Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
File: uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json)
Hash identifier: HOB/Ho9HoEK5etY1jjNI5w2loAE8kTTTmUdYjUsdEJA=
Subject key identifier: 62:4F:C5:DA:29:E7:D4:98:09:10:29:36:0A:50:68:C8:77:A4:13:0C
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Certificate issuer: /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial: 01A1705C34A26A1CC5A01C31DC29EEA64457
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
Manifest number: 030C
Signing time: Sun 25 Oct 2026 00:00:53 +0000
Manifest this update: Sun 25 Oct 2026 00:00:53 +0000
Manifest next update: Mon 26 Oct 2026 00:00:53 +0000
Files and hashes: 1: UMarbD4fXBmTCtR7I0oY9lbOjGo.asa (hash: Aoc1b47b8UGPIG+siIAm46TwNrPogFBPZadiHO43Mfk=)
2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: n4vyPc0+RLYRo3PfEuyfUr0bkDSErAaxuiM4iQbbuQI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:70:5c:34:a2:6a:1c:c5:a0:1c:31:dc:29:ee:a6:44:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Validity
Not Before: Oct 25 00:00:53 2026 GMT
Not After : Oct 26 00:00:53 2026 GMT
Subject: CN=624fc5da29e7d498091029360a5068c877a4130c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:35:02:67:06:b9:7d:e3:46:3c:18:e4:93:9c:
8a:bf:97:7e:93:dd:fe:89:c8:2e:1f:f5:d1:2e:be:
38:ca:49:77:33:98:cd:0f:3d:bf:db:1c:07:21:10:
c0:59:7b:e7:f5:ea:38:d8:11:b3:be:0b:17:2f:ae:
6a:fd:d3:e1:3d:7e:1c:c2:9a:91:50:0d:dc:1d:38:
92:34:f2:b8:0d:9d:5c:ac:0a:04:86:7d:5d:c6:af:
1c:da:b1:ae:e9:d5:e4:71:e1:ba:20:07:f7:ec:67:
d2:b2:ef:9d:2a:b5:8c:db:d8:10:1b:8e:e1:06:21:
12:27:92:37:e8:9b:97:35:ef:60:d3:cd:3f:50:c1:
24:5e:d2:18:22:8c:14:5e:c4:c5:b5:ff:82:db:8c:
1f:8c:b1:05:d0:2f:aa:a8:d2:02:95:7f:66:26:22:
86:5a:61:df:16:5a:8d:0a:56:fe:35:10:c7:bb:7e:
bc:b5:da:f1:c3:ce:01:fc:a4:ba:87:79:67:3b:b0:
0a:9e:6d:f5:3a:48:55:da:61:c4:02:e3:d9:2b:f7:
fe:80:84:98:ac:73:cd:44:c0:fe:df:c3:2c:d0:3b:
22:fa:91:e9:db:fd:df:84:53:3f:a8:34:0c:6a:bf:
49:8b:29:3a:59:0d:c5:e0:8d:7c:10:12:38:f3:f1:
8c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:4F:C5:DA:29:E7:D4:98:09:10:29:36:0A:50:68:C8:77:A4:13:0C
X509v3 Authority Key Identifier:
keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:ba:ef:60:07:fe:45:d8:66:e8:7a:88:91:20:d8:ef:53:bd:
03:46:5f:78:6e:67:29:9e:2d:02:a3:58:92:f8:1e:af:e6:76:
35:e4:c0:ea:fc:a9:1f:09:b9:29:ca:4a:74:f3:30:61:eb:ff:
62:74:12:d1:d4:70:87:d6:ee:5a:19:b4:54:d8:a4:85:d6:28:
67:a4:2a:5e:2e:1e:37:2d:a6:ce:dc:6d:16:db:7c:48:4c:1f:
e2:f3:0e:74:f9:8d:32:e7:e8:19:56:69:11:2d:38:95:fa:6d:
f1:6c:f3:bb:c2:b3:f8:51:67:08:53:e3:34:ef:b6:ab:32:21:
63:1b:b5:e0:4d:e9:31:6e:46:c7:3a:1f:a6:1a:55:92:6e:33:
6a:00:3f:cc:ba:b8:34:49:f7:cb:b3:8f:6b:73:aa:e9:e9:2a:
2c:6e:38:23:5e:91:16:df:a1:8b:9c:2d:e2:f0:38:9d:b3:12:
b7:35:54:c6:d9:c9:bb:43:6a:be:8c:1b:0c:8f:21:ea:9f:32:
28:13:39:cb:ca:21:12:56:c0:f3:7d:4f:c4:80:99:b2:f0:d4:
b7:26:c3:a6:88:c8:db:85:e3:1c:15:fc:fb:f5:57:e8:ee:ff:
40:95:2d:eb:b0:28:2d:4f:31:79:32:0c:2a:79:7f:7b:9a:e6:
36:54:9a:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFwXDSiahzFoBwx3CnupkRXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhYTRhNmViZGIzODNlMTE5ZDY5NTNjNzdmMTY4NjZlNzNl
ZjJkYjUwHhcNMjYxMDI1MDAwMDUzWhcNMjYxMDI2MDAwMDUzWjAzMTEwLwYDVQQD
Eyg2MjRmYzVkYTI5ZTdkNDk4MDkxMDI5MzYwYTUwNjhjODc3YTQxMzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnDUCZwa5feNGPBjkk5yKv5d+k93+
icguH/XRLr44ykl3M5jNDz2/2xwHIRDAWXvn9eo42BGzvgsXL65q/dPhPX4cwpqR
UA3cHTiSNPK4DZ1crAoEhn1dxq8c2rGu6dXkceG6IAf37GfSsu+dKrWM29gQG47h
BiESJ5I36JuXNe9g080/UMEkXtIYIowUXsTFtf+C24wfjLEF0C+qqNIClX9mJiKG
WmHfFlqNClb+NRDHu368tdrxw84B/KS6h3lnO7AKnm31OkhV2mHEAuPZK/f+gISY
rHPNRMD+38Ms0Dsi+pHp2/3fhFM/qDQMar9Jiyk6WQ3F4I18EBI48/GMHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGJPxdop59SYCRApNgpQaMh3pBMMMB8GA1UdIwQY
MBaAFLqkpuvbOD4RnWlTx38Whm5z7y21MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2Et
ODM5YWQ3ZDA5M2VkLzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS84ZGFhMjktYzg1Ny00MGMyLWI5N2EtODM5YWQ3ZDA5M2Vk
LzEvdXFTbTY5czRQaEdkYVZQSGZ4YUdiblB2TGJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAA7rvYAf+
Rdhm6HqIkSDY71O9A0ZfeG5nKZ4tAqNYkvger+Z2NeTA6vypHwm5KcpKdPMwYev/
YnQS0dRwh9buWhm0VNikhdYoZ6QqXi4eNy2mztxtFtt8SEwf4vMOdPmNMufoGVZp
ES04lfpt8Wzzu8Kz+FFnCFPjNO+2qzIhYxu14E3pMW5GxzofphpVkm4zagA/zLq4
NEn3y7OPa3Oq6ekqLG44I16RFt+hi5wt4vA4nbMStzVUxtnJu0NqvowbDI8h6p8y
KBM5y8ohElbA831PxICZsvDUtybDpojI24XjHBX8+/VX6O7/QJUt67AoLU8xeTIM
Knl/e5rmNlSa+A==
-----END CERTIFICATE-----
Generated at Sun Oct 25 06:08:04 2026 by rpki-client