Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: 4djYh4O+RrYhttfzeaUoxHtRGteLqW6/Ns+88fV/DP4=
Subject key identifier: 6F:B6:1B:BD:5C:45:AE:56:7C:52:C6:4A:AD:D1:B6:45:7B:BC:11:85
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019D277218F1DBC800DE318DBB3889E198F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0936
Signing time: Thu 26 Mar 2026 00:01:21 +0000
Manifest this update: Thu 26 Mar 2026 00:01:21 +0000
Manifest next update: Fri 27 Mar 2026 00:01:21 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: rn7zn3kfC0rCQddIT2v7+A/3o9HNbUJ6WhFu9O4ucI4=)
2: E6adBVtp7nLxPiQrU3zSgNDba-4.roa (hash: 9PUq5JqVFHdrujt3HOKJApo5N2oaCeMkCMZ1/k+YjXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:72:18:f1:db:c8:00:de:31:8d:bb:38:89:e1:98:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Mar 26 00:01:21 2026 GMT
Not After : Mar 27 00:01:21 2026 GMT
Subject: CN=6fb61bbd5c45ae567c52c64aadd1b6457bbc1185
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a8:ea:24:42:f5:e0:c4:4d:9d:85:7f:1d:41:
a6:ec:d0:01:50:3e:3c:94:e8:9a:cf:ef:62:28:f8:
e1:ec:58:19:68:64:c2:e2:1d:d7:54:33:c9:8c:08:
5a:65:3f:25:e2:ec:db:80:7a:65:2d:22:0a:1d:7a:
74:b4:de:53:b8:e4:8b:40:d8:6c:e3:b3:c5:f4:da:
90:30:0a:e5:5b:06:88:b7:9f:93:e8:62:fc:16:c7:
5a:ab:84:81:43:1c:4a:0f:fa:d6:18:7b:7b:9e:1f:
e7:2c:09:ff:4a:2b:ea:d8:7a:8d:63:cc:67:ed:5f:
5c:e0:57:2e:49:c1:df:c1:5f:d1:a6:ad:a5:e1:92:
ee:39:0f:bc:ef:c9:38:88:9d:9b:01:87:dd:15:6e:
73:3d:6f:68:0f:0f:ea:11:d6:ca:05:bb:c5:f9:de:
3f:53:fe:0b:53:06:34:34:7d:6d:f1:43:5a:ad:a0:
1d:e6:a1:21:a7:80:35:e2:fa:dc:bf:2d:12:38:88:
9a:77:ca:1f:7a:f3:fc:57:1e:68:58:d2:16:2e:48:
f0:19:84:bd:95:62:a9:bb:d0:7e:97:8d:15:f5:28:
6d:b9:c7:80:fd:5a:ed:99:e1:ca:e9:b8:b3:95:40:
a1:80:fc:90:28:a2:36:dc:00:09:c2:ad:b4:5f:c7:
c5:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:B6:1B:BD:5C:45:AE:56:7C:52:C6:4A:AD:D1:B6:45:7B:BC:11:85
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:13:e7:e4:b9:24:15:46:ad:1f:0c:16:59:20:43:6a:1a:d3:
71:0b:cb:72:86:fc:6c:86:18:ae:87:a2:d2:30:3b:ac:10:68:
bd:da:28:74:4d:3c:90:5d:bd:b5:41:13:78:4f:63:bc:cb:83:
65:42:3d:b4:6e:ff:76:ea:f4:bd:d5:ce:76:f8:b0:0f:e1:cb:
ba:4f:d1:3a:b4:fe:fb:4f:1e:c8:18:f2:7e:0c:fe:4e:a6:c0:
20:41:94:1a:40:0c:26:ce:a3:bf:96:05:2d:91:e8:e8:af:5a:
94:70:da:69:9d:8b:20:ab:d2:f1:a1:fd:d1:d2:b5:aa:9c:31:
7c:36:d4:10:4b:f7:01:4b:5f:5a:f2:73:0a:87:23:d4:7a:00:
a9:8a:9e:24:f0:24:5d:90:2b:9c:4d:f7:c3:ad:fe:b4:82:d0:
ab:66:a0:e7:e5:8e:e7:54:67:60:98:38:9a:59:a2:8c:58:38:
60:77:f8:5c:8f:15:fa:64:88:76:9a:b5:a8:c4:c8:30:fa:7e:
18:b1:54:7b:93:61:8b:ec:43:0b:c3:1c:84:40:ba:25:bd:dd:
4a:28:79:04:1a:c9:3a:21:c9:97:65:70:a8:e0:77:e0:f3:f2:
02:22:cf:08:d9:0a:8f:f7:7d:bf:a5:e0:87:e3:7f:1e:7a:fe:
60:35:97:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:04:12 2026 by rpki-client