Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: LRHhyr2GmiZrZDqt0zCesca5SoXH9wjWlIXaKXaICJc=
Subject key identifier: 67:36:4D:74:73:0A:EA:3A:46:C2:EA:A3:87:94:7A:15:DF:0C:80:C5
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 019D9B19F17F1416E93B8C1DD718CF13B2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0D3B
Signing time: Fri 17 Apr 2026 11:01:01 +0000
Manifest this update: Fri 17 Apr 2026 11:01:01 +0000
Manifest next update: Sat 18 Apr 2026 11:01:01 +0000
Files and hashes: 1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: ac06R6n3kyqVttIM1wX8RN7GsGRHiATXADp3dKQUwR0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:f1:7f:14:16:e9:3b:8c:1d:d7:18:cf:13:b2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Apr 17 11:01:01 2026 GMT
Not After : Apr 18 11:01:01 2026 GMT
Subject: CN=67364d74730aea3a46c2eaa387947a15df0c80c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:df:b2:bf:fc:b3:d5:32:99:93:75:99:34:b3:
e2:ea:14:3f:1f:f8:91:e1:fb:dd:3d:bc:bd:ff:52:
e2:47:c3:ca:e7:9d:db:8a:62:ed:db:6a:55:cf:5d:
a8:fd:f1:76:75:19:a7:6d:c8:f4:e1:df:df:74:93:
1f:6a:b2:7a:20:82:9f:6a:d7:94:f8:bc:11:e8:15:
c6:0d:c0:c2:18:50:f4:a5:96:8e:83:c6:3c:f8:75:
51:8d:0e:7b:8d:70:63:f9:09:c3:d3:3f:d6:35:2f:
07:b2:9b:07:92:ef:f0:e5:14:02:41:2b:72:fe:e2:
17:91:f4:80:c2:bd:29:29:48:ef:0f:d7:68:7e:82:
2e:32:a8:75:07:ae:dc:76:5a:db:e2:ec:5a:b5:59:
f3:9f:c6:6d:6d:fe:2f:63:e6:0b:07:65:fb:df:68:
af:78:b3:65:0d:89:56:5f:86:cb:65:8c:f9:39:03:
7b:eb:55:98:a9:0a:68:3b:f2:e2:2c:19:81:95:77:
6a:97:f6:66:a0:88:4a:71:e4:86:67:50:53:bb:2a:
06:bc:be:f7:de:c3:13:95:94:59:ae:a5:56:6f:a5:
33:08:7d:86:f4:ff:40:6d:61:04:f8:a0:9a:6d:ef:
55:64:82:f5:fb:78:89:e4:9e:a4:08:e6:bc:19:97:
76:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:36:4D:74:73:0A:EA:3A:46:C2:EA:A3:87:94:7A:15:DF:0C:80:C5
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:87:bb:e3:64:24:f0:b9:e6:09:91:09:ce:93:1e:c5:59:51:
fc:b2:6b:f0:9e:dd:b5:f1:a1:6e:13:be:66:c7:7c:81:d5:55:
d3:60:18:45:1f:b6:00:15:75:64:f0:6c:b6:7d:2a:8b:d2:c5:
d9:9b:fc:12:a9:81:19:cf:66:97:bc:4b:a8:03:90:15:aa:a1:
62:15:e8:0a:6c:eb:9c:6b:f0:8a:e2:ef:f3:9e:64:ec:4d:72:
8e:2e:e9:0a:98:88:e2:e4:75:a1:2a:b1:0f:1d:d0:df:56:9b:
81:64:a3:b0:ae:53:5b:77:8d:01:db:e3:06:9f:e2:e2:4e:6c:
fa:b2:26:78:2c:59:a3:ba:be:e6:a5:22:ab:7b:bd:10:42:be:
ec:73:02:68:fd:55:fe:c9:0e:5d:5b:f7:53:5d:97:9c:cd:5d:
0e:4e:14:e9:cc:02:90:1c:6e:99:c7:7f:2b:f6:7f:d1:89:07:
c2:20:ed:3c:16:05:05:fe:a6:e9:de:a3:10:ce:a3:a3:ed:76:
98:44:ef:38:af:64:bf:e7:69:d6:56:4f:0d:4f:a4:51:54:58:
6b:ef:1b:c5:70:48:8d:bb:83:d3:c1:7d:85:d1:c9:e7:99:37:
bf:df:32:4d:3b:cd:ee:b3:68:47:c3:5e:a1:9c:f6:f1:b8:a6:
d1:0d:bb:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:15:42 2026 by rpki-client