Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
File: uocjZRyrzwAJzygaKlHFtOkFYi8.mft (raw, json)
Hash identifier: gKprBwYrqc6MVskjyp8L4Y9VJo8n/P2F7osO/CCumLk=
Subject key identifier: A5:31:E9:2E:6B:E5:B0:0A:AC:9B:C1:EF:12:9F:D9:43:7E:20:92:07
Authority key identifier: BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
Certificate issuer: /CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Certificate serial: 019ED3F477CE67CFF6FB208C433B4BEA538E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
Manifest number: 1963
Signing time: Wed 17 Jun 2026 05:01:14 +0000
Manifest this update: Wed 17 Jun 2026 05:01:14 +0000
Manifest next update: Thu 18 Jun 2026 05:01:14 +0000
Files and hashes: 1: tTH9z8mwGJDfT_IMVoZEr9XeyPo.roa (hash: dBYpyH5AjRb6Djna2Zc1jF8y+nZctTiJ8dcSq4LnTek=)
2: uocjZRyrzwAJzygaKlHFtOkFYi8.crl (hash: wzfKkAgj9KEGSzzr/HfvrYb3XxNeGN1fxq+vwXEecO4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 05:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d3:f4:77:ce:67:cf:f6:fb:20:8c:43:3b:4b:ea:53:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba8723651cabcf0009cf281a2a51c5b4e905622f
Validity
Not Before: Jun 17 05:01:14 2026 GMT
Not After : Jun 18 05:01:14 2026 GMT
Subject: CN=a531e92e6be5b00aac9bc1ef129fd9437e209207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:e9:d8:71:21:fa:c5:0d:8b:80:99:c5:a7:a8:
b2:f6:a6:b3:f8:f6:d9:d0:64:c9:8d:f2:cd:1b:1c:
9a:79:4d:9a:bb:75:b2:6a:52:81:7f:9d:47:c9:66:
d9:0f:f7:88:0b:52:73:a9:9b:46:fb:bd:86:85:cf:
cc:f2:af:77:84:a9:92:90:95:8b:d8:4a:1b:c8:94:
71:18:11:58:82:23:ee:18:8b:35:27:20:9d:7f:9c:
3a:ba:42:b8:9a:88:ef:ef:8c:ee:82:3f:d9:d2:fe:
b0:59:9d:2b:cf:83:a4:12:71:aa:94:5e:7c:ec:17:
f6:b8:29:6d:bc:82:f9:16:c3:c2:9e:42:8c:9d:75:
ee:8c:8f:22:7a:f7:08:0b:17:e1:e4:eb:93:a0:d0:
27:0c:d8:8c:1b:7f:88:d8:54:93:b1:10:1e:89:3b:
5f:15:69:87:22:b7:b9:74:11:80:b0:db:41:2d:4e:
f1:07:5b:80:2f:da:b5:b4:d8:18:d9:5e:b7:66:76:
34:2f:08:14:3d:8e:66:22:4f:98:b4:fd:ab:93:7c:
77:82:32:cd:46:f9:63:aa:7f:e3:3c:00:e5:a0:eb:
1f:13:64:ec:de:ad:e7:56:62:af:1a:55:a2:76:12:
9d:16:c6:5a:48:52:94:a8:8b:d0:be:fd:8d:8a:44:
b2:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:31:E9:2E:6B:E5:B0:0A:AC:9B:C1:EF:12:9F:D9:43:7E:20:92:07
X509v3 Authority Key Identifier:
keyid:BA:87:23:65:1C:AB:CF:00:09:CF:28:1A:2A:51:C5:B4:E9:05:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uocjZRyrzwAJzygaKlHFtOkFYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/ebd67c-009a-45fc-8ff7-2e70ded9d94f/1/uocjZRyrzwAJzygaKlHFtOkFYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:59:8b:c9:13:b3:43:9a:23:3d:92:09:63:d8:da:86:0e:74:
d3:e9:b3:77:ed:8a:b3:40:e7:84:31:9b:6e:e0:53:17:ad:3e:
a8:ce:13:94:13:b9:5a:f1:1c:31:fe:3f:b8:dd:dd:e1:80:3d:
dc:3c:d2:0a:f3:00:9c:6c:45:01:14:c0:77:08:b3:af:ea:8c:
ff:f9:64:e0:43:d4:65:29:44:19:57:1c:0e:96:40:a2:82:93:
32:ab:2f:7a:f0:21:81:57:01:b6:57:fd:9c:4d:66:6e:8b:62:
d6:ef:bd:34:3e:bb:ef:c7:9e:fc:29:9e:60:e9:a7:89:d5:3c:
55:70:e7:79:3c:7c:e2:29:c9:26:51:28:b0:7b:4e:67:81:34:
78:4c:d3:2d:99:d3:d8:77:9e:37:22:41:32:2e:59:ae:26:93:
66:c4:35:61:81:7d:a8:cc:57:14:8f:98:b0:88:9c:92:c3:ac:
ea:f3:69:ef:8c:e9:fa:da:10:56:e7:02:b2:f9:55:1f:14:6c:
b9:60:1b:38:a1:28:31:64:95:20:22:f2:11:63:a0:3d:40:cf:
35:f4:dc:a0:5c:bb:4a:ff:cc:93:7e:81:e4:6a:ba:7b:d3:28:
a7:29:38:6f:19:f6:65:3b:a1:3a:30:5c:91:36:78:c3:46:c8:
5f:f0:eb:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:27:55 2026 by rpki-client