Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
File: uqI_dArVZMVpO3cJHHGzwDE2pYA.mft (raw, json)
Hash identifier: QJToYyzGtR90tdYuMY6Ao+n6Ch3FcT+Fg49k9lq2RGg=
Subject key identifier: C7:E3:DC:CC:E3:06:8B:47:43:72:25:3F:ED:FB:C0:7D:04:96:2C:6D
Authority key identifier: BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
Certificate issuer: /CN=baa23f740ad564c5693b77091c71b3c03136a580
Certificate serial: 019FA0A8CDA33673DDFE3A0181E081062AAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
Manifest number: 0E47
Signing time: Sun 26 Jul 2026 23:00:44 +0000
Manifest this update: Sun 26 Jul 2026 23:00:44 +0000
Manifest next update: Mon 27 Jul 2026 23:00:44 +0000
Files and hashes: 1: Jd6kW4lGNT0OBJjFacs1nyylkLQ.roa (hash: DN4lDMoyde0MYsDKgYpzaGvP9YKbzDvp6j/0REyCcMs=)
2: uqI_dArVZMVpO3cJHHGzwDE2pYA.crl (hash: HjUfmtRS6/lTlWRTAwqSTy7RebS6av6/+ZtT47fMTDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:a8:cd:a3:36:73:dd:fe:3a:01:81:e0:81:06:2a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa23f740ad564c5693b77091c71b3c03136a580
Validity
Not Before: Jul 26 23:00:44 2026 GMT
Not After : Jul 27 23:00:44 2026 GMT
Subject: CN=c7e3dccce3068b474372253fedfbc07d04962c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:51:07:41:13:ab:a9:1f:ee:2c:88:d5:96:
e8:21:0c:81:e9:07:59:d2:7f:93:6c:f4:4a:87:6c:
5f:68:c8:a9:6f:50:d1:0a:c7:2f:2a:8c:da:e2:a5:
24:e8:26:f2:27:fc:c0:7a:a8:82:13:9d:4e:80:ce:
d8:2e:e9:c1:e3:51:4e:da:ed:5f:9a:87:58:db:5c:
08:bd:9b:df:c2:78:46:1b:1a:5e:0e:18:27:7c:d0:
36:a7:31:62:9c:21:57:cd:7e:5b:f7:96:cc:66:b1:
16:a0:26:23:03:64:0f:e0:a8:84:25:e0:83:ca:b6:
46:12:12:03:38:97:69:3a:c0:1a:d2:ec:81:22:40:
46:35:a3:4f:02:41:04:7c:e2:6b:68:57:fd:4c:56:
61:5d:5b:a2:7e:61:80:d0:36:fe:89:4c:e6:dd:89:
ef:55:1e:94:c0:1c:18:af:38:7a:a7:4d:cf:46:ea:
50:72:c3:f0:12:e8:99:f7:6f:87:42:15:2a:5e:50:
df:ed:03:2d:18:63:9c:3f:6e:66:6f:4b:b9:a9:71:
35:e9:18:cd:73:44:8b:e0:12:e3:01:f5:1a:f9:b7:
24:c3:73:8a:12:19:5f:a4:ee:93:43:52:11:8f:da:
5a:81:27:41:4b:ee:24:c0:c9:98:21:73:0e:c7:a4:
14:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:E3:DC:CC:E3:06:8B:47:43:72:25:3F:ED:FB:C0:7D:04:96:2C:6D
X509v3 Authority Key Identifier:
keyid:BA:A2:3F:74:0A:D5:64:C5:69:3B:77:09:1C:71:B3:C0:31:36:A5:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqI_dArVZMVpO3cJHHGzwDE2pYA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/8c09b3-f6d8-4c9a-964c-8527c9b3e75f/1/uqI_dArVZMVpO3cJHHGzwDE2pYA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:e7:20:b4:dd:79:69:9d:78:f0:ef:fa:33:97:ff:68:b1:b6:
52:3a:83:ce:f5:d7:10:87:db:0a:47:2f:d7:fa:30:99:44:b1:
c6:a3:fc:52:8d:14:73:a5:e7:13:17:59:b2:94:53:18:98:a3:
bc:13:54:0c:9e:a3:87:38:63:80:80:cd:5c:c8:b9:72:83:87:
c5:9f:13:4d:fa:c6:69:67:69:0f:2b:c9:67:18:df:60:da:a2:
87:a9:b6:05:0f:a2:86:aa:1f:9d:8c:20:77:79:62:0d:5b:6c:
6c:b2:a5:c2:fe:90:e8:11:e7:f8:c3:37:65:b0:dc:df:2e:d9:
35:a0:56:08:1a:d6:ee:2a:58:8f:90:48:ec:20:97:a9:c8:f0:
0a:04:37:92:12:71:aa:7d:13:a6:a5:ec:1c:ac:f4:4c:17:e4:
53:c4:37:57:84:e7:d4:76:b2:85:4f:58:d0:1d:a0:36:f5:8f:
a4:f5:de:81:1c:02:78:47:47:85:46:1c:bc:92:f3:fc:98:f1:
36:63:e4:4b:c0:85:4e:13:cd:92:ea:d6:c3:6a:f3:10:19:7d:
a6:d8:76:52:6b:87:4d:58:1b:c7:ae:03:d6:28:87:0c:c1:a9:
52:7f:73:13:1d:29:6e:2b:54:53:3d:f2:87:49:8b:01:f3:62:
83:57:64:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:21:28 2026 by rpki-client