Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: FACWA/nhts+UOxKLzia3fkvfEMbacnRsmmxkh15qlYY=
Subject key identifier: 5C:DF:B0:25:2F:47:B1:66:B2:87:6F:B6:89:9D:60:EF:B0:71:43:AF
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019CAA58210440004D97D12CBC16618F023A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 10BB
Signing time: Sun 01 Mar 2026 17:00:28 +0000
Manifest this update: Sun 01 Mar 2026 17:00:28 +0000
Manifest next update: Mon 02 Mar 2026 17:00:28 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: Z7bc2qdQD7avGu87STeKoYfKc/mcSIRUN7Qy6EZ8Cgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:21:04:40:00:4d:97:d1:2c:bc:16:61:8f:02:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Mar 1 17:00:28 2026 GMT
Not After : Mar 2 17:00:28 2026 GMT
Subject: CN=5cdfb0252f47b166b2876fb6899d60efb07143af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:32:a8:16:dd:4d:67:ba:57:48:cc:d2:a6:d0:
24:ff:33:10:e6:1f:d7:18:55:17:4f:f5:09:12:4d:
d3:94:1c:ce:89:37:7d:4b:1f:b1:d0:44:ed:10:0b:
93:32:da:91:c4:3e:81:cb:b8:2c:c8:90:7c:7a:4a:
0f:8d:b5:13:7d:b5:f3:85:3a:27:42:8d:9c:78:fd:
ea:69:ec:aa:e4:e0:6d:81:ab:0e:64:61:6a:4a:f4:
d5:be:6c:5c:4a:da:33:91:b6:83:42:57:ce:04:57:
19:21:06:47:e5:2e:48:24:94:b2:0b:f3:46:8f:cc:
b2:ff:1d:af:99:fc:56:f0:1d:4c:2d:dc:98:25:0f:
52:48:8c:21:27:bc:d4:e7:27:ce:5c:d9:a0:b2:cf:
5d:76:e7:87:d4:5e:c1:a0:85:bb:9c:0b:4b:be:76:
55:96:1c:08:05:80:3b:19:8e:03:64:95:3e:ba:e3:
7c:b4:af:2a:f0:e6:7a:10:b7:b6:bd:5d:bb:3d:61:
c7:d8:77:e0:36:d3:e7:4e:b4:33:a2:9c:44:88:ba:
4a:b3:7e:72:1f:51:f7:b8:21:87:0a:3a:23:ec:a7:
b8:56:fb:67:0a:de:52:71:3d:89:f2:ff:01:6c:78:
af:2f:ec:d3:ec:46:90:72:92:be:a1:1a:ca:c2:31:
de:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:DF:B0:25:2F:47:B1:66:B2:87:6F:B6:89:9D:60:EF:B0:71:43:AF
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:59:03:77:0b:eb:c9:6a:df:49:02:14:36:1f:1a:09:4a:67:
f1:d6:b7:86:75:5f:dd:a6:bb:98:a6:d4:a2:90:8f:5a:fc:52:
f0:ff:01:f9:0e:c4:d7:9f:0b:83:dd:a1:15:fa:bd:4d:e9:69:
bb:9c:7f:04:51:af:f5:b1:d4:ed:f9:e4:b6:24:ec:44:58:34:
de:8b:0e:c6:89:ff:90:15:c8:a3:4c:95:66:ce:8f:c2:c8:57:
8d:2a:35:ee:1a:1d:73:ee:b0:c8:a1:33:82:05:f8:4e:70:7a:
be:81:5f:62:c6:1a:47:41:1a:03:60:43:e3:4e:03:10:18:a4:
15:7c:9f:4d:24:01:f4:15:a7:8a:ff:61:82:59:f4:e9:cf:fb:
0d:36:6c:ff:57:e4:d7:d4:1b:c7:54:5e:36:43:be:17:6c:20:
9a:dc:a3:e0:13:59:26:91:5f:77:e3:ca:7e:57:37:3f:f7:d4:
e8:7d:34:23:e6:c6:b9:b1:9f:f3:4a:83:5a:af:95:6d:a5:e8:
86:5b:3c:e5:19:d2:06:67:7a:c7:f1:f9:eb:2c:93:75:50:70:
74:26:11:82:96:d1:28:ed:11:a4:66:56:45:d6:48:d2:bb:7c:
df:65:9d:71:32:9b:f5:30:75:b7:46:a1:69:7e:4c:c7:f8:06:
ef:69:c4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:02:07 2026 by rpki-client