
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
File: uCLebF2ewIbZ0gGrbaVr08_v8kM.mft (raw, json)
Hash identifier: 9geQllV5TntJW7ggynBH7p1fAI+jUV0gO9A55QAjpVk=
Subject key identifier: BF:78:9D:DB:11:62:17:7A:1F:C9:11:6E:F4:69:92:35:81:C7:A5:EB
Authority key identifier: B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43
Certificate issuer: /CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
Certificate serial: 01A0D7CBEDD2EE69C8849337F2D0EB709FE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
Manifest number: 0287
Signing time: Fri 25 Sep 2026 09:01:00 +0000
Manifest this update: Fri 25 Sep 2026 09:01:00 +0000
Manifest next update: Sat 26 Sep 2026 09:01:00 +0000
Files and hashes: 1: fJN7PYZX9Sr-HX_3erhR56oW5z4.roa (hash: 62V7rj0IiHO0OW2XHO1iINDHqaR8ItLLbYMYozGGFjw=)
2: uCLebF2ewIbZ0gGrbaVr08_v8kM.crl (hash: ekVxIhS8C6ZA7A/D4sk87aLF3UKvjj96n3s/Eje1uB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 08:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:cb:ed:d2:ee:69:c8:84:93:37:f2:d0:eb:70:9f:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b822de6c5d9ec086d9d201ab6da56bd3cfeff243
Validity
Not Before: Sep 25 09:01:00 2026 GMT
Not After : Sep 26 09:01:00 2026 GMT
Subject: CN=bf789ddb1162177a1fc9116ef469923581c7a5eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ee:e6:04:4f:70:0e:53:3f:39:ad:4f:cf:6d:
a7:8f:3c:4a:f4:62:23:5a:fb:c7:f1:59:09:e9:28:
b2:20:35:fc:29:66:11:ca:3e:74:f1:85:46:4e:df:
bc:be:3f:94:cf:7a:cc:be:81:7f:58:62:b4:1e:69:
8b:f2:5c:0b:f8:86:8c:ad:72:13:50:b9:da:09:97:
77:a9:de:58:53:43:3f:38:bb:dd:53:ef:65:49:0a:
f1:8a:eb:51:e5:68:a5:fd:60:14:2c:77:81:66:3f:
77:97:d8:ea:33:9c:03:37:21:90:32:3e:e2:b2:cf:
48:34:01:46:fb:4b:2b:5e:f5:d2:b7:cf:32:58:7c:
ff:ad:88:44:ca:26:04:2e:0b:d5:63:df:47:ae:88:
84:1b:91:48:76:cd:6e:fe:f3:98:bc:c2:2f:41:76:
5d:b6:cc:4e:d8:7d:c4:98:83:cd:cd:ed:68:c3:76:
cd:9f:65:ec:0b:1d:1e:b4:1c:6b:4e:16:a4:28:96:
73:3a:5e:87:bf:92:f6:d6:2d:98:56:b2:f8:d2:19:
29:f4:eb:b7:47:0f:fa:79:e4:77:dc:20:b5:42:77:
ec:ac:67:c0:b9:cb:34:10:bf:f1:de:7e:76:12:d2:
9a:ac:6e:a5:c4:51:fe:28:a1:b7:77:18:aa:96:01:
a6:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:78:9D:DB:11:62:17:7A:1F:C9:11:6E:F4:69:92:35:81:C7:A5:EB
X509v3 Authority Key Identifier:
keyid:B8:22:DE:6C:5D:9E:C0:86:D9:D2:01:AB:6D:A5:6B:D3:CF:EF:F2:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uCLebF2ewIbZ0gGrbaVr08_v8kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/3b0f60-37e4-45b9-8a2c-af38bf706f37/1/uCLebF2ewIbZ0gGrbaVr08_v8kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:cf:c7:b9:31:20:71:c8:bf:e9:4a:13:96:51:e4:7c:a4:ad:
e8:ad:a4:e9:79:15:2e:80:9c:71:cc:92:54:74:81:d0:c1:bb:
67:a3:4c:f3:36:64:9b:95:71:e3:83:57:e8:2b:00:53:97:23:
46:23:0b:ca:6e:d3:09:62:33:6c:e2:d1:94:21:24:16:fd:5e:
07:56:7e:0c:71:ad:37:45:7e:e2:6d:4e:9d:5e:41:a0:8d:c2:
7c:d3:82:00:4c:bc:79:ec:4e:e6:78:ed:e7:dd:f8:e7:c7:8a:
e3:f7:fa:1d:db:e5:92:57:ed:da:68:e6:59:8f:fd:ea:80:dc:
ac:19:ee:7c:fe:bf:5d:35:95:c7:ce:07:32:33:9d:60:9a:e1:
f1:63:10:88:9d:77:4e:8e:55:3f:7f:a9:8a:58:0b:77:3b:1e:
fb:78:0c:01:29:0f:40:a6:c6:66:cd:5d:bc:ce:7d:f6:ef:2c:
da:1d:61:e5:28:df:d3:1f:34:67:16:22:25:fe:22:7f:a5:3c:
f6:44:56:a8:f5:4a:9d:23:0c:4e:b3:12:a9:2f:f6:57:7d:f8:
ef:d0:97:5e:0e:42:58:0c:f0:c9:96:e8:35:3a:58:8a:5e:39:
9f:c9:36:94:1d:af:ba:67:eb:0e:bd:de:b6:e5:ae:f7:11:e0:
29:86:00:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:03:39 2026 by rpki-client