Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
File: uqftCLjp6O71-D48yyZ0X4s4hec.mft (raw, json)
Hash identifier: z2lNJmgF4ZtzS5VkRyQYD7vcMUW4ARGaSysz+s1oDks=
Subject key identifier: DE:F4:9C:3F:C2:5E:D3:38:58:FF:02:F7:A9:6D:0E:47:25:36:20:CD
Authority key identifier: BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
Certificate issuer: /CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Certificate serial: 019DCED0C25E6DEC2FA393E86E676E9A265E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
Manifest number: 0608
Signing time: Mon 27 Apr 2026 12:01:20 +0000
Manifest this update: Mon 27 Apr 2026 12:01:20 +0000
Manifest next update: Tue 28 Apr 2026 12:01:20 +0000
Files and hashes: 1: 33c8wPPk4IqhYynLyu73Se9qFUk.roa (hash: Wbj/39E/doWmUOgZqhAuudDtqXbvmhYxyd8kh6N55tc=)
2: QZYePRxM0mJaSAeUZyFdlg4Y3j8.roa (hash: Wq16h2TiQPpMic9yFlGNnTcF/OWQfdzHJMLMT4XQ2ds=)
3: RQO_LmTpcF6RDmMYZxn24ZfpcEI.roa (hash: bKbLY5d9ZhHhcSI9cPlryPqGLtUgv5OwLq161+ZKhKM=)
4: YUutX2q-6h-kjm6bkVZeIBea8dw.roa (hash: hkrM73+bjlug/F/AlsaAA4Q5+v3HYLxKdCmHlwN+CiM=)
5: uqftCLjp6O71-D48yyZ0X4s4hec.crl (hash: 71QqIS7ykm9fI0yZBgsMiNZPctdqE/wbm9AjIgPIxG4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:c2:5e:6d:ec:2f:a3:93:e8:6e:67:6e:9a:26:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa7ed08b8e9e8eef5f83e3ccb26745f8b3885e7
Validity
Not Before: Apr 27 12:01:20 2026 GMT
Not After : Apr 28 12:01:20 2026 GMT
Subject: CN=def49c3fc25ed33858ff02f7a96d0e47253620cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:99:95:56:26:f2:53:ba:f6:27:bf:e9:2d:41:
29:ab:e1:47:de:84:4c:a5:42:33:a9:4a:79:2e:7c:
a6:43:0d:fa:5f:73:40:35:74:35:77:4e:2f:9d:0e:
d4:c8:6a:7d:d3:14:f6:8c:b0:4c:88:4c:2e:88:c9:
f0:87:69:f8:71:06:14:a5:69:e2:f4:59:42:fb:ec:
e4:d4:a1:9e:99:a0:d7:b3:5d:0b:01:94:28:08:42:
9f:95:35:14:60:98:a0:75:d2:eb:72:6d:f1:44:a3:
de:d9:34:96:7c:c2:93:f0:23:60:08:c6:af:a2:37:
03:54:14:43:fa:f9:d8:15:e5:9f:a6:c8:1c:bc:1e:
ad:fb:cb:f7:dc:20:67:7b:27:20:b2:c8:14:eb:b5:
6f:af:b1:f9:9e:2c:95:c8:63:c1:cc:b9:00:c8:29:
ca:e8:bc:35:4b:e9:0e:d0:77:df:48:a2:8b:b3:b7:
08:72:26:bd:b8:03:06:29:a2:97:ef:6c:a0:8e:96:
de:22:c3:05:ed:60:c2:25:e1:c2:5b:19:2d:5a:40:
bc:1b:d9:a7:0e:b2:cb:45:30:14:8d:18:d4:fb:c0:
e5:14:7c:80:56:eb:5a:a1:af:e7:85:95:71:21:f1:
8c:63:e0:60:e9:41:3c:26:9b:55:e6:12:e8:d8:f8:
03:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:F4:9C:3F:C2:5E:D3:38:58:FF:02:F7:A9:6D:0E:47:25:36:20:CD
X509v3 Authority Key Identifier:
keyid:BA:A7:ED:08:B8:E9:E8:EE:F5:F8:3E:3C:CB:26:74:5F:8B:38:85:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqftCLjp6O71-D48yyZ0X4s4hec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/8331e0-e8ab-4a6e-92b7-8a96f03bc617/1/uqftCLjp6O71-D48yyZ0X4s4hec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:bc:de:37:f5:16:93:64:31:0e:7d:83:e1:6b:c2:f9:b0:f8:
d3:84:26:32:7d:0a:5b:26:fe:6b:c7:5a:02:d0:a6:cf:e7:f9:
c5:68:96:07:16:93:db:e9:88:5f:20:7f:30:dd:89:96:b9:d3:
bc:56:88:ce:a5:a0:02:ff:eb:53:b2:c2:9a:28:13:41:b2:28:
87:21:b0:fe:42:b8:76:7d:ce:6b:a6:a3:a0:b6:3c:76:7a:a2:
44:4b:d8:81:d2:2c:62:09:db:ab:64:cb:7d:d8:e0:65:28:cd:
53:d5:e6:1d:60:90:82:0c:53:9c:7e:b1:4d:f0:3d:83:f9:0a:
fb:cc:03:43:fa:9d:a1:7a:95:aa:87:82:ea:f2:82:06:d8:fb:
6f:7b:ca:76:3e:31:06:a9:47:9c:d0:4b:da:58:2f:de:3c:23:
4d:2e:1e:e0:c8:c6:ce:2e:13:bc:6c:84:22:4f:f4:74:6c:47:
46:ce:58:46:28:2e:5c:d2:0d:c9:e9:d6:c9:79:22:02:28:a2:
19:f4:15:72:fd:59:03:1b:9b:16:f8:e9:54:90:ca:c6:6b:ca:
f2:7e:05:97:f5:9a:28:86:5c:e2:a9:99:4d:9d:8e:57:67:be:
72:68:5a:ab:ae:01:3d:9c:d0:1a:09:4b:94:d0:de:39:43:c6:
01:3c:09:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3O0MJebewvo5PobmdumiZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTdlZDA4YjhlOWU4ZWVmNWY4M2UzY2NiMjY3NDVmOGIz
ODg1ZTcwHhcNMjYwNDI3MTIwMTIwWhcNMjYwNDI4MTIwMTIwWjAzMTEwLwYDVQQD
EyhkZWY0OWMzZmMyNWVkMzM4NThmZjAyZjdhOTZkMGU0NzI1MzYyMGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApZmVVibyU7r2J7/pLUEpq+FH3oRM
pUIzqUp5LnymQw36X3NANXQ1d04vnQ7UyGp90xT2jLBMiEwuiMnwh2n4cQYUpWni
9FlC++zk1KGemaDXs10LAZQoCEKflTUUYJigddLrcm3xRKPe2TSWfMKT8CNgCMav
ojcDVBRD+vnYFeWfpsgcvB6t+8v33CBneycgssgU67Vvr7H5niyVyGPBzLkAyCnK
6Lw1S+kO0HffSKKLs7cIcia9uAMGKaKX72ygjpbeIsMF7WDCJeHCWxktWkC8G9mn
DrLLRTAUjRjU+8DlFHyAVutaoa/nhZVxIfGMY+Bg6UE8JptV5hLo2PgD0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN70nD/CXtM4WP8C96ltDkclNiDNMB8GA1UdIwQY
MBaAFLqn7Qi46eju9fg+PMsmdF+LOIXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjct
OGE5NmYwM2JjNjE3LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MS84MzMxZTAtZThhYi00YTZlLTkyYjctOGE5NmYwM2JjNjE3
LzEvdXFmdENManA2TzcxLUQ0OHl5WjBYNHM0aGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAILzeN/UW
k2QxDn2D4WvC+bD404QmMn0KWyb+a8daAtCmz+f5xWiWBxaT2+mIXyB/MN2JlrnT
vFaIzqWgAv/rU7LCmigTQbIohyGw/kK4dn3Oa6ajoLY8dnqiREvYgdIsYgnbq2TL
fdjgZSjNU9XmHWCQggxTnH6xTfA9g/kK+8wDQ/qdoXqVqoeC6vKCBtj7b3vKdj4x
BqlHnNBL2lgv3jwjTS4e4MjGzi4TvGyEIk/0dGxHRs5YRiguXNINyenWyXkiAiii
GfQVcv1ZAxubFvjpVJDKxmvK8n4Fl/WaKIZc4qmZTZ2OV2e+cmhaq64BPZzQGglL
lNDeOUPGATwJAw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:23:46 2026 by rpki-client