Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: v2tVs4YyAdQAKlIJkp8gI5ju2lWvttZBv1yhuuZL9Zs=
Subject key identifier: 4D:26:71:10:CB:96:D5:4B:24:25:99:33:3E:15:6E:6F:05:F2:C2:68
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019D9962AC89B54773B9B8CE109107F6DE41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0971
Signing time: Fri 17 Apr 2026 03:01:13 +0000
Manifest this update: Fri 17 Apr 2026 03:01:13 +0000
Manifest next update: Sat 18 Apr 2026 03:01:13 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: 29iM8In/LoVFJWgTg8/S/96riMPrCB7rxMkxO+ky+sw=)
2: E6adBVtp7nLxPiQrU3zSgNDba-4.roa (hash: 9PUq5JqVFHdrujt3HOKJApo5N2oaCeMkCMZ1/k+YjXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:ac:89:b5:47:73:b9:b8:ce:10:91:07:f6:de:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Apr 17 03:01:13 2026 GMT
Not After : Apr 18 03:01:13 2026 GMT
Subject: CN=4d267110cb96d54b242599333e156e6f05f2c268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a1:e7:64:6d:56:96:98:69:fd:46:56:8a:6c:
49:e3:dc:c5:00:16:e9:ef:ae:33:7c:c4:32:2f:2a:
d9:d2:72:97:6b:94:6f:79:78:11:dc:44:d5:86:fe:
34:10:a6:c9:f4:7e:5a:d6:f5:a4:ef:2b:47:d8:79:
b6:da:dd:f3:ae:b6:bf:f3:bb:d1:c6:3e:26:58:bb:
d7:e0:6f:a8:b9:63:44:86:cf:d2:f4:26:c6:37:1c:
92:44:54:2e:2a:2d:64:52:0b:e9:3c:f1:53:00:82:
ae:a5:b2:70:b9:ba:4a:39:a7:b5:04:5a:66:ab:54:
e6:34:5f:87:e4:13:59:63:66:c3:d0:78:86:fa:8f:
0c:c7:8a:dc:ac:4f:7c:55:0e:a2:15:c2:a5:96:f9:
27:86:52:0c:e9:ff:18:3a:2f:08:d5:1c:7d:a9:ef:
1c:52:8c:ab:58:1c:f5:d9:50:b4:1c:2d:a2:48:63:
34:42:13:08:c2:e0:42:e7:06:a2:a5:9f:ca:18:9b:
09:1d:e8:eb:0c:54:cc:8a:e7:78:e5:25:da:9a:d2:
66:b0:ae:bc:d4:99:9c:c8:ef:47:3f:6c:6b:63:ef:
ff:b5:11:a8:7b:71:72:d2:20:c2:4d:fd:10:e5:9b:
6d:8d:5f:c3:fc:81:e5:df:3c:2a:b3:f3:1a:ac:00:
94:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:26:71:10:CB:96:D5:4B:24:25:99:33:3E:15:6E:6F:05:F2:C2:68
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:d0:7d:21:0c:c7:9c:30:78:62:71:67:8f:af:96:97:9d:f7:
1e:82:95:6f:41:8d:62:d2:74:f7:ad:9e:49:41:1e:15:5e:e7:
ea:37:61:d3:50:f6:e9:eb:23:d6:2c:4c:41:87:de:0f:c9:57:
fb:c2:f2:f2:1b:90:74:c9:1f:72:95:93:d8:52:ee:06:64:63:
48:17:7d:a7:92:39:74:0d:f2:ca:02:31:9d:af:92:66:89:cf:
49:62:3d:41:87:0d:e4:c0:73:b3:f6:66:a9:19:a5:17:4d:27:
16:ad:ed:a1:1b:ca:6a:a9:03:17:15:75:a1:fe:ca:f0:35:67:
68:2f:83:56:79:be:e2:a2:ef:8b:d1:60:5d:1e:b8:48:83:ea:
5e:23:c4:96:88:2b:4a:7a:ba:51:0f:75:7f:5a:2a:d1:84:56:
cb:be:25:05:1d:be:69:54:cf:a0:ad:cb:b4:9b:48:9d:a6:21:
93:2c:e6:bc:00:8d:e7:c7:11:bc:9f:09:a9:4e:22:63:2c:f9:
7c:53:e7:69:26:e0:16:5c:3c:8b:15:a0:cf:26:c5:eb:3b:75:
57:8e:04:5f:84:0b:83:74:53:a3:aa:1f:97:f0:48:ad:ee:2d:
01:a2:fb:af:fe:d2:7f:c2:05:d8:ea:46:e0:ce:e8:d3:12:02:
24:50:3f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:11 2026 by rpki-client