Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
File: uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json)
Hash identifier: HRiFetxB0+9ZORAcZPaAuldpsGph4dgmTWlXWpC+Gkg=
Subject key identifier: 58:99:38:4A:68:A9:89:E7:68:E0:05:A7:5A:91:66:1D:4A:5E:BE:E8
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Certificate issuer: /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial: 01A160E9739B3C3B04F22573E5472D0D34D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
Manifest number: 0304
Signing time: Thu 22 Oct 2026 00:01:14 +0000
Manifest this update: Thu 22 Oct 2026 00:01:14 +0000
Manifest next update: Fri 23 Oct 2026 00:01:14 +0000
Files and hashes: 1: UMarbD4fXBmTCtR7I0oY9lbOjGo.asa (hash: Aoc1b47b8UGPIG+siIAm46TwNrPogFBPZadiHO43Mfk=)
2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: xQwjvdxc1e4UKtQ/c3FT+tS+95N0QrfQdzB9gAEj+R8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 00:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:e9:73:9b:3c:3b:04:f2:25:73:e5:47:2d:0d:34:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Validity
Not Before: Oct 22 00:01:14 2026 GMT
Not After : Oct 23 00:01:14 2026 GMT
Subject: CN=5899384a68a989e768e005a75a91661d4a5ebee8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e1:fc:e5:4f:41:f8:71:e4:4d:1b:a9:80:e3:
72:1f:fb:c6:b1:24:7d:48:ea:e4:da:e5:00:35:a7:
89:80:21:7c:ae:fe:3d:88:4a:89:92:9f:91:61:c5:
07:56:17:15:c2:61:c5:82:69:4a:de:70:da:38:06:
bd:db:f8:6b:8e:80:6a:12:c2:42:7e:c0:a6:2c:20:
73:e3:b3:0b:7d:0a:78:28:03:3f:6a:97:0d:85:9c:
00:d5:fc:ac:83:aa:f2:3e:2f:ce:03:7d:fe:2f:ff:
5b:29:c6:96:94:59:5a:cf:67:e4:90:03:66:1f:76:
fd:f0:c5:d7:43:4b:3d:06:bd:11:8a:38:7e:6d:a6:
25:b0:13:b9:5a:cd:e2:c0:f6:1d:c3:39:68:1a:a9:
98:9d:55:c9:24:a1:96:69:84:2d:9e:ac:ac:9f:8f:
c0:50:2f:0c:16:7c:31:d3:95:14:27:48:66:49:97:
8c:a7:50:f8:84:76:79:80:f6:c0:3e:cd:33:0b:28:
a0:27:81:da:18:85:26:7b:11:82:2a:c5:14:17:bf:
f6:8b:3b:e1:3c:b5:43:86:ca:62:24:1c:50:8c:5e:
b6:05:0c:70:8f:50:23:0d:71:57:07:23:62:e7:f3:
28:97:36:88:76:8c:c6:10:51:85:91:ee:1e:ea:55:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:99:38:4A:68:A9:89:E7:68:E0:05:A7:5A:91:66:1D:4A:5E:BE:E8
X509v3 Authority Key Identifier:
keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:71:52:23:0d:cf:b2:29:6c:ee:da:f3:8f:61:95:29:8c:11:
58:bd:97:a9:ca:1a:7a:6f:04:31:18:8b:96:89:27:f8:c9:ce:
b9:17:d1:ce:44:59:9f:44:68:4b:50:4e:0d:10:c2:ab:cd:3f:
19:a4:9b:6b:40:22:2b:04:78:d9:08:20:91:ae:c7:73:90:be:
11:6b:88:8f:d1:16:3c:34:f1:0b:3e:14:b5:2c:43:1d:33:46:
31:c9:87:47:27:2e:de:68:c2:a6:9f:93:06:ae:d7:26:c5:c1:
bf:5c:f3:1a:9e:ca:08:f1:53:04:99:4b:7a:4a:3d:0e:d8:8e:
38:1a:b8:45:59:da:a3:db:ce:6c:11:23:d2:18:e8:12:35:08:
22:45:ca:9f:50:2b:09:bb:0d:e3:8d:a8:ef:71:24:29:0d:8d:
16:38:f5:3c:f0:46:70:1f:2b:6e:5b:b5:0f:0e:f9:15:15:54:
ae:d6:50:ab:b2:14:a6:a6:41:c0:ba:19:9f:c6:b8:12:5f:62:
ea:81:02:1c:c4:5e:3c:0a:db:ce:4d:44:b0:5f:a6:f8:0a:98:
6d:2a:06:b9:b0:7f:f1:6b:7f:20:81:7d:31:70:4b:4e:73:b7:
f3:a5:34:bb:30:dc:59:07:56:9f:de:ad:de:af:93:c0:8f:09:
c2:90:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:55:11 2026 by rpki-client