Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: 5aB/ELwgcdnxpEErQvIABfjMdV8KPztACgKWitAS9CY=
Subject key identifier: EC:5A:73:4D:D7:6D:8B:67:AC:B9:CF:7F:DD:A6:F3:D5:A8:D3:79:8E
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019D23958289E3C28E1BAD223253422F2999
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0934
Signing time: Wed 25 Mar 2026 06:01:33 +0000
Manifest this update: Wed 25 Mar 2026 06:01:33 +0000
Manifest next update: Thu 26 Mar 2026 06:01:33 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: /5ri7stqOhJOM2zsMtUvrrGvvWznbST8KU1QcdNEkW0=)
2: E6adBVtp7nLxPiQrU3zSgNDba-4.roa (hash: 9PUq5JqVFHdrujt3HOKJApo5N2oaCeMkCMZ1/k+YjXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:95:82:89:e3:c2:8e:1b:ad:22:32:53:42:2f:29:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Mar 25 06:01:33 2026 GMT
Not After : Mar 26 06:01:33 2026 GMT
Subject: CN=ec5a734dd76d8b67acb9cf7fdda6f3d5a8d3798e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d1:65:69:76:48:9d:73:a6:c0:ec:ea:af:58:
55:5d:0f:ad:f2:c8:dd:05:92:0b:c3:ff:8d:0a:3a:
ae:36:16:a2:30:40:3b:42:b8:85:50:1d:c3:47:ea:
bc:9e:9d:ef:66:48:2a:e1:a4:d6:2a:94:e7:1e:8d:
fe:98:5c:15:3a:8a:81:cc:45:a7:b3:09:b2:75:59:
03:47:39:6c:61:ff:ed:6a:76:3f:1b:94:45:2d:02:
80:3a:10:0f:db:ba:62:cf:89:28:a2:1c:bb:03:b1:
4c:ed:15:46:bf:0f:b1:95:d8:08:ad:36:a8:0b:f3:
62:fa:c5:68:3c:3c:a0:6f:58:4a:4d:ab:2d:9b:27:
fd:9f:f2:ee:5e:2e:2e:da:7b:f0:e6:95:3b:44:16:
4c:40:c4:b9:f9:33:60:0f:0b:67:59:2e:e7:76:bd:
43:26:8f:46:03:bb:5d:c7:4e:77:98:06:39:7b:3b:
63:0d:54:2b:1d:ff:0d:3b:f5:9d:b2:3e:17:a4:56:
10:9e:4d:61:49:fe:d0:c8:bc:7f:a8:a5:ab:82:d7:
11:6c:78:b3:09:4e:b3:7c:bf:cb:be:95:e6:24:10:
a6:78:81:61:be:2d:b1:c5:f7:fc:ce:54:42:e0:1a:
b8:a1:f3:6c:19:f5:a6:ff:2c:5d:af:26:3c:96:55:
47:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:5A:73:4D:D7:6D:8B:67:AC:B9:CF:7F:DD:A6:F3:D5:A8:D3:79:8E
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c8:bf:80:81:32:cb:79:84:23:97:aa:10:6d:ac:e7:9f:05:
c8:07:78:89:2b:85:83:36:ae:fb:e6:e6:84:66:8b:2c:2d:33:
b5:f8:a7:82:30:16:fe:cd:4f:06:97:f7:34:f0:d8:58:52:e5:
f4:ae:4a:63:b5:ff:40:4e:08:4d:cb:95:61:74:ac:47:5c:f1:
28:dd:d4:a6:c7:2c:cb:73:3b:68:23:2c:47:da:97:8e:0e:2a:
4c:94:dc:3c:68:78:24:96:43:22:b3:18:6e:44:cd:3b:00:08:
d0:7b:1e:d8:25:af:c8:b4:db:09:0d:ff:8e:4c:16:b8:18:4c:
9a:c6:ee:b4:a5:36:22:c4:97:a1:35:40:f4:6e:b3:d0:52:27:
06:35:46:7c:0b:2d:01:e8:9e:e9:69:ce:81:22:99:b9:64:cf:
71:0e:50:62:98:a4:96:ea:b4:1f:5c:4b:2f:5e:58:f5:55:2f:
dc:f1:9b:56:59:14:0d:14:72:15:b4:07:e7:c6:14:1e:e7:eb:
39:9c:77:be:d5:47:e5:2c:92:fe:dc:17:94:da:93:73:d2:b9:
22:cd:bb:6c:81:1e:3e:91:68:85:8a:c8:5c:11:eb:fb:ca:65:
3e:4e:83:a0:99:38:3f:66:1d:c4:3c:4a:15:f2:57:be:03:b8:
16:65:78:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 09:54:23 2026 by rpki-client