Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: IkJQ2xGsmn1S61Hl0sTKV0knOlT2QcnKQXAAo58gXgo=
Subject key identifier: 58:86:11:05:94:D2:7B:0E:53:F2:64:46:07:BF:B0:C7:18:F3:7E:1D
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 01A17DAA1B2AF43A44986C7DFE0AE6156E73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0F3E
Signing time: Tue 27 Oct 2026 14:01:02 +0000
Manifest this update: Tue 27 Oct 2026 14:01:02 +0000
Manifest next update: Wed 28 Oct 2026 14:01:02 +0000
Files and hashes: 1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: WkFTXLAasedWJw3V9WHFOHbDl3HdNe6OwW/Y77SwVEo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:1b:2a:f4:3a:44:98:6c:7d:fe:0a:e6:15:6e:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Oct 27 14:01:02 2026 GMT
Not After : Oct 28 14:01:02 2026 GMT
Subject: CN=5886110594d27b0e53f2644607bfb0c718f37e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d4:09:0a:9a:a2:76:72:ec:2d:9f:ce:d3:dc:
03:3a:aa:67:47:a6:c7:5b:f7:5b:cd:b7:5a:b4:54:
81:52:7a:c9:82:57:05:d4:2a:70:67:35:56:a5:1c:
e3:9f:9a:d3:d2:5d:58:ca:d2:56:d4:39:a4:03:6a:
96:40:ce:53:c6:40:50:1f:95:47:d1:61:c8:cd:63:
5f:b5:34:44:95:62:8b:28:40:8d:72:eb:9d:da:00:
4e:1d:e6:15:83:a8:7d:11:4d:b1:97:42:fd:65:0f:
03:8c:eb:dc:c8:11:66:0b:f6:0d:42:3e:e6:64:04:
7d:22:28:5a:a8:62:2a:f7:c3:7d:52:1d:86:f9:1b:
7f:67:78:da:a0:37:e4:e2:c3:fa:69:05:fc:dd:6a:
bd:9d:d7:7a:9f:56:92:a0:62:3d:14:a4:23:0f:fb:
1c:84:11:23:6c:b8:0a:e3:7e:76:30:3e:59:7c:0b:
d9:0d:64:79:65:6f:48:ba:a6:a1:73:15:db:27:7c:
b4:31:f2:c0:21:aa:ce:ad:d6:e7:14:91:c3:65:16:
5e:84:34:c9:72:2d:dc:05:23:e3:d3:91:4a:bf:5f:
36:ae:19:e7:65:e7:a1:af:96:66:5f:94:e7:d8:df:
20:60:11:13:6b:6f:d6:0f:2f:e4:f5:d3:98:76:af:
fe:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:86:11:05:94:D2:7B:0E:53:F2:64:46:07:BF:B0:C7:18:F3:7E:1D
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:29:58:6b:68:3b:f7:ec:87:6e:e8:48:15:7c:7b:ac:94:a9:
01:47:57:25:cb:1b:fa:d1:df:48:4c:77:2f:fb:30:e3:c7:a3:
e8:26:a7:0e:bf:fe:13:84:a5:3a:84:2b:6e:f9:8f:62:0f:39:
af:35:91:c4:8b:1e:74:45:d3:15:0c:0e:ec:3c:22:25:a6:cb:
aa:eb:ed:e3:2d:03:5a:d8:87:65:b3:43:10:82:b5:95:c1:30:
bf:5c:87:64:be:a1:c9:d5:f2:97:e0:46:8d:56:6f:c3:69:7a:
8b:f6:fc:c7:4d:05:16:a5:e5:55:78:70:d8:91:1f:14:8d:b7:
a7:9e:a0:71:c5:9c:65:63:f0:a4:8e:72:7d:e2:ae:79:3b:0d:
d0:4e:46:1d:b7:7e:0d:a0:18:fa:2e:96:c6:88:5f:b0:3c:dc:
52:0c:b1:90:e7:b4:59:e5:2d:68:dd:67:f9:57:04:30:bd:9b:
17:ec:66:17:0b:d1:46:79:29:33:b9:35:1f:ad:43:0e:39:a1:
83:1d:94:7f:bb:d0:a5:cc:cd:16:db:f5:b5:ef:eb:52:82:33:
e2:26:68:f7:c2:0e:5b:51:92:e9:32:6a:c9:57:ab:9f:6a:a4:
5a:01:48:b9:56:5c:7d:63:b2:7d:66:6c:3d:cd:3a:58:90:31:
16:4c:ff:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9qhsq9DpEmGx9/grmFW5zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTIzZjc0MGFkNTY0YzU2OTNiNzcwOTFjNzFiM2MwMzEz
NmE1ODAwHhcNMjYxMDI3MTQwMTAyWhcNMjYxMDI4MTQwMTAyWjAzMTEwLwYDVQQD
Eyg1ODg2MTEwNTk0ZDI3YjBlNTNmMjY0NDYwN2JmYjBjNzE4ZjM3ZTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1tQJCpqidnLsLZ/O09wDOqpnR6bH
W/dbzbdatFSBUnrJglcF1CpwZzVWpRzjn5rT0l1YytJW1DmkA2qWQM5TxkBQH5VH
0WHIzWNftTRElWKLKECNcuud2gBOHeYVg6h9EU2xl0L9ZQ8DjOvcyBFmC/YNQj7m
ZAR9IihaqGIq98N9Uh2G+Rt/Z3jaoDfk4sP6aQX83Wq9ndd6n1aSoGI9FKQjD/sc
hBEjbLgK4352MD5ZfAvZDWR5ZW9IuqahcxXbJ3y0MfLAIarOrdbnFJHDZRZehDTJ
ci3cBSPj05FKv182rhnnZeehr5ZmX5Tn2N8gYBETa2/WDy/k9dOYdq/+dQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFiGEQWU0nsOU/JkRge/sMcY834dMB8GA1UdIwQY
MBaAFLqiP3QK1WTFaTt3CRxxs8AxNqWAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMt
ODUyN2M5YjNlNzVmLzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi84YzA5YjMtZjZkOC00YzlhLTk2NGMtODUyN2M5YjNlNzVm
LzEvdXFJX2RBclZaTVZwTzNjSkhIR3p3REUycFlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALilYa2g7
9+yHbuhIFXx7rJSpAUdXJcsb+tHfSEx3L/sw48ej6CanDr/+E4SlOoQrbvmPYg85
rzWRxIsedEXTFQwO7DwiJabLquvt4y0DWtiHZbNDEIK1lcEwv1yHZL6hydXyl+BG
jVZvw2l6i/b8x00FFqXlVXhw2JEfFI23p56gccWcZWPwpI5yfeKueTsN0E5GHbd+
DaAY+i6WxohfsDzcUgyxkOe0WeUtaN1n+VcEML2bF+xmFwvRRnkpM7k1H61DDjmh
gx2Uf7vQpczNFtv1te/rUoIz4iZo98IOW1GS6TJqyVern2qkWgFIuVZcfWOyfWZs
Pc06WJAxFkz/NQ==
-----END CERTIFICATE-----
Generated at Tue Oct 27 18:45:20 2026 by rpki-client