Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: mHzC47/xorDVWygZkqnzIygLN5zL4ih4eI+BsUkznCA=
Subject key identifier: D7:9E:76:AA:19:D5:A9:5E:F3:80:6C:D5:8F:36:2C:5C:FF:51:C6:5B
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 01A0C6D8804E57BE66E51D0CFBD4B11440AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 12DD
Signing time: Tue 22 Sep 2026 02:01:12 +0000
Manifest this update: Tue 22 Sep 2026 02:01:12 +0000
Manifest next update: Wed 23 Sep 2026 02:01:12 +0000
Files and hashes: 1: 6X3gL5kp6R0KHSr8mAwt_w4RrBk.roa (hash: 2S27aehbfJcrJNKLthId4Hl3jXo5Nbp62N40ke4PF/Q=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: AkF7t9WxERzgfDfqARZ8TXyCxMreBqgWsVFwa1eE3Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c6:d8:80:4e:57:be:66:e5:1d:0c:fb:d4:b1:14:40:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Sep 22 02:01:12 2026 GMT
Not After : Sep 23 02:01:12 2026 GMT
Subject: CN=d79e76aa19d5a95ef3806cd58f362c5cff51c65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b7:60:67:30:69:4c:2a:aa:ee:69:3c:87:dc:
f7:00:db:00:09:23:05:dd:55:72:96:37:e8:47:29:
3e:53:52:62:f1:6e:79:b0:75:1a:a6:5c:60:bb:5c:
a0:1a:ea:cb:24:7f:4e:11:79:6e:a7:a9:73:30:9b:
08:a3:54:c9:8b:bf:09:be:44:47:94:e8:bd:8a:a0:
64:33:b5:13:1a:c9:35:09:21:91:bb:1d:0d:49:14:
95:df:0b:f9:95:4b:ad:c2:47:96:6f:fc:22:be:93:
53:6c:cd:03:06:d6:d0:72:02:d0:9c:04:f3:78:92:
44:02:0f:60:66:08:e1:c1:ae:12:1d:64:ae:9e:0c:
80:7e:95:3a:0d:f8:c3:d6:46:4e:b5:4f:d6:56:e4:
7a:e7:41:66:c0:ab:a3:14:fd:a3:ba:fe:cf:30:46:
b7:6e:d0:fe:17:83:fb:48:36:c2:85:0e:44:e0:9c:
fe:86:23:96:1e:e6:6d:f6:c1:ae:63:f7:3b:74:ac:
32:f9:84:d5:2b:a3:70:ba:fa:a8:45:47:05:11:14:
78:45:5d:e5:cc:0c:06:80:57:01:e1:02:da:a8:38:
8a:c1:54:6e:c3:e1:c4:c4:b2:81:43:93:e6:37:76:
5f:6e:92:d3:01:3f:0a:cb:de:58:ca:e3:4a:7e:4d:
33:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9E:76:AA:19:D5:A9:5E:F3:80:6C:D5:8F:36:2C:5C:FF:51:C6:5B
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:49:4e:5b:94:d2:9d:b9:90:bd:d6:79:03:0d:22:82:97:82:
47:a8:c1:52:11:b6:98:23:40:a2:35:67:3e:bb:22:6d:63:44:
3d:c5:bb:7c:17:ab:49:d4:94:bf:52:13:f2:e0:bc:e0:60:50:
9e:36:49:81:7b:a4:d3:a4:ff:96:2b:10:79:e7:f5:1c:d6:0f:
49:8f:62:ec:44:d0:7f:84:6c:49:cc:bd:dd:f7:d3:57:3d:6c:
00:30:23:aa:28:08:9f:2d:b3:91:43:bb:1f:fd:3a:a4:1d:86:
ff:1f:c4:5a:01:07:8a:fa:39:ed:b7:58:8a:b1:e0:9a:39:a8:
9d:45:86:c6:22:1c:39:e6:71:61:4e:ea:60:82:a8:72:89:6e:
a3:9f:77:05:89:64:82:48:96:9c:08:1b:34:3a:15:c8:5f:09:
a1:66:cc:f4:6f:2d:c2:a4:37:d3:c9:fb:89:de:1f:65:da:77:
c5:a0:48:a2:25:b6:92:a8:94:e8:eb:00:bf:e2:b3:69:38:3e:
f2:f3:3b:b1:d8:f8:34:05:56:0f:4e:82:6b:d1:44:fc:c8:4f:
ce:f6:a8:3f:1d:6b:b8:22:1a:b8:d3:60:c2:d0:4f:0b:b6:0c:
bf:16:40:ec:04:75:b2:22:7c:29:23:f8:53:59:2d:57:0c:2c:
2a:ab:a8:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:49:26 2026 by rpki-client