
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
File: uqDyWO70sr9LuqhDDB5YyowYjqc.mft (raw, json)
Hash identifier: vUB6R94LExGMcLAzM2ckUX8QLOmpdSG+iNxRu56K9Tg=
Subject key identifier: C3:6C:97:DD:60:C4:C5:A5:65:D2:A7:00:FA:FE:73:26:1A:B9:9A:58
Authority key identifier: BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
Certificate issuer: /CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Certificate serial: 019D9A0766345F3B34FCDD422FC7129BC6D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
Manifest number: 0403
Signing time: Fri 17 Apr 2026 06:01:09 +0000
Manifest this update: Fri 17 Apr 2026 06:01:09 +0000
Manifest next update: Sat 18 Apr 2026 06:01:09 +0000
Files and hashes: 1: 4NtXU3o0i9nTQ0aPnN0oHNUECOE.roa (hash: 3YYvrIPQh3ZlkWIDJWGzPef2omYQb9s0JIFyF3ZtUx0=)
2: 6WDkbHlgSXxNJbB0drss0reruS8.roa (hash: oFDNB9590aZJb3RqzjukoKFlQp5/LXVYXoZGCKhDyHQ=)
3: 7_KuEvRi_14zb6ajXHwy-1HJpm0.roa (hash: y9zbrYx6KIqniGx302kiI/eIzCLca5mKO3xeDDaCZf0=)
4: 8K0KdrfhqUloGiC916NzfAFxh-c.roa (hash: drOaS31gZWGo628/BltbevehLEyrF74VNJF1nPIwijA=)
5: CHm4uxJXlMUd0r5QClzcF966Ijw.roa (hash: s8FUQD2MuDH7rbiip50DyRQrMult5B8vV44+OSbORFQ=)
6: Dx-Vy-swUiVNsZKUlolPXBZOZMI.roa (hash: 5aft0BRUbiVKXn588IybsdkKIbt9YKxjDesbktvL34g=)
7: Ke-GAW7E6yplbOZiIO0l5zT0Fic.roa (hash: soIv2LC8f5IdezvuoAAVJw8fZgLBnWGjy9O5qvDQ/+M=)
8: MsSKYSaiVUmdk4uw5DxmwFovsBo.roa (hash: gN7/7u1mFNWenCLCWkwGkblcTcu1MaRBKEfwH1Z/T9Q=)
9: RwhCBNFrzcUzyEWsFVoiT8IdNVo.roa (hash: r7grjzieZGND+TLUxKczhr2oesywsPmZIS/b0+pyM6k=)
10: SnhR0ywSazNW_LooQ-7w3mnox3s.roa (hash: sf6HWA102jlf5D1wHL5U+yeNTKyY8TOBcCejfejACe0=)
11: WskagO6bCwTQcwB7d_fzf3cdeI0.roa (hash: uVNMY6xrkiM26LXeGtpPm7fSn/FV5Pa+qtC9Vr6WBRk=)
12: YuYmQaJNtuOBq3fPKH-8v6Xr9Qk.roa (hash: U5rEQ3u5XOjHhPmf1nGbyQ/BjTbyBdisgzm75iFjhvQ=)
13: dqsYbbjCxnAptr8zjkd-iezgLz4.roa (hash: 1Yhk6OnIeIea3uiPYWd+rgtl98a+2OVsjXwz+GeFDuw=)
14: n4PyCzNuArzvMMSs4_9M2Rr_Pcc.roa (hash: v767wGXxzM+38xa2Dth+I2XGtOv/gRqhBPQGRj3YQas=)
15: pVK-BRQ98HDM69ZQ63Bm0uZRCXs.roa (hash: jvRqREvNlJK1CxR23zptuMNPkMy0b8MVlSlIgEiP7u0=)
16: s2DbXwViqvH_t7XGoYjUHT_R1ZQ.roa (hash: OmXK2hMqfTiOv63cfpCHEUHp32DpOlQUjEVCGC0CAvA=)
17: uqDyWO70sr9LuqhDDB5YyowYjqc.crl (hash: YxorSiTBA79ty6jgFSv+eUIvIPKWxblQTA4jdEZXbbg=)
18: zBKsN_Z6ioe9fqLCU_PChTHrs6A.roa (hash: CJ84WrCESQrejSbSiz0bPJ4g2Cfe/qkxFBCMR3bVRlE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:66:34:5f:3b:34:fc:dd:42:2f:c7:12:9b:c6:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa0f258eef4b2bf4bbaa8430c1e58ca8c188ea7
Validity
Not Before: Apr 17 06:01:09 2026 GMT
Not After : Apr 18 06:01:09 2026 GMT
Subject: CN=c36c97dd60c4c5a565d2a700fafe73261ab99a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d5:91:93:68:5d:71:ec:6f:44:b6:51:a1:30:
63:82:50:a1:ec:d3:98:31:b6:b3:a0:5d:86:9b:6c:
91:55:c9:6a:95:e4:ea:ce:97:2f:0a:52:42:9f:7b:
ed:2f:c2:f5:79:f8:d6:60:fe:3f:91:e1:13:ac:51:
ce:03:8a:4d:31:3e:99:66:8a:7f:ee:2a:a7:a3:f3:
5c:79:0f:fe:89:46:fe:20:e4:ad:6b:3e:13:78:f7:
79:fa:ef:12:bc:89:a8:a4:eb:ac:8f:18:87:c6:e2:
4f:c4:60:48:e5:d4:d2:15:f6:74:d4:19:9b:e0:c3:
f4:b4:69:11:c3:46:df:b9:32:19:3f:12:aa:2e:73:
da:cd:96:71:88:3e:81:85:24:46:b2:37:6f:a2:cb:
e5:6c:f9:0f:9e:45:ec:d0:17:01:89:85:81:d5:31:
9b:c7:c3:b1:86:1b:b3:93:a7:42:59:21:67:f9:f6:
98:00:73:47:00:e8:5f:b9:30:25:b2:eb:f6:5c:08:
30:a2:d8:15:a8:4b:07:3e:22:fc:6e:bb:ee:95:17:
b0:4c:a8:76:3b:27:00:82:c2:3b:4f:3f:b6:99:9c:
c0:33:af:9a:88:1e:65:33:e3:27:6d:ba:48:15:b5:
f9:30:db:83:33:cf:7f:64:5b:b4:45:fe:cc:51:82:
6a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:6C:97:DD:60:C4:C5:A5:65:D2:A7:00:FA:FE:73:26:1A:B9:9A:58
X509v3 Authority Key Identifier:
keyid:BA:A0:F2:58:EE:F4:B2:BF:4B:BA:A8:43:0C:1E:58:CA:8C:18:8E:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqDyWO70sr9LuqhDDB5YyowYjqc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5e0ee1-c833-4241-960a-e5768d6b182c/1/uqDyWO70sr9LuqhDDB5YyowYjqc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:f3:2d:d9:84:b4:f2:66:a6:1a:e9:bc:03:c7:c4:38:ec:e1:
37:04:5f:46:b6:44:b3:12:44:ae:13:05:41:63:b6:cd:01:12:
cc:2c:5a:73:d0:e1:ab:c1:df:08:e9:75:f5:63:8e:2a:89:13:
e4:3f:aa:e4:86:1f:86:1e:a5:ca:d9:53:21:0a:94:f2:95:85:
1f:58:bd:cf:6c:19:1b:ca:1b:67:2e:60:f1:04:94:a8:ae:31:
1a:f2:9c:fa:b8:d3:9d:cd:6b:33:7e:54:d0:a8:3d:f7:f5:99:
a8:e4:1b:79:b3:cd:3c:89:e8:94:0c:60:a6:0c:11:0e:12:db:
00:6c:67:d3:51:71:ea:79:ed:7e:10:b4:20:68:b3:3d:42:bd:
c1:4c:c0:a7:ce:61:6a:89:57:67:2b:94:89:9e:15:ee:b2:c1:
98:18:93:dd:d4:86:4b:c1:c9:13:2b:54:90:cc:df:bc:ca:b7:
e8:60:15:15:2a:43:03:ed:99:b3:df:5e:f1:b3:69:1d:1c:5f:
66:f6:77:0a:48:1b:81:6c:a9:ad:06:53:f9:35:85:19:b3:00:
f7:0d:d6:9d:5f:ae:cc:33:43:f3:e0:29:a8:ab:91:51:99:0e:
5f:d8:d8:f5:d5:04:a1:d7:66:a8:01:cd:9b:53:e8:a4:d5:1d:
17:a2:7a:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:50:02 2026 by rpki-client