Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: ItNKklnlAu4L7DxK3CAbLDTZ82MNUCAhEeX/MgMg0KU=
Subject key identifier: 81:4F:74:E1:0B:B7:86:A5:7C:8C:CB:12:33:BC:1D:1D:F6:79:B7:07
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 01A08C43CDA2AEF572C9D216E6E7BC11A58D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0EC1
Signing time: Thu 10 Sep 2026 17:00:48 +0000
Manifest this update: Thu 10 Sep 2026 17:00:48 +0000
Manifest next update: Fri 11 Sep 2026 17:00:48 +0000
Files and hashes: 1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: lckmPt/1VY21AvqRR/025M9hsVMpiL1ADRdf6W5UDl8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:43:cd:a2:ae:f5:72:c9:d2:16:e6:e7:bc:11:a5:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Sep 10 17:00:48 2026 GMT
Not After : Sep 11 17:00:48 2026 GMT
Subject: CN=814f74e10bb786a57c8ccb1233bc1d1df679b707
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:85:ea:24:a9:6e:f5:15:7e:3c:14:e1:6d:55:
9c:e0:bd:52:1e:88:9c:b5:c8:b6:37:27:0a:a7:32:
b7:13:54:d1:56:22:8f:02:d8:ac:c8:7f:d4:cc:09:
d1:31:2b:b9:54:9e:5e:e2:65:30:26:66:4f:39:f7:
d2:6b:70:3b:60:9d:e7:a7:6e:77:53:90:e7:e5:30:
21:f3:9c:38:12:2f:6e:16:52:9e:fb:53:12:a5:31:
ec:55:8a:79:85:b5:08:94:87:c4:57:1d:07:22:81:
f7:25:da:63:02:24:ae:16:f2:77:5d:39:09:9a:c0:
95:e7:ab:e9:5b:27:0f:f7:75:dc:59:67:40:9c:aa:
c9:1e:5b:d1:47:cf:f3:b2:b8:81:ed:8d:52:96:ad:
98:d0:3b:1b:9d:23:57:93:39:30:70:8e:15:ae:ab:
bf:44:47:4e:8e:6e:2a:27:37:ff:02:93:af:e2:72:
59:29:3c:d7:8c:0f:78:73:15:85:b7:8d:c3:32:38:
74:fc:09:48:98:3b:e2:25:f7:17:25:b6:97:32:2a:
e0:fd:76:64:d5:22:a6:f7:c6:fa:c4:f8:a0:c5:1d:
7c:f1:c5:72:0a:09:b2:f1:da:be:3b:51:89:d2:ce:
70:0b:80:88:2b:04:cf:3f:6f:db:7d:d5:07:5e:a6:
12:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:4F:74:E1:0B:B7:86:A5:7C:8C:CB:12:33:BC:1D:1D:F6:79:B7:07
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:a9:47:cd:62:5f:db:84:6d:5c:56:50:7b:73:3d:9d:ad:91:
29:f8:b7:03:13:ef:98:66:fe:cf:36:4f:27:7d:0a:fe:31:c2:
4c:aa:5d:71:54:62:de:97:db:52:eb:36:2b:9f:9d:6a:be:65:
8d:f6:eb:af:c1:34:36:a5:09:30:06:1a:11:87:48:97:83:f9:
cb:58:a5:79:21:0a:76:e9:0e:f3:88:ac:26:15:9a:0d:fc:ac:
72:56:f8:43:63:ef:d5:43:40:a0:12:92:d1:dc:27:76:ac:f2:
4b:14:30:11:f5:ed:62:18:8d:05:f9:f6:db:97:5e:42:07:5a:
b6:b4:66:25:ef:1b:e6:f2:b0:95:46:61:a8:b4:39:79:94:6f:
00:0c:99:3f:30:2c:cb:3d:be:71:00:f9:e5:57:e4:54:9e:b9:
d9:98:a9:8b:a5:ad:36:e5:2e:28:36:a0:0e:e8:bb:a2:85:48:
c7:cd:31:59:52:84:26:06:73:7a:b0:0e:e8:40:66:2a:5e:2c:
6d:e0:e4:dd:0b:d5:50:55:2f:17:b8:48:9c:75:b6:f7:3d:89:
d2:bd:74:58:5c:69:f3:62:dc:07:9f:7e:ff:6a:47:e5:74:7d:
48:57:0f:e4:e3:ef:7c:f4:78:ef:ff:bd:3e:90:8c:8c:39:29:
4f:30:e5:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:41:44 2026 by rpki-client