Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: cCONJ1eTTi59Y69lYdwpUpNYe+vOBVlk7OJK3C6rmQc=
Subject key identifier: DA:DA:10:2A:1F:34:58:D0:5D:96:45:D3:C9:C2:F1:CC:27:B9:12:F5
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019CAC46827AB755E7A05EF5692B69DEDD3F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 10BC
Signing time: Mon 02 Mar 2026 02:00:27 +0000
Manifest this update: Mon 02 Mar 2026 02:00:27 +0000
Manifest next update: Tue 03 Mar 2026 02:00:27 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: 5K6SbeTS9mHCadh4dcE/aToPsuMtClr+hlFwfP4uNgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:82:7a:b7:55:e7:a0:5e:f5:69:2b:69:de:dd:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Mar 2 02:00:27 2026 GMT
Not After : Mar 3 02:00:27 2026 GMT
Subject: CN=dada102a1f3458d05d9645d3c9c2f1cc27b912f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ad:e5:6c:bf:13:6a:92:9e:60:7c:d8:49:75:
b3:04:5b:18:e5:c9:22:2c:29:c6:7f:ba:38:6a:0c:
b5:42:f6:79:53:a4:20:c6:4d:23:32:b3:b1:03:2a:
66:c1:3f:e3:33:c9:5a:ba:aa:05:e8:b5:04:5c:93:
af:d9:2a:ea:91:8b:78:72:7b:fe:61:be:17:39:9a:
24:38:e1:7a:20:13:67:98:24:53:94:d5:ba:58:40:
e3:59:58:95:d9:82:75:47:42:fc:a8:99:d7:6e:aa:
be:e8:b4:7f:a6:b1:47:c3:88:5f:b7:ad:98:63:db:
8e:7c:33:82:bd:68:31:a5:d4:c6:4e:1d:61:0a:85:
75:d3:78:c7:b2:25:26:ad:8e:b3:94:ee:95:f6:63:
b9:59:1e:36:60:9f:48:40:96:ed:58:44:14:f7:7d:
4a:bc:14:20:63:b4:e0:a8:36:65:f3:de:67:21:c7:
5b:3a:9a:67:1a:aa:cb:7e:c4:1a:2f:4f:9a:44:7f:
c4:41:3a:0a:00:59:44:2a:f4:8d:9d:90:2c:26:b3:
36:51:b3:fc:6d:71:7b:72:d9:cb:17:b7:fc:0d:67:
eb:28:94:a0:a8:42:d7:27:59:63:1d:c9:45:0f:5a:
d6:df:53:de:51:b9:30:56:4d:e1:9c:6e:81:00:ef:
86:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:DA:10:2A:1F:34:58:D0:5D:96:45:D3:C9:C2:F1:CC:27:B9:12:F5
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:43:43:99:7f:1e:5c:88:50:4d:f5:a9:a5:66:06:2a:2e:f8:
9e:4b:34:b3:03:a2:fe:38:ff:e8:0d:11:b7:1c:4b:a5:73:c9:
cb:45:eb:53:05:78:30:b8:d6:04:6c:e2:c1:3a:95:a8:fc:43:
8f:d8:4a:00:7e:17:ce:2f:08:53:9d:d7:34:bd:f0:3f:38:c6:
48:90:d4:c4:13:b3:89:53:b3:98:e5:c6:74:4d:96:5a:f4:31:
72:70:6d:7e:ba:c4:eb:6f:b2:08:cf:84:af:ea:6f:4d:fb:23:
16:bc:72:d6:4b:fd:db:51:e7:eb:a0:77:70:c0:dd:76:e5:5f:
49:9a:12:db:11:72:f6:11:84:2a:d1:2c:3f:6e:a3:93:79:0a:
ea:dc:66:f9:19:d3:e4:3c:c9:b7:e8:db:58:22:01:fd:d5:f1:
80:38:64:ff:f1:63:76:61:5a:42:af:f8:1e:19:e0:c1:81:4c:
6d:d0:2c:95:89:db:75:c9:69:1f:eb:87:6f:d2:a9:37:2b:89:
5e:6f:9a:21:b0:ef:c4:30:29:b4:11:ee:b5:98:33:24:64:c3:
8a:2a:4a:9d:e8:f9:15:f9:55:95:e2:fa:9b:81:d3:c8:5c:9c:
63:55:de:21:40:30:eb:8f:f9:80:d2:76:cc:fc:be:13:20:32:
7d:1d:13:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:12 2026 by rpki-client