
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File: uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier: plkgJbR8BVJ+RVpBPV9k4OQD2OGOy6ApnEgNhk3mcss=
Subject key identifier: DF:19:54:88:FA:F5:A1:B2:9B:30:94:E6:CF:99:E2:81:61:3A:76:D9
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 019E24372E0DB056CCED789015C6DD4F19F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number: 0A40
Signing time: Thu 14 May 2026 02:00:56 +0000
Manifest this update: Thu 14 May 2026 02:00:56 +0000
Manifest next update: Fri 15 May 2026 02:00:56 +0000
Files and hashes: 1: 8lFiF1wAdPJ2hAxovfgzct_NPm4.roa (hash: Ym4lP51eot+4QlKi10WZ3Du5yp0u/4cXY/HYDj8vrhg=)
2: PQBF4mCa3EW8hiGZFACvo7VeAB0.roa (hash: 3SzioKnDZBjphhsMENR4RFeejxxcRYepmgMK0cqKv/c=)
3: RVqYqDFmLejp9z4p1E-tMkToPRs.roa (hash: r6z1fF1ZfXzZ4I9UfejqbJBDfNW9+C1iyzRk4WH7X5A=)
4: _PZxNVK3ihOQkmmWbE5y4TLIF2A.roa (hash: /xcnI68M7th+zMKJZ1ErNPWPaooK8PDshecxHkOyACQ=)
5: kXDi6qKHYQmt9htj9gX1rGIvybE.roa (hash: BHmjuxB6GlGS1nMnX38rPfHra7EH7TtxG/dDB/NIFmE=)
6: p4qnaEPq_svZSkXF-klfpg0p65s.roa (hash: tQNh+Gvsr0x1n4TN4e64P96eE9wuPHIZl8JmB3MbPK8=)
7: tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa (hash: DBCyB76gWKM0oz1E9E5WPf89Ch3ozcREuCeQGSM5Iw4=)
8: uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa (hash: SKB6ihyC1p2ZsFPesOzaFpazYcPyR0Cg//z7zQtbDxA=)
9: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: +apcWBHZoRfyJsfZfaowTkPRHpMzylCnzy2mKzzi42c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:24:37:2e:0d:b0:56:cc:ed:78:90:15:c6:dd:4f:19:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: May 14 02:00:56 2026 GMT
Not After : May 15 02:00:56 2026 GMT
Subject: CN=df195488faf5a1b29b3094e6cf99e281613a76d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f5:82:56:74:e5:12:0c:4b:87:69:8d:70:5f:
0d:ea:89:5f:42:c9:1d:3f:4a:0f:90:07:c9:fc:7a:
09:de:53:15:0a:16:42:c6:93:43:b6:97:a9:41:4f:
62:f4:9c:08:47:c5:b2:57:71:2d:b1:44:56:69:1f:
d4:c7:8a:f3:e7:90:00:31:e8:c9:12:df:b5:8f:5b:
c1:8a:de:3b:6d:40:82:e7:e7:e9:0b:b1:6d:34:e6:
45:02:f5:74:a0:7c:82:c0:20:54:98:c5:53:12:3a:
52:e2:07:24:ed:27:79:5d:bd:44:4d:b4:4e:68:7d:
55:8b:9a:0c:5c:ff:a1:69:ce:06:96:97:06:62:08:
d0:ff:b4:1c:4e:ae:43:73:50:9f:22:f0:4e:ae:e5:
32:73:bc:46:63:12:16:01:c3:ff:0c:57:06:15:b2:
35:e0:99:b2:d7:2f:85:3b:32:1b:d9:3a:f7:b2:27:
8e:61:47:20:d4:b1:c6:36:dd:e2:ed:62:d6:7f:c5:
2b:b8:f8:1c:e8:c5:72:47:fd:cc:9a:d6:80:b1:4e:
bb:a1:00:a0:d7:1a:27:ae:91:3a:6f:95:66:c2:84:
08:f2:1f:1d:89:c5:19:e8:d4:d0:79:d0:10:a0:42:
40:25:56:21:a3:55:32:44:18:4b:86:c8:30:82:da:
d1:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:19:54:88:FA:F5:A1:B2:9B:30:94:E6:CF:99:E2:81:61:3A:76:D9
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:1c:0c:35:a5:42:17:e5:06:cb:62:fa:12:ea:e9:48:e1:06:
fc:37:4b:c1:6a:56:00:cc:c3:c0:fc:14:b3:ca:dd:66:50:79:
ed:38:21:11:ce:c9:90:c7:a9:06:f3:22:30:49:1b:d4:11:95:
85:c9:db:9c:c6:fb:f3:fa:22:bc:e8:8d:de:ec:39:01:ea:3f:
e8:d4:f7:8e:53:04:52:40:91:f4:bc:4a:93:46:1d:90:cd:3a:
7e:2d:ed:c6:79:8a:a5:a3:f2:cd:4a:a5:ef:24:84:09:1c:c9:
12:94:97:83:93:15:4e:21:b5:10:50:df:85:11:7a:bc:39:f0:
7e:0b:dc:64:38:ac:ec:8e:7f:1c:1b:2d:e8:ae:24:c1:b8:3d:
b4:a2:39:04:b4:45:27:2b:3b:2e:93:60:03:08:a6:f6:44:b6:
87:7a:14:ee:dd:d0:84:41:a8:27:3f:25:a3:c3:8a:59:60:8c:
86:9d:46:de:94:c1:df:d7:c6:2c:f8:36:b9:0b:c1:42:94:85:
6b:ca:e5:f2:21:58:33:50:6f:7d:d2:c6:ea:69:70:35:4b:ea:
97:77:64:26:9c:cc:ca:fd:dc:3d:d5:60:93:e3:f4:9d:7e:4d:
b3:88:37:df:b6:4f:91:5d:74:97:e6:b3:88:33:69:6a:c7:1e:
bb:e1:2c:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 14 07:42:16 2026 by rpki-client