Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
File: 1-uafCinvjYwi2dbs3jowfYlNXBk.mft (raw, json)
Hash identifier: yXAGX/gNcOfvHvzc+rRWkRqGRF+IHF+Juz9gXl9ng2U=
Subject key identifier: 49:28:FF:55:C2:17:8B:BF:92:3C:CD:83:FF:F0:36:0B:F3:01:76:AD
Authority key identifier: FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
Certificate issuer: /CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Certificate serial: 019FFD926AD75476FDFD84E8B09BF86F5921
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
Manifest number: 0AAE
Signing time: Fri 14 Aug 2026 00:00:58 +0000
Manifest this update: Fri 14 Aug 2026 00:00:58 +0000
Manifest next update: Sat 15 Aug 2026 00:00:58 +0000
Files and hashes: 1: 1-uafCinvjYwi2dbs3jowfYlNXBk.crl (hash: 5svO93mk6f9ZPHEv/9h7HZyz0zzUA71Qr6Hoi+djMfY=)
2: E6adBVtp7nLxPiQrU3zSgNDba-4.roa (hash: 9PUq5JqVFHdrujt3HOKJApo5N2oaCeMkCMZ1/k+YjXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 00:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fd:92:6a:d7:54:76:fd:fd:84:e8:b0:9b:f8:6f:59:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae69f0a29ef8d8c22d9d6ecde3a307d894d5c19
Validity
Not Before: Aug 14 00:00:58 2026 GMT
Not After : Aug 15 00:00:58 2026 GMT
Subject: CN=4928ff55c2178bbf923ccd83fff0360bf30176ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:2a:3b:ad:7b:a2:f6:fe:51:68:0e:96:29:51:
1f:fe:b2:5a:ae:01:d5:1f:54:90:e1:d1:ef:1a:6f:
28:4c:10:41:35:8e:f1:36:30:af:83:7d:89:2c:ef:
73:ec:fc:3c:2f:10:84:39:8d:88:7c:79:37:e8:4f:
e4:97:fb:07:b4:8c:cb:7c:e1:3b:c0:bd:77:55:ae:
63:1f:e1:6d:5f:15:d5:e0:37:dd:95:af:d8:b1:cd:
dd:95:a2:1b:01:ea:d9:e3:63:7d:e6:10:9c:62:20:
05:fc:c7:fc:ba:47:ce:a8:eb:4d:42:e2:ba:de:6b:
95:e2:e2:32:f9:55:42:7c:3c:8b:66:97:38:fc:6a:
60:01:80:e0:f1:f0:c1:4c:53:8c:a5:70:be:70:17:
c4:5b:4f:45:da:ab:0c:70:3a:82:3a:e7:27:ce:99:
f8:0c:2a:a8:91:44:f7:70:22:54:78:8a:b7:02:63:
df:f7:a8:fc:fd:21:fd:c3:8d:46:ad:e1:9d:2a:ef:
1f:3b:ab:55:f1:cc:b0:f4:f5:11:c7:d7:2a:06:ed:
84:0b:1c:df:f9:eb:32:e3:91:47:c5:b3:6a:d2:5c:
a2:91:23:d2:93:d2:2e:e7:66:ca:58:61:69:28:c2:
08:2b:1f:f6:90:36:91:40:60:d8:ff:44:76:b3:d4:
86:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:28:FF:55:C2:17:8B:BF:92:3C:CD:83:FF:F0:36:0B:F3:01:76:AD
X509v3 Authority Key Identifier:
keyid:FA:E6:9F:0A:29:EF:8D:8C:22:D9:D6:EC:DE:3A:30:7D:89:4D:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uafCinvjYwi2dbs3jowfYlNXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/d1359f-354e-4568-840c-af50a5be280e/1/1-uafCinvjYwi2dbs3jowfYlNXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:de:9c:83:28:d2:96:4e:9b:0b:f1:2a:80:40:a1:38:fe:25:
61:4f:8e:11:b4:15:d7:50:dc:ea:f2:8c:2f:f1:d8:56:50:e9:
86:dd:bf:eb:49:0a:91:0d:5f:de:7f:e4:21:67:50:16:b1:51:
78:c4:e8:ee:8a:ac:10:59:cf:a3:d3:81:47:72:f2:3f:d7:4e:
9f:2f:58:4f:5a:92:60:e9:fe:51:7c:a3:54:5c:9b:ad:b4:c4:
4b:26:d7:a8:e4:c7:ee:f6:69:62:99:8e:f2:70:9f:f5:57:9f:
c9:12:46:82:26:05:3c:af:3a:cd:e9:17:89:27:e9:5d:b3:33:
c3:99:a2:e0:4a:80:dd:91:a3:0d:73:6f:02:af:97:e6:28:6e:
91:ec:c7:c1:3c:fc:3f:6b:38:fd:ce:d3:7f:2e:d8:ba:6a:3f:
75:79:3d:13:eb:36:ff:b2:50:5e:7c:98:81:7d:ff:4d:01:21:
b2:27:4a:8a:5b:55:fd:31:c5:e6:12:24:2b:a2:87:e4:a4:93:
a7:36:32:74:18:bd:9b:61:4d:38:0c:e6:44:25:5b:1d:30:8e:
d6:b9:00:a1:87:e7:a5:f5:ac:fa:ac:5d:5f:8a:28:dd:74:85:
d9:78:18:38:b7:9f:e8:2a:5b:6f:c7:e3:19:1a:9d:dd:7e:a9:
60:f1:9c:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 06:11:38 2026 by rpki-client