Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: kGek6ANCfehx0TO7hmhrL9rtCS8I13KC5ppIMo181Cs=
Subject key identifier: AE:CB:2C:11:17:6C:AD:95:A6:38:20:8F:ED:6C:C4:86:13:84:25:DC
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019F11F885779CF22D5B96E032AA84D5E94A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0A34
Signing time: Mon 29 Jun 2026 06:02:07 +0000
Manifest this update: Mon 29 Jun 2026 06:02:07 +0000
Manifest next update: Tue 30 Jun 2026 06:02:07 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: gkK4+ZKWnp3RZFYuabuIpcp3imNDWAcbzJQczs/DCEs=)
2: E6adBVtp7nLxPiQrU3zSgNDba-4.roa (hash: 9PUq5JqVFHdrujt3HOKJApo5N2oaCeMkCMZ1/k+YjXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f8:85:77:9c:f2:2d:5b:96:e0:32:aa:84:d5:e9:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Jun 29 06:02:07 2026 GMT
Not After : Jun 30 06:02:07 2026 GMT
Subject: CN=aecb2c11176cad95a638208fed6cc486138425dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5f:28:9a:3f:c3:c8:4c:fb:cb:89:9c:df:28:
67:97:9d:91:bd:0f:e1:c7:22:ca:1d:b4:0b:d3:4f:
a9:a7:d3:e1:30:ae:d7:d7:46:af:b0:6d:cb:fe:2d:
46:c0:eb:1e:8e:26:09:dc:ad:71:be:a7:75:b4:c8:
e4:c5:81:bf:1b:4e:5a:6c:49:a2:29:68:e5:6a:fd:
c3:10:24:f0:c6:e9:a8:45:e2:33:0f:56:e1:ba:02:
b0:66:43:c7:25:7b:ef:d1:69:b6:e3:d1:dc:65:1c:
6d:79:b4:f3:31:7d:9e:f9:35:bc:2c:f0:32:0b:b7:
dc:59:6a:2f:f9:8f:10:b9:d7:24:23:04:68:10:e5:
82:b4:98:17:1b:70:e8:6b:6a:6c:df:b6:68:c3:77:
ca:c1:d3:00:8d:16:96:04:3a:3c:f0:bb:4b:1d:13:
ba:e4:0b:18:9b:be:6d:1c:26:a0:91:08:43:e4:7e:
29:12:df:ac:90:07:33:03:3d:96:35:1c:bc:79:3c:
cb:2a:90:6b:e6:2f:20:ec:15:99:f9:0a:69:ff:e7:
3c:14:a7:fb:ea:59:a8:45:3d:19:c2:2e:66:b5:09:
ea:ed:16:8b:f4:bc:aa:fd:ce:0e:cd:a5:da:58:a3:
dc:4e:4b:ab:f6:b6:2d:36:8c:60:66:3b:9b:81:b0:
c8:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:CB:2C:11:17:6C:AD:95:A6:38:20:8F:ED:6C:C4:86:13:84:25:DC
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:52:d4:66:74:d1:a6:18:61:69:9e:d8:72:b2:2d:3f:6e:29:
25:be:0f:8a:fc:82:df:28:30:b2:92:4c:7a:e5:1e:62:ba:54:
82:0a:cf:9d:f5:93:08:80:d6:12:76:d2:6e:71:09:27:17:04:
da:06:00:26:48:67:14:f3:1c:cc:76:fe:0d:aa:7a:4c:c6:63:
fc:1e:58:29:73:8c:60:9f:8b:a4:5d:01:1d:1f:bd:b3:e6:d4:
45:97:3f:3d:02:b1:af:63:92:be:5e:9d:de:81:24:19:db:7a:
da:d7:6f:3e:84:0c:1d:f3:a2:8d:57:13:3d:f6:6a:a3:2d:f7:
b6:58:b9:57:d3:2d:cb:f3:95:1e:1a:4b:0f:9d:3c:5b:18:ae:
bb:e6:10:dd:6d:4f:46:92:68:a9:14:3d:e8:45:45:90:8b:b3:
7b:1f:a3:15:4b:a0:d1:ba:0f:be:31:3f:9c:42:bc:6b:82:1c:
af:52:ce:4c:3a:bd:30:0e:81:df:06:ca:0e:32:0b:61:db:d5:
32:d4:4e:7b:94:a8:ae:34:42:e2:12:ee:1f:36:0e:b6:7b:c5:
a1:20:3f:a8:87:4a:4c:af:53:fd:40:96:79:98:6b:0f:24:2b:
6a:0c:c0:85:e5:3a:5a:60:22:47:ed:34:45:6a:d7:f2:ee:75:
2b:8c:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:38:29 2026 by rpki-client