier: D2:C2:7A:0C:E4:66:EF:A2:0B:C2:1C:54:17:BA:3E:09:80:78:F9:AE
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 01A0D5DD997CDC1252660BFBFF2F223C7D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0B1E
Signing time: Fri 25 Sep 2026 00:01:04 +0000
Manifest this update: Fri 25 Sep 2026 00:01:04 +0000
Manifest next update: Sat 26 Sep 2026 00:01:04 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: C+wOpDHAIZydEhwTmDNuqt/dv8Db7DczX5HedDbOZZg=)
2: E6adBVtp7nLxPiQrU3zSgNDba-4.roa (hash: 9PUq5JqVFHdrujt3HOKJApo5N2oaCeMkCMZ1/k+YjXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:dd:99:7c:dc:12:52:66:0b:fb:ff:2f:22:3c:7d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Sep 25 00:01:04 2026 GMT
Not After : Sep 26 00:01:04 2026 GMT
Subject: CN=d2c27a0ce466efa20bc21c5417ba3e098078f9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:a6:b5:d8:3d:e9:83:7a:ca:84:3d:ae:1d:fa:
34:41:ab:37:d0:7c:b3:42:ef:f8:04:4e:96:55:06:
5e:c6:49:b6:62:3b:96:85:2b:59:ba:16:a9:39:b3:
a2:24:b2:5f:13:ce:c0:76:0c:51:08:67:b5:37:ad:
16:f9:93:e8:ab:54:27:55:26:81:55:58:ac:5c:14:
ab:22:1e:8f:89:ca:0d:9d:74:a8:f5:85:c2:87:59:
82:47:1a:b9:19:0e:3f:e6:61:03:9a:50:53:c0:27:
52:80:5f:78:f8:ea:37:30:31:98:6b:81:31:d3:57:
74:b7:3d:62:6c:70:f1:34:62:5b:ea:2e:40:43:b2:
e2:98:1c:75:8c:fd:33:98:dd:2a:73:85:ba:6c:bd:
2b:be:48:4a:d4:3c:6c:67:ba:e4:b3:19:15:ef:ef:
a7:bd:fd:31:e3:12:25:26:ae:38:d3:66:6a:98:91:
81:24:4f:a0:a4:7d:e1:11:a6:27:bd:88:60:c9:d7:
4d:21:2b:95:fd:21:05:b8:bc:e0:ec:88:3f:9b:16:
f5:c0:34:e6:4e:08:b2:79:4c:0c:13:d1:cc:60:45:
95:65:bb:78:93:85:3c:aa:8a:40:76:60:53:3f:27:
ad:0c:2d:29:97:0a:5b:dd:18:0c:d7:59:6b:7f:8b:
26:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:C2:7A:0C:E4:66:EF:A2:0B:C2:1C:54:17:BA:3E:09:80:78:F9:AE
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:26:b9:c7:8a:30:05:4b:6c:62:00:d7:db:aa:d6:8c:79:e3:
88:77:18:1f:59:66:cd:b0:55:d6:55:7f:9f:e7:1b:df:cf:68:
ba:dd:c8:1b:42:ea:44:a4:4b:a5:a0:19:9e:83:36:91:45:6f:
6f:b0:50:ad:00:fd:f4:a4:75:6b:06:f4:5a:b4:f2:6b:87:fb:
7c:b7:84:e7:bb:60:ce:ad:33:e9:db:eb:72:67:8d:85:d8:a5:
b1:a2:6d:35:8b:c4:9b:48:23:50:65:8d:45:f5:6a:32:30:b2:
6e:4b:3f:bc:75:fb:ed:89:76:38:fc:1c:d7:e0:c0:b5:95:0a:
44:4b:25:29:32:f1:89:c9:02:80:d9:90:4d:9b:13:16:e8:a6:
5d:1c:fd:58:4b:3e:a4:73:b5:cd:4d:ed:9b:00:79:f0:d4:1e:
31:58:2c:78:c1:59:f3:f2:f4:86:b9:56:1b:db:cb:62:4b:f7:
71:b1:a4:11:71:82:af:3d:0c:3b:55:93:6b:2e:a9:82:96:28:
b6:ba:2f:36:ab:0e:16:3d:17:2e:36:e4:a8:14:c1:9b:09:f6:
a1:3e:90:72:a8:78:fc:92:27:80:d2:90:37:d9:53:2c:8a:3f:
d9:d5:b4:81:c4:c7:8d:a8:2a:83:56:90:1b:ac:f0:f9:43:b6:
5f:45:9f:10
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaDV3Zl83BJSZgv7/y8iPH0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTY5ZjBhMjllZjhkOGMyMmQ5ZDZlY2RlM2EzMDdkODk0
ZDVjMTkwHhcNMjYwOTI1MDAwMTA0WhcNMjYwOTI2MDAwMTA0WjAzMTEwLwYDVQQD
EyhkMmMyN2EwY2U0NjZlZmEyMGJjMjFjNTQxN2JhM2UwOTgwNzhmOWFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaa12D3pg3rKhD2uHfo0Qas30Hyz
Qu/4BE6WVQZexkm2YjuWhStZuhapObOiJLJfE87AdgxRCGe1N60W+ZPoq1QnVSaB
VVisXBSrIh6PicoNnXSo9YXCh1mCRxq5GQ4/5mEDmlBTwCdSgF94+Oo3MDGYa4Ex
01d0tz1ibHDxNGJb6i5AQ7LimBx1jP0zmN0qc4W6bL0rvkhK1DxsZ7rksxkV7++n
vf0x4xIlJq4402ZqmJGBJE+gpH3hEaYnvYhgyddNISuV/SEFuLzg7Ig/mxb1wDTm
TgiyeUwME9HMYEWVZbt4k4U8qopAdmBTPyetDC0plwpb3RgM11lrf4smsQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFNLCegzkZu+iC8IcVBe6PgmAePmuMB8GA1UdIwQY
MBaAFPrmnwop742MItnW7N46MH2JTVwZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11YWZDaW52all3aTJkYnMzam93ZllsTlhCay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZDQvZDEzNTlmLTM1NGUtNDU2OC04NDBj
LWFmNTBhNWJlMjgwZS8xLzEtdWFmQ2ludmpZd2kyZGJzM2pvd2ZZbE5YQmsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Q0L2QxMzU5Zi0zNTRlLTQ1NjgtODQwYy1hZjUwYTViZTI4
MGUvMS8xLXVhZkNpbnZqWXdpMmRiczNqb3dmWWxOWEJrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYia5
x4owBUtsYgDX26rWjHnjiHcYH1lmzbBV1lV/n+cb389out3IG0LqRKRLpaAZnoM2
kUVvb7BQrQD99KR1awb0WrTya4f7fLeE57tgzq0z6dvrcmeNhdilsaJtNYvEm0gj
UGWNRfVqMjCybks/vHX77Yl2OPwc1+DAtZUKREslKTLxickCgNmQTZsTFuimXRz9
WEs+pHO1zU3tmwB58NQeMVgseMFZ8/L0hrlWG9vLYkv3cbGkEXGCrz0MO1WTay6p
gpYotrovNqsOFj0XLjbkqBTBmwn2oT6Qcqh4/JIngNKQN9lTLIo/2dW0gcTHjagq
g1aQG6zw+UO2X0WfEA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 03:50:45 2026 by rpki-client