
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
File: uqSm69s4PhGdaVPHfxaGbnPvLbU.mft (raw, json)
Hash identifier: kiW5GdmnpjluU1Pay5lb0CBHJbzUC+11N4R+oOnrM3o=
Subject key identifier: AD:DC:87:F5:BD:EB:74:66:91:20:0B:C5:33:FD:A2:31:87:48:E3:53
Authority key identifier: BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
Certificate issuer: /CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Certificate serial: 019F10AE10AE1FC59487C50BEACED536EE02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
Manifest number: 01D1
Signing time: Mon 29 Jun 2026 00:01:10 +0000
Manifest this update: Mon 29 Jun 2026 00:01:10 +0000
Manifest next update: Tue 30 Jun 2026 00:01:10 +0000
Files and hashes: 1: _YxvUoR5WB4wYKYvopBg6R1wyQY.asa (hash: yHWWVgA+9d+6bFWZAxgVAfp5/UE5nZYg7alMcUo5W/E=)
2: uqSm69s4PhGdaVPHfxaGbnPvLbU.crl (hash: WZcUzjyGmTOAOvAlo2TNYykcjVz+oIhkFCxLdFXnywQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:10:ae:10:ae:1f:c5:94:87:c5:0b:ea:ce:d5:36:ee:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=baa4a6ebdb383e119d6953c77f16866e73ef2db5
Validity
Not Before: Jun 29 00:01:10 2026 GMT
Not After : Jun 30 00:01:10 2026 GMT
Subject: CN=addc87f5bdeb746691200bc533fda2318748e353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c4:d5:b0:43:14:42:3b:04:35:97:9f:7c:23:
5e:67:a5:e2:b3:d5:9c:03:ac:50:b6:de:d8:50:c4:
17:1e:ff:a4:07:4f:98:6a:2d:50:99:2c:fd:53:0d:
0d:ed:b6:44:18:2e:85:5f:eb:d2:c4:6f:fa:20:39:
b3:6b:12:e8:b9:20:41:da:c0:56:d3:de:3d:65:ce:
b8:fb:d2:d7:bd:f8:52:a5:68:01:98:a8:39:d7:25:
2f:8a:7a:37:0c:b6:5a:11:99:6f:90:7e:79:38:17:
3e:a9:7a:41:c1:50:9a:96:d0:bf:a9:3e:4c:7e:6a:
53:18:0a:fa:ae:24:93:c9:72:a2:07:63:de:8a:46:
87:1e:d5:1b:42:6a:95:f2:57:17:56:5d:6e:d1:df:
86:8f:20:19:c4:c2:36:47:2f:6a:64:d8:f4:0c:5a:
71:88:ca:69:ed:c2:71:43:c3:eb:f0:07:7b:b2:12:
72:ef:b3:90:18:da:ea:9d:6d:d6:80:6c:57:26:e7:
a5:0e:08:c4:90:f9:02:1c:83:18:ca:c9:86:81:6d:
17:81:8c:be:d6:93:c9:38:5c:cd:1e:72:a7:03:0a:
c9:32:ed:7f:7a:04:c9:ef:e5:98:60:f1:9b:72:f7:
f7:9c:c8:8f:b2:af:9b:50:9d:32:0f:05:6f:02:c4:
af:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:DC:87:F5:BD:EB:74:66:91:20:0B:C5:33:FD:A2:31:87:48:E3:53
X509v3 Authority Key Identifier:
keyid:BA:A4:A6:EB:DB:38:3E:11:9D:69:53:C7:7F:16:86:6E:73:EF:2D:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uqSm69s4PhGdaVPHfxaGbnPvLbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/8daa29-c857-40c2-b97a-839ad7d093ed/1/uqSm69s4PhGdaVPHfxaGbnPvLbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:24:9b:cf:58:bf:fd:58:c5:ad:5c:dd:77:0f:1f:2e:1d:f9:
ae:2c:2e:e2:d7:22:fa:2b:27:85:6a:1f:14:6a:55:30:4c:7d:
b0:02:28:72:ca:74:7c:1e:f1:b4:87:b3:0e:b5:e2:2a:f7:3d:
ad:4d:09:26:bd:53:bc:7b:56:09:a1:49:6c:7b:dc:d3:25:63:
73:24:92:34:d2:0f:34:fd:e0:15:86:c9:01:62:43:af:ae:79:
85:00:31:76:27:94:18:d7:dd:ed:24:2d:28:40:a9:29:8d:3c:
45:54:80:74:0e:33:20:17:e2:90:56:dd:f6:5e:42:47:5c:2c:
ec:a0:45:f5:0a:77:27:77:53:b2:30:10:a7:68:ce:f3:51:ca:
50:50:56:32:e2:73:3c:ae:c8:4f:ba:fb:61:a5:27:4c:87:2b:
58:7a:ae:1e:3f:c3:89:00:f7:c9:4b:39:16:55:06:3a:19:92:
24:57:89:1d:06:72:93:e4:19:70:e5:af:cd:be:1d:80:31:ce:
5a:08:55:44:b3:0f:b6:99:4f:47:f6:4d:4e:95:36:bc:65:23:
6f:18:bb:d8:bb:f0:37:5d:0d:a6:52:ce:20:b8:b1:51:c4:37:
74:6a:e6:6f:68:d6:c5:33:88:d1:66:c9:6e:61:03:97:73:ed:
f1:e9:c6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:38:18 2026 by rpki-client