Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: oWG04UeSOtv80cvUIn4l3Mz2stDiFPBjLrOC6osyyd8=
Subject key identifier: 8A:88:FD:0D:7A:46:F9:42:D0:DA:3B:85:5F:5E:23:CD:30:35:33:ED
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 019EC292B77B2D7F66261F7C76145E403899
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0DD4
Signing time: Sat 13 Jun 2026 20:00:55 +0000
Manifest this update: Sat 13 Jun 2026 20:00:55 +0000
Manifest next update: Sun 14 Jun 2026 20:00:55 +0000
Files and hashes: 1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: 8W5ZU8AsNSLSYc0N+Ho4Ix3nqp7GsNzqcWSpXbQswfM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:92:b7:7b:2d:7f:66:26:1f:7c:76:14:5e:40:38:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Jun 13 20:00:55 2026 GMT
Not After : Jun 14 20:00:55 2026 GMT
Subject: CN=8a88fd0d7a46f942d0da3b855f5e23cd303533ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:66:fe:30:8f:6e:c9:af:4b:f4:b0:22:e4:ef:
6a:7e:65:6e:5c:64:e2:94:60:06:5e:3f:6d:12:af:
f5:1c:71:71:ba:46:b4:7b:9f:37:13:f5:f3:da:44:
37:17:76:8d:3f:43:14:30:83:d9:a7:cc:9d:1d:e3:
e3:44:41:5c:fd:34:2a:70:84:f0:8b:ab:0a:a1:2a:
95:b4:6c:fe:67:b1:0a:b2:67:00:c4:bd:ff:ae:31:
92:2f:44:0a:4c:9b:63:e5:12:1d:cb:4f:b7:39:e9:
eb:1e:31:3a:a1:e4:fc:da:39:e3:99:1a:7f:cd:07:
14:42:60:c2:d1:3d:17:00:fa:73:99:86:28:01:0d:
27:20:37:68:ee:f7:f6:81:f6:04:b7:ce:97:99:e7:
cf:3c:70:60:42:cd:c2:66:f9:27:2e:64:8b:41:fd:
95:46:8b:81:ea:90:cd:60:75:9c:63:22:95:15:da:
50:69:ce:71:37:56:44:17:b6:97:8d:56:b2:e4:6e:
26:24:e6:16:f1:d4:ba:66:28:20:fe:51:67:6f:d7:
a6:08:13:dd:5b:6d:1e:d4:4b:05:02:10:0b:ee:fe:
90:1c:0f:49:8f:48:f1:a4:9b:08:06:74:81:a6:69:
76:6a:be:6b:76:4e:c3:09:52:35:d1:95:30:66:b4:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:88:FD:0D:7A:46:F9:42:D0:DA:3B:85:5F:5E:23:CD:30:35:33:ED
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:c6:df:a5:37:e6:cd:84:af:56:58:61:73:8c:b6:b0:ee:fc:
f2:84:ff:9a:cc:13:c4:72:70:50:7f:fc:8d:d6:96:ff:7c:f0:
77:b0:be:b0:68:96:fd:0b:a2:56:b0:d9:c4:5f:c0:8e:3a:42:
8a:f5:e5:fa:b1:fd:d9:8e:c5:6a:bc:44:df:b1:64:de:fe:04:
90:5e:89:e2:0b:2f:ef:e2:82:1e:34:34:be:7d:a8:e4:8b:d6:
f0:13:8d:f5:18:e7:6e:0b:c0:c0:7c:5a:e4:0d:a8:0b:b1:17:
ed:3d:74:59:ad:6f:a4:29:50:eb:85:7b:54:2e:11:14:77:8e:
0e:58:27:30:03:eb:96:46:c6:97:fe:48:62:23:c9:44:03:21:
3a:93:93:07:01:49:8f:6c:fa:ff:c2:e2:72:25:c0:b3:68:7a:
e0:99:31:c7:00:71:ac:31:1e:1e:c6:94:0f:05:e1:e4:a0:64:
ce:ee:5b:f6:76:d1:c5:83:ec:cd:a5:58:94:3d:90:df:3d:39:
3e:8e:d9:6c:a8:2e:ce:4f:7e:f1:c0:f6:0f:48:1a:bd:80:87:
d1:9e:c7:06:4d:fa:eb:70:2c:89:43:25:0c:69:8e:6f:71:cd:
99:b0:46:59:36:b5:cf:30:db:ec:fd:86:67:ff:29:57:02:f6:
20:0a:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:24:07 2026 by rpki-client