Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: llkipxdc03F15k6I6iRPgnnS4QL/Ac6Mav3D50g13Ew=
Subject key identifier: FC:09:27:EC:E1:FA:91:AD:A1:CB:AC:3B:B7:BF:6E:38:EE:D4:04:DF
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 019CAD907B1436F011977944E5DA49515A52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0CC0
Signing time: Mon 02 Mar 2026 08:00:52 +0000
Manifest this update: Mon 02 Mar 2026 08:00:52 +0000
Manifest next update: Tue 03 Mar 2026 08:00:52 +0000
Files and hashes: 1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: qJr32e8bl7o1I2jFttbr8w6i5pmoBxEPI5IuvbMW+n4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:7b:14:36:f0:11:97:79:44:e5:da:49:51:5a:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Mar 2 08:00:52 2026 GMT
Not After : Mar 3 08:00:52 2026 GMT
Subject: CN=fc0927ece1fa91ada1cbac3bb7bf6e38eed404df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:23:06:f2:8a:0b:30:c6:5b:f0:60:bc:4e:c6:
92:de:17:74:2e:00:6f:f2:5f:19:27:0e:22:d6:ce:
b0:a1:12:c4:ec:54:43:1a:19:18:ba:8a:82:7b:20:
d8:a4:56:22:6e:71:f6:b9:07:ec:82:a4:f3:b7:5a:
cc:51:0a:84:b7:35:00:60:6b:c0:10:5f:ea:2a:73:
8c:06:b2:5c:f0:ff:8b:a4:61:6f:a4:50:8c:f0:f7:
c0:08:ce:da:38:f1:49:38:2c:6b:1b:24:d5:2c:2d:
ec:39:bc:47:78:64:ad:df:91:5a:bb:69:65:f8:fd:
21:6f:62:66:ba:f7:27:bb:49:84:e3:72:4c:99:c6:
54:1f:e1:06:de:bc:ae:b8:b7:cc:bc:d1:2b:67:0a:
a1:2b:c9:be:e9:ef:97:84:03:2b:bc:de:3c:82:4e:
25:81:e7:65:33:00:3c:66:20:9b:5d:30:6a:ac:a2:
eb:51:95:4c:6b:f8:98:17:1e:ca:9a:1f:b7:7b:59:
40:34:9d:ad:4d:91:25:62:65:32:e9:1b:a3:38:7a:
f4:65:d5:d0:67:34:63:12:4a:5c:78:f7:68:36:c8:
70:05:d9:35:7d:ef:e6:63:b4:57:f9:70:9a:b7:8d:
11:e1:2a:5d:83:fe:ce:a5:05:60:08:c8:22:15:53:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:09:27:EC:E1:FA:91:AD:A1:CB:AC:3B:B7:BF:6E:38:EE:D4:04:DF
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:6a:f7:37:27:74:81:e0:74:80:da:22:cc:90:3f:fc:3e:7a:
f5:09:29:70:ef:ec:6a:41:cb:fa:2b:71:7d:1e:a7:66:43:f5:
ef:3b:43:24:43:20:3c:8d:b1:ba:84:81:29:4e:7f:70:11:89:
52:a7:7a:0f:68:bb:42:84:a3:a2:29:be:1c:e6:5c:03:b0:e1:
f3:3e:d1:72:e0:f2:11:15:42:4d:df:5e:ae:30:19:74:38:e1:
b0:53:9b:9a:30:1e:3d:92:d1:61:bb:3b:aa:bc:8d:f4:be:4c:
e2:f8:81:10:1a:3e:a8:2c:a2:14:60:a4:72:6e:ec:34:47:90:
e0:aa:ed:3d:dd:fe:ce:43:55:35:3b:08:b7:8a:38:aa:b6:79:
4e:cb:e9:27:9c:33:c2:32:3c:98:0e:0d:bc:64:76:ab:d5:03:
bd:08:a1:ec:e1:0f:07:ba:14:a9:79:c5:18:70:19:57:86:b9:
e9:5c:12:ff:1c:38:97:cc:bd:6d:d0:d7:e8:04:a0:51:03:0b:
f4:bd:1f:67:37:59:fa:55:7c:05:40:54:ec:95:3d:3f:f7:bc:
a2:22:18:37:25:90:84:5d:72:2d:f0:54:23:b1:ef:d0:24:17:
7e:c0:cc:9d:be:4f:43:e8:42:25:7a:d2:31:69:03:76:0c:f4:
f1:22:06:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:22:14 2026 by rpki-client