Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
File: uqp0i6FKduXYpu2stUJggqVvXj0.mft (raw, json)
Hash identifier: +6tTcNvhfS1Lut/yw3LG1x8R8nwo0b8nSegvtWiV4ck=
Subject key identifier: 72:2C:2D:A3:03:6F:19:BD:2D:C3:C8:70:D4:F9:80:82:5B:A4:E1:59
Authority key identifier: BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
Certificate issuer: /CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Certificate serial: 019D1D935B2D339218455A5680A83540FB6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
Manifest number: 09B8
Signing time: Tue 24 Mar 2026 02:01:29 +0000
Manifest this update: Tue 24 Mar 2026 02:01:29 +0000
Manifest next update: Wed 25 Mar 2026 02:01:29 +0000
Files and hashes: 1: 8lFiF1wAdPJ2hAxovfgzct_NPm4.roa (hash: Ym4lP51eot+4QlKi10WZ3Du5yp0u/4cXY/HYDj8vrhg=)
2: PQBF4mCa3EW8hiGZFACvo7VeAB0.roa (hash: 3SzioKnDZBjphhsMENR4RFeejxxcRYepmgMK0cqKv/c=)
3: RVqYqDFmLejp9z4p1E-tMkToPRs.roa (hash: r6z1fF1ZfXzZ4I9UfejqbJBDfNW9+C1iyzRk4WH7X5A=)
4: _PZxNVK3ihOQkmmWbE5y4TLIF2A.roa (hash: /xcnI68M7th+zMKJZ1ErNPWPaooK8PDshecxHkOyACQ=)
5: kXDi6qKHYQmt9htj9gX1rGIvybE.roa (hash: BHmjuxB6GlGS1nMnX38rPfHra7EH7TtxG/dDB/NIFmE=)
6: p4qnaEPq_svZSkXF-klfpg0p65s.roa (hash: tQNh+Gvsr0x1n4TN4e64P96eE9wuPHIZl8JmB3MbPK8=)
7: tP-BnXsZN6NQdPQ-Vw8Twys00WM.roa (hash: DBCyB76gWKM0oz1E9E5WPf89Ch3ozcREuCeQGSM5Iw4=)
8: uBrITHEVEeAf7k48uJiUJ6Kad4Q.roa (hash: SKB6ihyC1p2ZsFPesOzaFpazYcPyR0Cg//z7zQtbDxA=)
9: uqp0i6FKduXYpu2stUJggqVvXj0.crl (hash: 6m4QVEnRPRkAnYHOb5Wibv7TfvFAcgKxPcjQ/F2Uq7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 25 Mar 2026 01:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1d:93:5b:2d:33:92:18:45:5a:56:80:a8:35:40:fb:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baaa748ba14a76e5d8a6edacb5426082a56f5e3d
Validity
Not Before: Mar 24 02:01:29 2026 GMT
Not After : Mar 25 02:01:29 2026 GMT
Subject: CN=722c2da3036f19bd2dc3c870d4f980825ba4e159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:81:c1:5c:6e:64:19:9a:dd:5d:8a:f2:c7:4b:
dd:db:3d:57:26:a8:50:6a:14:da:ee:3c:3f:01:96:
c4:0a:f3:ee:54:1c:fe:47:54:e6:32:f8:bf:aa:c1:
61:fa:ac:3f:bd:22:11:2b:a9:a4:50:f6:6f:4b:a4:
48:a7:94:df:72:e9:8d:cf:21:51:f1:53:d3:ba:40:
3d:cd:99:45:5d:4e:94:38:ab:4e:1e:86:a2:b6:02:
17:12:d8:d7:1b:2b:9e:eb:75:1b:02:c3:5e:e3:3a:
5a:8a:25:83:49:92:db:0b:79:c0:67:26:26:b3:b8:
4a:bd:64:4c:e5:fe:db:56:b6:a9:62:01:46:0c:43:
33:88:51:ee:2c:05:68:16:ed:cc:94:89:cb:76:15:
d7:d9:0d:a5:69:cd:d9:86:84:c4:5d:b1:46:27:e7:
c9:e8:8f:91:bf:ec:62:da:53:45:30:4e:72:ae:8a:
e5:75:57:74:8c:d2:ee:7c:3c:15:96:40:94:b5:90:
17:d9:e8:1a:c0:0f:cf:0b:e6:e0:cd:93:c4:78:1f:
1e:69:7b:ff:47:9f:e3:e3:79:94:da:2c:ff:8e:a0:
f5:0e:b4:94:9c:55:5b:53:a6:64:85:65:45:4f:4c:
92:01:1c:2a:45:b5:58:64:c5:7b:9e:35:fe:00:f1:
03:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2C:2D:A3:03:6F:19:BD:2D:C3:C8:70:D4:F9:80:82:5B:A4:E1:59
X509v3 Authority Key Identifier:
keyid:BA:AA:74:8B:A1:4A:76:E5:D8:A6:ED:AC:B5:42:60:82:A5:6F:5E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqp0i6FKduXYpu2stUJggqVvXj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/a8e45b-17c6-436d-81a8-c5195162e3be/1/uqp0i6FKduXYpu2stUJggqVvXj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:c1:1c:64:c8:47:f4:8e:5d:47:4d:3b:fa:53:11:fb:28:a2:
da:fb:0f:0b:08:6a:ca:4b:0b:94:69:5c:2f:f8:11:fb:44:7d:
a0:bb:56:58:52:4b:81:c0:72:bd:84:b5:24:fc:90:54:6d:d7:
5e:43:f5:fe:c2:23:3e:54:2b:71:57:63:ad:92:c0:a0:02:52:
a8:76:a1:62:4b:30:67:ef:f7:37:71:79:c0:0e:86:3a:89:b2:
6d:9a:90:69:79:84:86:3c:31:4f:c5:69:b7:1a:24:ae:09:75:
af:34:79:94:17:e6:7b:6f:f0:8e:58:5a:10:64:2b:4a:2c:bf:
c6:52:92:1c:18:6b:54:e7:14:16:8b:50:4e:22:bb:12:0a:2f:
fb:d8:ee:17:f3:d3:ca:d5:51:b7:9e:d7:59:ca:49:a6:10:db:
ef:bb:2d:06:6b:95:64:ca:a5:4e:05:7e:b8:1a:6f:6e:07:22:
f2:60:df:2d:69:96:c8:41:61:74:72:ea:42:e2:29:82:13:72:
3d:46:f3:0f:97:c9:86:e8:9a:b8:ac:71:4b:3c:6e:bd:52:ac:
08:34:62:d1:e6:d3:b2:bc:f9:e7:0a:5d:fe:ff:57:84:85:5e:
ea:69:f0:0a:eb:99:a0:c2:9e:69:97:09:0e:96:a2:f0:df:53:
4d:51:61:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0dk1stM5IYRVpWgKg1QPttMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYWE3NDhiYTE0YTc2ZTVkOGE2ZWRhY2I1NDI2MDgyYTU2
ZjVlM2QwHhcNMjYwMzI0MDIwMTI5WhcNMjYwMzI1MDIwMTI5WjAzMTEwLwYDVQQD
Eyg3MjJjMmRhMzAzNmYxOWJkMmRjM2M4NzBkNGY5ODA4MjViYTRlMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IHBXG5kGZrdXYryx0vd2z1XJqhQ
ahTa7jw/AZbECvPuVBz+R1TmMvi/qsFh+qw/vSIRK6mkUPZvS6RIp5TfcumNzyFR
8VPTukA9zZlFXU6UOKtOHoaitgIXEtjXGyue63UbAsNe4zpaiiWDSZLbC3nAZyYm
s7hKvWRM5f7bVrapYgFGDEMziFHuLAVoFu3MlInLdhXX2Q2lac3ZhoTEXbFGJ+fJ
6I+Rv+xi2lNFME5yrorldVd0jNLufDwVlkCUtZAX2egawA/PC+bgzZPEeB8eaXv/
R5/j43mU2iz/jqD1DrSUnFVbU6ZkhWVFT0ySARwqRbVYZMV7njX+APEDAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIsLaMDbxm9LcPIcNT5gIJbpOFZMB8GA1UdIwQY
MBaAFLqqdIuhSnbl2KbtrLVCYIKlb149MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgt
YzUxOTUxNjJlM2JlLzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9hOGU0NWItMTdjNi00MzZkLTgxYTgtYzUxOTUxNjJlM2Jl
LzEvdXFwMGk2RktkdVhZcHUyc3RVSmdncVZ2WGowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcMEcZMhH
9I5dR007+lMR+yii2vsPCwhqyksLlGlcL/gR+0R9oLtWWFJLgcByvYS1JPyQVG3X
XkP1/sIjPlQrcVdjrZLAoAJSqHahYkswZ+/3N3F5wA6GOomybZqQaXmEhjwxT8Vp
txokrgl1rzR5lBfme2/wjlhaEGQrSiy/xlKSHBhrVOcUFotQTiK7Egov+9juF/PT
ytVRt57XWcpJphDb77stBmuVZMqlTgV+uBpvbgci8mDfLWmWyEFhdHLqQuIpghNy
PUbzD5fJhuiauKxxSzxuvVKsCDRi0ebTsrz55wpd/v9XhIVe6mnwCuuZoMKeaZcJ
Dpai8N9TTVFh5A==
-----END CERTIFICATE-----
Generated at Tue Mar 24 05:38:08 2026 by rpki-client