Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
File: ucNjOsv2PC7LECBbm5JYCrtOuH4.mft (raw, json)
Hash identifier: xaK84+6iS+qrAIJ+r/G7ItqiwJIwrG8NQ9gC+13Fqc0=
Subject key identifier: 78:43:58:54:AD:3D:C4:72:DD:D9:C0:80:C3:CD:71:66:63:D8:27:57
Authority key identifier: B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
Certificate issuer: /CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Certificate serial: 019DA3782F5E6FC3D96540D2A81043AEA527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
Manifest number: 113C
Signing time: Sun 19 Apr 2026 02:00:55 +0000
Manifest this update: Sun 19 Apr 2026 02:00:55 +0000
Manifest next update: Mon 20 Apr 2026 02:00:55 +0000
Files and hashes: 1: Yk84G4_UtPljECZcZxnAd8C6Dtw.roa (hash: VUfZLeera1y7qXEcNu0qKbWRa4KRzrt9xSlyOWIQxDk=)
2: ehLpb_okv_BKobTR4Ea4FDdQ0sY.roa (hash: I1WYCShbHEPI2HusxnlSCkC9MRLR9xdS/4nGH0vILW4=)
3: ucNjOsv2PC7LECBbm5JYCrtOuH4.crl (hash: 5HErkp+i0JClaFXerwWLy/N+RJoMlRaO6dpVDAsauNg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:2f:5e:6f:c3:d9:65:40:d2:a8:10:43:ae:a5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9c3633acbf63c2ecb10205b9b92580abb4eb87e
Validity
Not Before: Apr 19 02:00:55 2026 GMT
Not After : Apr 20 02:00:55 2026 GMT
Subject: CN=78435854ad3dc472ddd9c080c3cd716663d82757
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:37:af:cc:f6:4f:77:3e:d3:51:cb:60:4d:f6:
df:1f:d5:4c:95:24:95:f4:8c:1f:3d:69:77:31:27:
ff:e1:75:d7:ff:f1:f7:eb:ba:e6:76:28:b4:d9:22:
58:1b:52:75:e3:61:85:9d:8f:c4:a2:4a:b9:f1:b8:
e3:95:5c:be:ca:32:e9:cd:c7:14:7b:2e:f0:22:7d:
c2:10:24:37:39:32:9c:ce:da:c7:0a:76:53:62:85:
35:d9:74:9a:de:46:1c:a8:59:c8:30:ba:93:5b:ef:
7f:14:c0:c2:e7:c9:8d:39:1e:d6:ad:f6:b8:20:d6:
e5:60:29:b6:d4:f0:10:4b:b4:d6:0b:b2:ac:07:51:
15:2b:20:b7:02:bc:f5:fa:f4:4e:47:7b:6c:6e:5c:
c6:b7:a3:15:ee:a0:9a:e7:5f:26:cf:5b:11:19:90:
4d:33:cb:be:14:35:3f:e6:8c:31:45:b1:73:14:44:
70:8c:f9:33:87:66:1c:b8:3d:7e:6e:d6:a8:dc:be:
d6:a3:7d:94:59:87:78:f6:8a:90:c2:e0:2b:f6:6b:
30:9d:ba:8e:36:90:70:c6:d4:57:f0:bc:9f:b0:9b:
18:5d:0c:bf:e4:2b:1e:61:f6:1a:88:93:f4:de:81:
70:3e:c8:f8:1d:b5:52:4b:d0:01:be:93:a2:4f:79:
b3:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:43:58:54:AD:3D:C4:72:DD:D9:C0:80:C3:CD:71:66:63:D8:27:57
X509v3 Authority Key Identifier:
keyid:B9:C3:63:3A:CB:F6:3C:2E:CB:10:20:5B:9B:92:58:0A:BB:4E:B8:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ucNjOsv2PC7LECBbm5JYCrtOuH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/0cd2f3-0f6a-4eaa-9845-99eca5651023/1/ucNjOsv2PC7LECBbm5JYCrtOuH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:cf:de:ad:4b:15:1f:c1:6c:58:d6:5d:bc:18:bc:45:ac:f8:
dc:16:a4:05:86:bb:c4:4e:55:15:15:6d:37:d9:f4:14:f1:92:
97:9b:f5:00:e7:1f:33:bb:80:a2:28:99:7d:83:c3:18:a7:e4:
5c:d2:ae:00:ed:8d:fd:60:ad:8a:41:c9:83:e0:f7:e8:e8:5d:
32:d6:d9:7e:46:5b:08:90:d9:87:9d:eb:4e:89:61:b9:18:53:
eb:32:9c:e9:42:58:a5:ea:f5:b9:17:d2:18:5f:da:3e:4d:6b:
d6:5f:56:44:94:79:ab:96:dd:eb:e6:30:02:c2:60:02:67:47:
f3:41:3f:fc:61:e9:9d:56:a9:57:5f:8e:43:cd:9d:bd:f1:26:
43:e1:30:29:18:b5:a2:5b:a6:84:43:90:ce:91:61:16:28:d3:
60:84:d7:d6:84:a3:68:c1:a1:76:2d:7e:a2:00:dc:3e:97:86:
13:ad:5b:ae:c9:4e:58:03:80:36:a7:61:b9:71:5f:a6:1d:7c:
2e:44:b7:ae:73:72:3e:9b:f5:12:ed:51:a8:d9:a0:0c:2c:d5:
ed:2e:50:70:3e:07:a4:59:6a:b3:ab:b7:b9:76:75:1a:e2:47:
4b:24:d7:7b:e9:90:1e:fc:41:76:37:08:02:1c:8c:82:77:71:
e7:00:47:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:15:33 2026 by rpki-client